easygroup

Legal & Privacy

This page sets out how NOVAGRID ENERGY LIMITED, trading as easygroup and operating the Easy AI service at easy-group.ai, handles personal data under the EU General Data Protection Regulation (Regulation (EU) 2016/679) and the UK GDPR together with the Data Protection Act 2018, and the terms on which the service is provided.

LAST UPDATED 01 SEPTEMBER 2026 VERSION 1.0
1 · Privacy Policy 2 · Cookie Policy 3 · GDPR & Data Processing 4 · Terms of Service
01 / PRIVACY POLICY

Privacy Policy

1. Who we are

NOVAGRID ENERGY LIMITED (company number 17167206), registered office Nicholaston House Nicholaston, Penmaen, Swansea, West Glamorgan, United Kingdom, SA3 2HL, is the data controller for personal data described in this policy. Contact: info@easy-group.ai.

2. Scope

This policy covers the easy-group.ai website, enquiries, customer support, and the Easy AI service provided to solar installation businesses in Ireland, Germany, Spain, Italy, the Netherlands, Sweden, Poland, Hungary, Romania, Lithuania, Australia and other markets we serve. Where a customer uses Easy to process data about their own end customers, that customer is the controller and easygroup acts as processor — see section 3 of this page.

3. What we collect

CATEGORY
EXAMPLES
LAWFUL BASIS
Enquiry data
Name, company, email, phone, country, message content
Legitimate interests / pre-contractual steps
Account data
User names, work email, role, seat and billing records
Contract performance
Service content
Customer and project records, messages, proposals, BOMs and other work processed on the customer's instruction
Processed on behalf of the customer as controller
Technical data
IP address, device and browser information, security and audit logs
Legitimate interests (security, service integrity)
Analytics & marketing
Non-essential cookies, campaign response, newsletter subscription
Consent

We do not knowingly collect special category data and ask customers not to submit it to the service.

4. How we use personal data

To respond to enquiries and activate account access.
To provide, operate, secure and support the Easy AI service and to carry out the work a user asks Easy to complete.
To invoice, keep accounting records and meet legal or tax obligations.
To improve reliability and quality. We do not use customer service content to train third-party general-purpose AI models.
To send service messages, and marketing only where consent has been given or a soft opt-in applies.

5. Automated processing

Easy prepares drafts, proposals, replies and recommendations automatically. Output is intended for review by the installer, and no decision producing legal effects for an individual under Article 22 GDPR is taken by Easy alone. Where a request requires human attention, Easy escalates it to the installer.

6. Sharing and sub-processors

We share personal data with hosting, communications, AI model, payment and analytics providers acting as sub-processors under written contracts, with professional advisers, and with authorities where legally required. A current sub-processor list is available on request from info@easy-group.ai. We do not sell personal data.

7. International transfers

Service data is hosted in the European Economic Area where available. Where personal data is transferred outside the EEA or the United Kingdom, we rely on an adequacy decision, or on the European Commission Standard Contractual Clauses together with the UK International Data Transfer Addendum, supported by a transfer risk assessment.

8. Retention

Enquiry data is kept for up to 24 months from the last contact. Account and service content is kept for the term of the agreement and deleted or returned within 90 days of termination unless a longer period is required by law. Accounting records are kept for six years. Security logs are kept for up to 12 months.

9. Security

We apply encryption in transit and at rest, role-based access control, least-privilege administration, logging, backup and restore procedures, supplier due diligence and staff confidentiality obligations. Personal data breaches are notified to the competent supervisory authority within 72 hours where required, and to affected customers without undue delay.

10. Your rights

Under the EU GDPR and the UK GDPR you have the right of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, withdrawal of consent at any time, and the right not to be subject to solely automated decision-making with legal effect.

Requests go to info@easy-group.ai and are answered within one month. Complaints may be made to the UK Information Commissioner's Office (ico.org.uk) or to the supervisory authority of your EU member state — for example the Data Protection Commission in Ireland, the AEPD in Spain, the Garante in Italy, or the Autoriteit Persoonsgegevens in the Netherlands.

02 / COOKIE POLICY

Cookie Policy

Under the EU ePrivacy Directive as implemented locally and the UK Privacy and Electronic Communications Regulations, we set only strictly necessary cookies by default. Analytics and marketing cookies are set after consent given through the cookie banner, and consent can be changed or withdrawn at any time.

STRICTLY NECESSARY
Session, authentication, load balancing, security and consent-state cookies. No consent required. Session to 12 months.
ANALYTICS
Aggregated page and campaign measurement. Consent required. Up to 13 months.
MARKETING
Advertising and social platform cookies where campaigns run. Consent required. Up to 13 months.
03 / GDPR & DATA PROCESSING

GDPR & Data Processing

When an installer uses Easy to work with their own customer and project data, the installer is the controller and NOVAGRID ENERGY LIMITED is the processor. A Data Processing Agreement meeting Article 28 GDPR is available and is incorporated into the service agreement on request.

Subject matter: provision of the Easy AI service — sales, proposal, CRM, project preparation and customer communication work.
Data subjects: the customer's staff, leads, customers and site contacts.
Processor duties: act only on documented instructions, keep confidentiality, apply Article 32 security measures, assist with data subject requests and impact assessments, notify breaches without undue delay, and delete or return data at the end of the agreement.
Sub-processors: engaged under equivalent written terms; customers are informed of changes and may object on reasonable data protection grounds.
Records and audit: processing records are maintained and reasonable audit information is provided on request.

To request the DPA, the sub-processor list or the transfer documentation, write to info@easy-group.ai.

04 / TERMS OF SERVICE

Terms of Service

1. Agreement

These terms govern business use of the Easy AI service supplied by NOVAGRID ENERGY LIMITED. The service is provided to businesses; it is not offered to consumers.

2. Free credit

Accounts are activated by the Easy team following contact with us and start with €10 of free service credit. The credit is applied against usage on the account, is not redeemable for cash and is not transferable. No payment is due while the free credit lasts. Access is granted per agreed seat, and may be suspended or ended where use falls outside the agreed scope. Continued use after the credit is used up requires a subscription agreed with us.

3. Fees

Subscription fees are €199 per seat per month for Basic and €399 per seat per month for Pro, exclusive of VAT and other applicable taxes. Customers in Australia are invoiced in Australian dollars at A$329 per seat per month for Basic and A$659 per seat per month for Pro, exclusive of GST. Enterprise pricing is agreed in writing case by case. Fees are invoiced in advance. Where a reverse charge applies within the EU, the customer's valid VAT identification number is required.

4. Acceptable use

Seats are for named users and must not be shared. Customers must not use the service unlawfully, must not send unsolicited communications through it, must not attempt to reverse engineer it, and must have a lawful basis for the personal data they submit.

5. Customer data and output

The customer keeps all rights in the data it submits and in the output generated for it. easygroup keeps all rights in the service, software and models. Output prepared by Easy — including proposals, bills of materials, replies and recommendations — is intended for review by the customer before it is relied upon or sent, and the customer remains responsible for technical, commercial and regulatory accuracy.

6. Availability and support

We aim to provide the service with reasonable skill and care and to keep planned maintenance outside normal European working hours where practical. Support is provided by email at info@easy-group.ai.

7. Term and termination

Subscriptions run monthly unless agreed otherwise and may be terminated with 30 days' written notice effective at the end of the current period. Either party may terminate immediately for material breach that is not remedied within 14 days.

8. Liability

Neither party excludes liability that cannot be excluded by law. Subject to that, neither party is liable for indirect or consequential loss or loss of profit, and each party's total liability in any 12-month period is limited to the fees paid or payable in that period.

9. Governing law

These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction, without affecting mandatory data protection rights and remedies available to individuals in their country of residence.

NOTE

This text is prepared as a working draft covering EU and UK requirements. It should be reviewed by qualified legal counsel, and country-specific details such as local imprint duties in Germany, should be confirmed before publication.