EazzyAI ("we," "us," or "our") is committed to protecting your privacy and handling your data with transparency, security, and respect. This Privacy Policy explains what data we collect, how we use it, with whom we share it, how we protect it, and your rights regarding your personal data.
This policy applies to all users of the EazzyAI platform, website, and related services (collectively, the "Service"), regardless of where you are located.
EazzyAI operates the AI marketing platform available at eazzyai.com.
Data Controller Contact:
Email: hey@eazzyai.com
Website: https://eazzyai.com
For users in the European Economic Area (EEA) or United Kingdom, we are the data controller of your personal data. For users in other jurisdictions, we fulfill equivalent responsibilities under applicable local law.
Account Registration Data
Subscription and Billing Data
Brand Workspace Data
You create and control this data. It may include:
Usage Data
Technical Data
Analytics Data
We use Google Analytics and Microsoft Clarity to understand how users interact with the Service. These tools may collect behavioral data including mouse movements, scroll patterns, click heatmaps, and session recordings to help us improve user experience.
Facebook / Meta Integration
If you connect a Facebook Page through our Social Post Studio features, we receive:
3.1 To Provide the Service
Contract Performance3.2 To Power AI Features
Contract / Legitimate InterestImportant: We do not use your Brand DNA profiles, specific workspace content, or personally identifiable workspace data to train Third-Party AI Models.
3.3 To Improve the Service
Legitimate Interest3.4 To Communicate with You
Contract Performance3.5 Marketing Communications
ConsentWith your consent, we may send you promotional emails about new features, offers, and EazzyAI news. You may withdraw this consent at any time by unsubscribing or by contacting privacy@eazzyai.com.
| Data Type | Retention Period |
|---|---|
| Account and profile data | Duration of account + 90 days after deletion request |
| Brand Workspace data (files, Brand DNA, Knowledge Base) | Duration of active Subscription + 30 days after termination |
| Chat session history | 12 months from last activity, or upon account deletion |
| Billing records and transaction history | 7 years (legal and tax compliance) |
| Server logs and technical data | 90 days |
| Analytics data (Google Analytics, Clarity) | Per provider retention settings (typically 13–26 months) |
| Backup data | Up to 90 days after deletion from live systems |
You may request deletion of your data at any time (see Section 8). Some data may be retained beyond these periods where required by law or for legitimate legal defense purposes.
EazzyAI routes processing tasks to specialized AI model providers based on language, task type, and content requirements. The following providers may process your inputs when you use corresponding features:
| Provider | Models | Primary Purpose |
|---|---|---|
| DeepSeek | DeepSeek R1, DeepSeek V3 | Strategic reasoning, brand analysis, content generation |
| Gemini 2.5 Flash | SEA/multilingual content, video analysis | |
| OpenAI | GPT-4o-mini, GPT Image 2 | Orchestration, fallback generation, image generation |
| xAI | Grok Beta | Social trend analysis |
| Alibaba Cloud | Qwen 2.5-72B, Qwen-VL-Plus, text-embedding-v3 | East Asian language content, vision analysis, embeddings |
| Mistral AI | Mistral Small | European language content |
| FAL.ai | Flux, Ideogram, Nano Banana, SeedreamV4 | Image generation infrastructure |
What we send to these providers: Excerpts of your inputs sufficient to complete the requested task (e.g., your brand description, the marketing brief you submitted). We do not send your payment details, account passwords, or full workspace file repositories to these providers.
By using the Service, you acknowledge and consent to your content being processed by these third-party providers as described above.
| Category | Provider | Purpose |
|---|---|---|
| Cloud infrastructure & database | Supabase | PostgreSQL database, pgvector storage, file storage, authentication |
| Payment processing | Stripe | Subscription billing, card processing |
| Web analytics | Google Analytics | Usage analytics and traffic analysis |
| Session recording & heatmaps | Microsoft Clarity | User behavior analysis for UX improvement |
| Web search & URL extraction | Tavily API | Research tool, URL content extraction |
| Background job processing | Upstash (QStash) | Durable background job execution |
| Advertising platforms | Meta (Facebook) | Paid advertising campaigns |
EazzyAI operates globally, and your data may be transferred to and processed in countries other than your country of residence, including Singapore, the United States, and countries where our AI model providers operate their infrastructure.
Where we transfer personal data from the EEA, UK, or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission and Data Processing Agreements with our providers.
Depending on your location, you may have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data, subject to legal retention requirements.
Right to Data Portability
Receive your personal data in a structured, machine-readable format.
Right to Restrict Processing
Request that we restrict processing of your data in certain circumstances.
Right to Object
Object to processing where we rely on legitimate interest as the legal basis.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time without affecting prior processing.
No Automated Decisions
We do not make legally significant automated decisions without human review.
How to Exercise Your Rights
Submit a request to: hey@eazzyai.com. We will respond within 30 days.
EEA/UK Users: You also have the right to lodge a complaint with your local data protection authority.
California (CCPA) Users: We do not sell personal information. To exercise CCPA rights, contact hey@eazzyai.com.
The Service is not directed to children under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 18 without parental consent, we will take steps to delete that data promptly. If you believe a child has provided us with personal data, contact hey@eazzyai.com.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:
Encryption in Transit
All data transmitted between your browser and our servers is encrypted using TLS/HTTPS.
Encryption at Rest
Sensitive data stored in our database is encrypted at rest.
Access Controls
Per-workspace and per-user data isolation; all database queries are scoped to authenticated workspace and user identifiers.
Authentication
JWT-based authentication on all API routes; Supabase Auth for account security.
Signed Storage URLs
Media files are accessible only via time-limited signed URLs (1-hour expiry), never via permanent public links.
Background Job Security
Long-running processing jobs are authenticated and isolated per workspace.
No security system is impenetrable. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.
Workspace Isolation
All data in EazzyAI is scoped to individual Brand Workspaces. Users cannot access data from workspaces they are not members of. Database queries are enforced at the application layer with workspace ID scoping.
Shared Within Workspace
All members (Owner and Editors) share access to:
Private User Data
The following data is private to each individual user and is not shared with other workspace members: Master Agent chat session history, individual chat messages, and personal account information.
We may update this Privacy Policy periodically. When we make material changes, we will update the "Last Updated" date, notify you via email and/or in-app notification at least 14 days before the changes take effect, and in some cases seek your renewed consent.
Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.
Privacy Team
Email: hey@eazzyai.com
Website: https://eazzyai.com/privacy
We aim to respond to all privacy inquiries within 5 business days, and to formal data subject requests within 30 days.
| Processing Activity | Legal Basis |
|---|---|
| Account creation and management | Contract performance (Art. 6(1)(b) GDPR) |
| Providing AI-powered Service features | Contract performance (Art. 6(1)(b) GDPR) |
| Processing uploaded files for Brand Knowledge Base | Contract performance (Art. 6(1)(b) GDPR) |
| Routing inputs to Third-Party AI Model providers | Contract performance (Art. 6(1)(b) GDPR) |
| Billing and payment processing | Contract performance + Legal obligation (Art. 6(1)(b)(c) GDPR) |
| Sending transactional communications | Contract performance (Art. 6(1)(b) GDPR) |
| Service improvement via anonymized analytics | Legitimate interest (Art. 6(1)(f) GDPR) |
| Debugging and platform security | Legitimate interest (Art. 6(1)(f) GDPR) |
| Marketing communications | Consent (Art. 6(1)(a) GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
This Privacy Policy was last updated on May 25, 2026. Previous versions are available upon request at hey@eazzyai.com.