Privacy Policy

Who we are

Easy-Mikhmon is the data controller for the account and router data you provide. You can reach us at contact@easy-mikhmon.com.

Data we collect

Account and identity. When you sign in we use a secure identity provider (Keycloak, OpenID Connect). We store your email address, your name (the last name is optional at registration), an account identifier, your organisation (tenant) and your role.

Organisation details. When you set up your organisation we store its name and country (used for billing and to choose the nearest network region).

Router configuration. When you add a MikroTik router you provide its login username and password, and optionally a display name, hotspot name, currency, contact phone and email, DNS name and notes. The router’s MAC address is collected automatically from the device to prevent the same router being connected through more than one VPN. The router password is encrypted at rest.

Team members. If you invite teammates we store their email address and the access level you grant them per router.

Billing references. Payments are handled by our billing provider (Lago) and an optional payment processor (Stripe). We store billing references such as a customer ID, subscription ID and wallet balance. We do not store your card or bank details, so you re-enter your payment method each time you renew your subscription.

Sales records. Each time the web app reads a sales report from one of your routers, it keeps a copy of those sales in our database: the voucher code, plan, price and currency, when the voucher was first used and when it expires, the data it used, and the MAC address and network name of the device that used it. This is what lets you see a router’s sales while it is offline and compare your routers.

Ticket lists. To open a router’s ticket list quickly, the web app keeps a temporary copy of it in our cache: each ticket’s username, plan, limits and usage, its comment (batch, expiry, price, first use and any note you wrote on it) and the MAC address of the device it is bound to, if any (never its password). The copy is replaced each time the list is read from the router and deleted automatically after 10 minutes at most.

Your hotspot customers’ data

The device MAC addresses and names in your sales records and ticket lists belong to the people who buy your vouchers. For that data you are the controller and we process it on your behalf, only to show your sales back to you: it is never used for anything else, never shared, and never used to contact those customers. You are responsible for informing your hotspot customers, for example in your hotspot’s terms of use.

Local network scanning (stays on your device)

To help you add a router, the mobile app can read your phone’s local Wi-Fi address and scan your local network to discover nearby MikroTik devices. This information is used only on your device to assist setup and is not transmitted to or stored by us.

How we use your data

• To create and operate your account and organisation.
• To connect to and manage the routers you add.
• To keep a copy of your routers’ sales, so you can see them while a router is offline and compare your routers.
• To process subscriptions, invoices and payments.
• To provide support and respond to your enquiries.
• To keep the service secure and meet legal obligations.

Device permissions

The Android app requests the Internet permission only, so it can reach our service and your routers. It does not request access to your camera, location, contacts, photos or files.

Analytics and tracking

The mobile app contains no third-party analytics, advertising or crash-reporting SDKs. We do not track you across apps or websites, and we do not sell your data.

Storage and security

Data is transmitted over encrypted connections (TLS). Router passwords are encrypted at rest. Access to your data is restricted to your account and the teammates you authorise.

Third parties we rely on

• Keycloak — sign-in and identity.
• Lago, and optionally Stripe — billing and payments.
• Our infrastructure and hosting providers, who process data on our behalf to run the service.

Data retention and deletion

We keep your data for as long as your account is active. You can ask us to delete your account and associated data by contacting contact@easy-mikhmon.com. Some records may be retained where required for legal or accounting reasons.

Sales records, including the device MAC addresses and names in them, are deleted automatically 24 months after the sale. They are also deleted 3 days after you remove a router from your account (that router’s records), and when your account is deleted (all of them); if our sales service cannot be reached at that moment, they are removed by the 24-month deletion instead.

Ticket list copies are deleted automatically 10 minutes at most after they are read from the router.

Your rights

You may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact contact@easy-mikhmon.com.

Children

Easy-Mikhmon is a business tool and is not directed at children under 13. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the latest version, and significant changes will be communicated through the service.

Contact us

For any privacy question or request, email us at contact@easy-mikhmon.com.