Privacy Policy

This Privacy Policy explains how EzyLab, LLC (“EzyStudio”, “we”, “us”) collects, uses, shares and protects Personal Data when you visit our websites or use our products and services (the “Services”), and the rights and choices you have.

1. Scope

This policy applies to Personal Data we process as a controller: for example, when you visit our website, create an account, buy a plan or an app, sell in the App Store, join as a partner agency, or contact us.

It does not apply to Personal Data that our customers collect through the websites and apps they build and host with the Services. For that data, the customer is the controller and EzyStudio processes it on the customer’s behalf under our Data Processing Addendum. If you are a user of a site built on EzyStudio, contact the site’s owner and read its privacy notice.

If you use the Services through a partner agency, the agency may be the controller of your account data, and you should direct privacy requests to the agency first.

2. Definitions

• “Personal Data” means information that identifies, relates to or could reasonably be linked to an individual.
• “Customer Content” means the content you submit to or create with the Services, such as site text, files, code, settings and descriptions.
• “Your Users’ Data” means Personal Data about the visitors and users of the sites and apps you build with the Services.
• “Usage Data” means information about how the Services are accessed and used.

3. Personal Data we collect

Information you provide

• Account information, such as your name, email address, password and profile details, and details of your workspace and team members.
• Payment information, such as your billing details. Card payments are processed by our payment provider; we do not store full card numbers.
• Customer Content, as defined above.
• Business information, if you are a developer or partner, such as your organisation’s details, public profile and payout details.
• Public content, such as App Store reviews, which are shown with limited profile details.
• Communications, such as support requests and other messages you send us.

Information collected automatically

• Device and log information, such as IP address, browser type, device information, and the date and time of requests.
• Usage Data, such as features used, actions taken and aggregated activity counts.
• Cookies and similar technologies, as described in our Cookie Notice.

Information from other sources

• Payment providers, about the status of payments and payouts.
• Integrations you enable, such as a code repository, which share the information needed for the connection.
• Partner agencies, which may create an account for you and provide your name and contact details.

4. How we use Personal Data

We use Personal Data to:

• provide, operate, maintain and support the Services;
• process payments, billing, refunds and payouts;
• communicate with you about your account, transactions and the Services;
• keep the Services safe and secure, and prevent fraud, abuse and violations of our terms;
• understand usage and improve the Services;
• comply with legal obligations, resolve disputes and enforce our agreements.

To prevent referral fraud, we use device and browser signals: a device ID, a browser fingerprint and the network you connect from. We store them only as one-way hashes, use them for nothing else and delete them after 90 days.

We do not sell Personal Data and do not use it for targeted advertising. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

5. AI providers and model training

The Services let you connect an AI provider of your choice. When you use it, your prompts and the Customer Content your AI works with are sent to that provider and handled under its own terms and privacy policy. Your AI provider is not our service provider.

We do not use Customer Content or Your Users’ Data to train AI models.

6. Who receives your Personal Data

We disclose Personal Data only as described in this policy:

• Service providers that process Personal Data on our behalf, such as hosting, infrastructure, payment, email delivery and customer support providers, under contracts that limit their use of it. Our current list is on our Sub-processors page.
• Integrations you enable, when you choose to connect them.
• Your workspace and agency. Members of your workspace, and any partner agency that manages it, can see information according to their role.
• Other users and the public, for information you choose to make public, such as reviews, app listings and partner profiles.
• Authorities and others, where required by law, or to protect the rights, safety and property of our users, the public or EzyStudio.
• Business transfers, in connection with a merger, acquisition, financing or sale of assets, subject to this policy.

7. Legal bases

Where the GDPR, UK GDPR or similar laws apply, we rely on the following legal bases:

• Contract, to provide the Services you request;
• Legitimate interests, such as securing and improving the Services, which we balance against your rights;
• Legal obligation, such as tax and accounting requirements;
• Consent, where required, which you can withdraw at any time.

8. International data transfers

We and our service providers may process Personal Data in countries other than the one where you live, including the United States. Where required, we protect transfers with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK and Swiss equivalents.

9. Data retention

We keep Personal Data only for as long as needed for the purposes described in this policy, including to meet legal, tax and accounting requirements, resolve disputes and enforce our agreements.

• Account information and Customer Content are kept while your account is active, and deleted or de-identified after your account is closed.
• Logs and security records are kept for as long as needed to operate and secure the Services.
• Billing and transaction records are kept for the periods required by law.

When we no longer need Personal Data, we delete or de-identify it. Where that is not immediately possible, for example in backups, we keep it securely until it is deleted.

10. Security

We use administrative, technical and physical safeguards designed to protect Personal Data, including encryption in transit and at rest, access controls and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. More information is on our Security page.

11. Your rights and choices

Depending on where you live, you may have the right to:

• access the Personal Data we hold about you and receive a copy of it;
• correct inaccurate Personal Data;
• delete your Personal Data;
• object to or restrict certain processing;
• withdraw consent where we rely on it;
• receive your Personal Data in a portable format.

You can access, export and delete your account data in your account settings, or contact us at [privacy contact email]. We may need to verify your identity before acting on a request. We will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.

You can manage service-related email notifications in your settings. We will still send you messages that are necessary for your account.

12. United States privacy disclosures

If you live in California or another US state with a comprehensive privacy law, this section applies to you.

Category	Examples	Disclosed to
Identifiers	Name, email address, IP address, account ID	Service providers
Commercial information	Plans, purchases and transactions	Service providers
Internet or network activity	Usage Data and logs	Service providers
User content	Customer Content, reviews, messages	Service providers; the public, where you choose
Professional information	Business and partner details	Service providers; the public, where you choose
Sensitive personal information	Account log-in credentials	Service providers

We do not sell or share Personal Data for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. You may have the rights to know, access, correct and delete your Personal Data, and to appeal our decision on a request. You may use an authorised agent. To make a request, contact [privacy contact email].

13. Children

The Services are not directed to children, and you must be at least 18 to create an account. If we learn that we have collected Personal Data from a child, we will delete it.

14. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Services before they take effect. The “Last updated” date shows the latest version.

15. Contact us

EzyLab, LLC, [Registered address]. Email: [privacy contact email]. [Data protection officer and EU/UK representative, if required.]