LegalVersion 1.0

Privacy Policy

Effective Date: June 1, 2026Last Updated: May 25, 2026

EazzyAI ("we," "us," or "our") is committed to protecting your privacy and handling your data with transparency, security, and respect. This Privacy Policy explains what data we collect, how we use it, with whom we share it, how we protect it, and your rights regarding your personal data.

This policy applies to all users of the EazzyAI platform, website, and related services (collectively, the "Service"), regardless of where you are located.

1Who We Are and How to Contact Us

EazzyAI operates the AI marketing platform available at eazzyai.com.

Data Controller Contact:
Email: hey@eazzyai.com
Website: https://eazzyai.com

For users in the European Economic Area (EEA) or United Kingdom, we are the data controller of your personal data. For users in other jurisdictions, we fulfill equivalent responsibilities under applicable local law.

2Data We Collect

2.1 Data You Provide Directly

Account Registration Data

  • Full name
  • Email address
  • Password (stored in hashed form; we never store plaintext passwords)
  • Company name and role (optional)
  • Country or region

Subscription and Billing Data

  • Payment card information (processed and stored by our payment processor; we do not store full card numbers)
  • Billing address
  • Transaction history and invoices

Brand Workspace Data

You create and control this data. It may include:

  • Brand name, website URL, and brand description
  • Uploaded files: documents (PDF, Word, TXT), images (JPG, PNG, GIF), and videos (MP4, MOV)
  • Brand colors, fonts, and tone of voice guidelines
  • Product descriptions, pricing, and feature information
  • Customer profile information (ICP profiles) — these should describe fictional persona archetypes, not real individuals
  • Marketing plans, campaign content, and creative assets

2.2 Data Collected Automatically

Usage Data

  • Pages and features accessed, frequency and duration of use
  • Actions taken within the platform (content generated, files uploaded, tools invoked)
  • Session timestamps and duration

Technical Data

  • IP address and approximate geographic location
  • Browser type and version; device type, operating system, and screen resolution
  • Referral URL and traffic source

Analytics Data

We use Google Analytics and Microsoft Clarity to understand how users interact with the Service. These tools may collect behavioral data including mouse movements, scroll patterns, click heatmaps, and session recordings to help us improve user experience.

2.3 Data from Third-Party Sources

Facebook / Meta Integration

If you connect a Facebook Page through our Social Post Studio features, we receive:

  • Facebook Page name, ID, and access token (encrypted)
  • Page performance data (reach, engagement, post metrics) — used only to personalize marketing recommendations within your workspace

3How We Use Your Data

3.1 To Provide the Service

Contract Performance
  • Creating and managing your account and Brand Workspace
  • Processing payments and managing your Subscription
  • Executing AI-powered features including Brand DNA extraction, content generation, image creation, and marketing plan generation
  • Processing uploaded files through our AI pipeline (text extraction, vectorization, semantic search)
  • Enabling workspace collaboration and managing member permissions

3.2 To Power AI Features

Contract / Legitimate Interest
  • Passing relevant context to Third-Party AI Model providers (see Section 5)
  • Creating and storing vector embeddings of your brand content for semantic retrieval (Hybrid RAG)
  • Maintaining a multi-layer memory system to provide coherent, brand-consistent outputs across sessions

Important: We do not use your Brand DNA profiles, specific workspace content, or personally identifiable workspace data to train Third-Party AI Models.

3.3 To Improve the Service

Legitimate Interest
  • Analyzing aggregated, anonymized usage patterns to understand which features are used most
  • Monitoring platform performance, debugging errors, and resolving technical issues
  • Developing and testing new features

3.4 To Communicate with You

Contract Performance
  • Sending transactional emails (receipts, account notifications, password resets)
  • Sending product updates, feature announcements, and maintenance notices
  • Responding to your support requests

3.5 Marketing Communications

Consent

With your consent, we may send you promotional emails about new features, offers, and EazzyAI news. You may withdraw this consent at any time by unsubscribing or by contacting privacy@eazzyai.com.

4Data Retention

Data TypeRetention Period
Account and profile dataDuration of account + 90 days after deletion request
Brand Workspace data (files, Brand DNA, Knowledge Base)Duration of active Subscription + 30 days after termination
Chat session history12 months from last activity, or upon account deletion
Billing records and transaction history7 years (legal and tax compliance)
Server logs and technical data90 days
Analytics data (Google Analytics, Clarity)Per provider retention settings (typically 13–26 months)
Backup dataUp to 90 days after deletion from live systems

You may request deletion of your data at any time (see Section 8). Some data may be retained beyond these periods where required by law or for legitimate legal defense purposes.

5Third-Party AI Model Providers

EazzyAI routes processing tasks to specialized AI model providers based on language, task type, and content requirements. The following providers may process your inputs when you use corresponding features:

ProviderModelsPrimary Purpose
DeepSeekDeepSeek R1, DeepSeek V3Strategic reasoning, brand analysis, content generation
GoogleGemini 2.5 FlashSEA/multilingual content, video analysis
OpenAIGPT-4o-mini, GPT Image 2Orchestration, fallback generation, image generation
xAIGrok BetaSocial trend analysis
Alibaba CloudQwen 2.5-72B, Qwen-VL-Plus, text-embedding-v3East Asian language content, vision analysis, embeddings
Mistral AIMistral SmallEuropean language content
FAL.aiFlux, Ideogram, Nano Banana, SeedreamV4Image generation infrastructure

What we send to these providers: Excerpts of your inputs sufficient to complete the requested task (e.g., your brand description, the marketing brief you submitted). We do not send your payment details, account passwords, or full workspace file repositories to these providers.

By using the Service, you acknowledge and consent to your content being processed by these third-party providers as described above.

6Other Third-Party Service Providers

CategoryProviderPurpose
Cloud infrastructure & databaseSupabasePostgreSQL database, pgvector storage, file storage, authentication
Payment processingStripeSubscription billing, card processing
Web analyticsGoogle AnalyticsUsage analytics and traffic analysis
Session recording & heatmapsMicrosoft ClarityUser behavior analysis for UX improvement
Web search & URL extractionTavily APIResearch tool, URL content extraction
Background job processingUpstash (QStash)Durable background job execution
Advertising platformsMeta (Facebook)Paid advertising campaigns

7International Data Transfers

EazzyAI operates globally, and your data may be transferred to and processed in countries other than your country of residence, including Singapore, the United States, and countries where our AI model providers operate their infrastructure.

Where we transfer personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission and Data Processing Agreements with our providers.

8Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

Right to Data Portability

Receive your personal data in a structured, machine-readable format.

Right to Restrict Processing

Request that we restrict processing of your data in certain circumstances.

Right to Object

Object to processing where we rely on legitimate interest as the legal basis.

Right to Withdraw Consent

Withdraw consent for marketing communications at any time without affecting prior processing.

No Automated Decisions

We do not make legally significant automated decisions without human review.

How to Exercise Your Rights

Submit a request to: hey@eazzyai.com. We will respond within 30 days.

EEA/UK Users: You also have the right to lodge a complaint with your local data protection authority.

California (CCPA) Users: We do not sell personal information. To exercise CCPA rights, contact hey@eazzyai.com.

9Cookies and Tracking Technologies

CategoryPurposeOpt Out?
EssentialAuthentication, session management, securityNo
AnalyticsGoogle Analytics: traffic analysis and usage metricsYes
BehavioralMicrosoft Clarity: session recordings, heatmaps, click trackingYes
PreferencesSaving your language, display, and workspace settingsLimited

10Children's Privacy

The Service is not directed to children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that data promptly. If you believe a child has provided us with personal data, contact hey@eazzyai.com.

11Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

Encryption in Transit

All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.

Encryption at Rest

Sensitive data stored in our database is encrypted at rest.

Access Controls

Per-workspace and per-user data isolation; all database queries are scoped to authenticated workspace and user identifiers.

Authentication

JWT-based authentication on all API routes; Supabase Auth for account security.

Signed Storage URLs

Media files are accessible only via time-limited signed URLs (1-hour expiry), never via permanent public links.

Background Job Security

Long-running processing jobs are authenticated and isolated per workspace.

No security system is impenetrable. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

12Workspace Data Isolation and Collaboration

Workspace Isolation

All data in EazzyAI is scoped to individual Brand Workspaces. Users cannot access data from workspaces they are not members of. Database queries are enforced at the application layer with workspace ID scoping.

Shared Within Workspace

All members (Owner and Editors) share access to:

  • Brand DNA Profile
  • Offerings and ICP Profiles
  • Brand Knowledge Base files
  • Creative Library cases

Private User Data

The following data is private to each individual user and is not shared with other workspace members: Master Agent chat session history, individual chat messages, and personal account information.

13AI-Generated Content and Privacy

  • Do not input personal data about real individuals into the Service beyond what is necessary. ICP profiles should describe persona archetypes, not contain real people's names or contact information.
  • Generated content may reflect patterns in training data. While we route to specialized models to reduce bias, we cannot guarantee that Generated Content is free from all biases or errors.
  • We do not use the specific outputs generated for your account to train Third-Party AI Models.

14Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last Updated" date, notify you via email and/or in-app notification at least 14 days before the changes take effect, and in some cases seek your renewed consent.

Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

15Contact Us

Privacy Team

Email: hey@eazzyai.com

Website: https://eazzyai.com/privacy

We aim to respond to all privacy inquiries within 5 business days, and to formal data subject requests within 30 days.

This Privacy Policy was last updated on May 25, 2026. Previous versions are available upon request at hey@eazzyai.com.