Ezel privacy & data

Ezel is the data controller responsible for the processing of your personal information.

Email address (used for passwordless authentication via magic links)

We do not store your full credit card numbers or CVV codes on our servers

Organization or company name (optional)

Chat conversations and queries submitted to the AI

IP address (trimmed before being passed to third-party analytics), request metadata, and User-Agent string

Pages viewed, referring URL (where permitted), approximate country-level location, browser and device type, session duration, and interaction events

Process your documents and queries through our AI providers (Anthropic, OpenAI)

Calculate token usage and generate accurate billing

Detect, prevent, and address fraud, abuse, security incidents, and Terms of Service violations

Develop new features and functionality based on user feedback

Account information: Retained for the duration of your active account

Documents and chat history: Stored indefinitely while your account is active, accessible to you at any time

If your account remains inactive (no login or usage) for 24 consecutive months, we will send a notice to your registered email address

Customer data is stored on secure servers located in the United States.

Standard Contractual Clauses (SCCs): We and our US-based subprocessors (including Anthropic, OpenAI, Stripe, Supabase, Cloudflare, Google, Postmark, and EmailOctopus) have entered into the European Commission's Standard Contractual Clauses (2021/914)

Where a subprocessor is certified under the EU-US Data Privacy Framework (and the UK Extension / Swiss-US Data Privacy Framework), we may also rely on that certification as a lawful transfer mechanism.

For a complete, up-to-date list of all subprocessors with access to personal data, please see our Subprocessor List.

You can delete your entire account from the Settings page in your account dashboard

Right to access: Request a copy of your personal data in a structured, commonly used format

Right to correct: Request correction of inaccurate or incomplete personal information

Right to delete (Right to be Forgotten): Request deletion of your personal data, subject to legal obligations

Right to data portability: Request a copy of your data in a portable format (feature in development)

Right to object: Object to processing based on legitimate interests

Right to restriction: Request that we limit how we process your personal data in certain circumstances

We do NOT sell, rent, or trade your personal information. We never have, and we never will.