Privacy Policy

Last updated: March 14, 2026

EZ IT Solutions ("Company," "we," "us," or "our") operates the ezCyber Portal ("Portal"). This Privacy Policy describes how we collect, use, store, and protect your information when you use our Portal.

1. Information We Collect

1.1 User Account Information

When you sign in to the Portal using Microsoft or Google Single Sign-On (SSO), we receive and store:

  • Name and email address from your Microsoft or Google account.
  • Microsoft Entra ID (Azure AD) tenant and user identifiers, or Google account identifiers.
  • Session tokens for authentication purposes.

1.2 QuickBooks Financial Data

When an administrator connects a QuickBooks account, we access and synchronize:

  • Customer records (names, contact details, account balances).
  • Invoices, line items, and payment records.
  • Account and billing information relevant to managed services.

This data is accessed through the official Intuit QuickBooks API using OAuth 2.0 authorization. Access can be revoked at any time by disconnecting the QuickBooks integration through the Portal settings.

1.3 Microsoft 365 Data

With tenant administrator consent, we may access the following data through the Microsoft Graph API:

  • User and group directory information.
  • Device management and compliance status.
  • License and subscription information.
  • Security and compliance alerts.

1.4 Google Workspace Data

With domain administrator consent, we may access the following data through the Google Admin SDK and Enterprise License Manager API:

  • User directory information (names, email addresses, organizational units, admin status).
  • Account status (active, suspended, two-step verification enrollment).
  • License and subscription assignments.

This data is accessed through official Google APIs using OAuth 2.0 authorization. Access can be revoked at any time by disconnecting the Google Workspace integration through the Portal settings or via your Google Admin console.

1.5 Device Management Data

Through integration with NinjaOne, we may access and synchronize:

  • Device inventories (names, operating systems, hardware specifications).
  • Device health and monitoring status.
  • Software inventories and patch status.

1.6 Service and Operational Data

Through integrations with our service management platforms, we process:

  • Support tickets and service request history.
  • Device inventories and monitoring data.
  • Documentation and knowledge base content.

2. How We Use Your Information

We use collected information exclusively for the following purposes:

  • Authentication and access control: verifying your identity and managing role-based access to Portal features.
  • Internal MSP operations: managing client relationships, service delivery, and operational workflows.
  • Invoicing and billing: synchronizing financial data to generate accurate invoices and track payments.
  • Customer management: maintaining up-to-date client records across our service platforms.
  • AI-assisted operations: using Anthropic Claude to help generate documentation, analyze service data, and assist with operational tasks. Data sent to Claude is limited to the minimum necessary for the specific task.
  • Service improvement: improving the reliability, performance, and functionality of the Portal.

3. Data Storage and Security

All data is stored in PostgreSQL databases hosted on secured virtual servers. We implement the following security measures:

  • Encryption at rest for all stored data.
  • TLS/SSL encryption for all data in transit.
  • Firewall-restricted access to database servers.
  • Key-based SSH authentication for server access.
  • Role-based access controls within the Portal.
  • OAuth 2.0 tokens stored encrypted and refreshed automatically.

4. Third-Party Services

The Portal integrates with the following third-party services, each governed by their own privacy policies:

  • Intuit QuickBooks: financial data synchronization for invoicing and billing. Intuit Privacy Statement
  • Microsoft Azure / Microsoft 365: authentication, directory services, and device management. Microsoft Privacy Statement
  • Google Workspace: user directory and license management. Google Privacy Policy
  • NinjaOne: device management, monitoring, and remote access. NinjaOne Privacy Policy
  • HaloPSA: ticketing, service management, and client records.
  • Anthropic (Claude): AI-assisted content generation and operational analysis. Data sent to Anthropic is processed per their Privacy Policy.

We do not sell, rent, or share your data with third parties for marketing or advertising purposes.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

  • Account data: retained for the duration of the business relationship and deleted upon account termination, subject to legal retention requirements.
  • QuickBooks data: synchronized data is retained while the integration is active. Disconnecting the integration removes stored OAuth tokens. Historical synchronized records may be retained for billing accuracy.
  • Session data: session tokens expire automatically and are purged periodically.
  • Logs: server and application logs are retained for up to 90 days for troubleshooting and security purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data, subject to legal retention obligations.
  • Withdraw consent for specific data processing activities.
  • Request a copy of your data in a portable format.

To exercise any of these rights, contact us at the email address provided below.

7. Cookies and Sessions

The Portal uses session cookies strictly for authentication and maintaining your logged-in state. We do not use tracking cookies, analytics cookies, or third-party advertising cookies. Session cookies are encrypted and expire when you sign out or after a period of inactivity.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the Portal after any changes constitutes acceptance of the updated policy.

9. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at:

EZ IT Solutions
Email: support@ezit.solutions