ezeki.ai

Legal

Privacy Policy

Last updated: October 5, 2026

This policy explains what personal data ezeki.ai ("ezeki", "we", "us") collects when you use ezeki.ai, why we collect it, who we share it with and what choices you have. It applies to our website and to the service as described in our Terms and Conditions.

1. Data we collect

Account data. Your email address, display name, the audience option you pick on the site, your plan, and account status. When you sign in with GitHub or Google we receive your account identifier, email address, name and, for Google, your profile picture. Passkeys store a public key and device type on our servers; your biometric data never leaves your device.

AI provider connections. When you connect Claude, Codex, Kimi or Gemini we store the resulting access tokens or API key encrypted, together with basic details the provider returns, such as the account email or plan type. We record per-day request and token counts so you and we can see usage; we do not store the content of your prompts or the agent's replies on our servers.

Projects and workspaces. Project names, settings, preview and published addresses, deployment versions, chat titles and folders, and connector configuration. Your code, files and chat history live inside your project's workspace and in the apps you publish.

Payments. If you subscribe, Stripe processes your payment. We receive and store your Stripe customer and subscription identifiers and subscription status. We never see or store full card numbers.

Usage and technical data. Workspace activity such as awake time, CPU and memory samples used to enforce plan limits, timestamps of sign-ins and activity, and standard server logs including IP address, browser type and the pages or API routes requested. These logs are used for security, troubleshooting and abuse prevention.

Support access. Our staff can temporarily act within your account to help with a support request. Every such session and action is recorded in an audit log.

2. Data your apps collect about their users

If you attach a backend to an app you build, that app can collect data from its own users: their email addresses, sign-in identifiers and passkeys, data your app stores for them, and payments taken through your Stripe account. For this data you are the controller and we process it on your behalf to run the backend. Your app's users should read your privacy notice, not this one. Emails your app sends through our service, such as sign-in links, are delivered by Amazon Web Services or Resend.

3. How we use data

  • To provide the service: create and run workspaces, run the agent with your provider credentials, serve your preview and published apps, and deliver backend features.
  • To bill you and enforce plan limits such as project counts and weekly running hours.
  • To keep the service secure, prevent abuse and investigate incidents.
  • To support you when you contact us.
  • To send service messages, such as changes to terms, billing notices or security alerts. We do not send marketing email without your consent.

We rely on performance of our contract with you, our legitimate interests in running a secure and reliable service, and, where required, your consent.

4. Who we share data with

We share data only with providers who help us run the service, and only what they need:

  • Sprites and Fly.io, which host the workspace machines.
  • Cloudflare, which serves published apps and custom domains.
  • Anthropic, OpenAI, Google and Moonshot, which receive the prompts and files your agent sends when it runs on your connected account or key, under that provider's own terms.
  • Stripe, for payments and subscriptions.
  • GitHub and Google, for sign-in and repository access you authorise.
  • Supabase, for databases attached to your apps' backends.
  • Amazon Web Services and Resend, for transactional email.
  • Connectors you enable yourself, such as HubSpot, Klaviyo or your own servers, which receive the data you choose to send them.

We do not sell personal data and we do not use third-party advertising or analytics trackers on the site. We may disclose data if the law requires it or to protect the rights and safety of our users or the public.

5. Cookies and local storage

We do not use tracking cookies. Your browser's local storage holds your session token, your chosen audience option and interface preferences so the app works between visits. Clearing site data signs you out and resets those preferences.

6. Retention

We keep account data for as long as your account exists. Deleting a project permanently removes its workspace. Disconnecting a provider deletes the stored credentials. When you delete your account we remove your data within 30 days, except for records we must keep for legal, billing or security reasons, such as invoices and audit logs, which we keep only as long as required.

7. Security

Credentials and API keys are encrypted at rest. Each workspace runs in its own isolated machine. Access to production systems is limited to staff who need it and is logged. No system is perfectly secure, so keep your own backups of code you cannot lose and tell us promptly through the Contact link in the footer if you suspect a problem.

8. International transfers

Our providers operate in several countries, including the United States. Where data leaves your region we rely on the providers' standard contractual safeguards.

9. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to restrict or object to its processing, and to complain to a supervisory authority. You can change your name and connections in your settings, and you can ask us for anything else by email. We will respond within 30 days.

10. Children

The service is not intended for anyone under 13, and we do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the service evolves. We will post the new version here and update the date above, and we will notify you of material changes by email or in the app.