Draft for legal review. This text has not been reviewed by a lawyer yet and may change. Items in [square brackets] are placeholders.
Privacy Policy
Last updated:
EZShot helps businesses make videos, posts and posters with AI. This policy explains what personal data EZShot AI collects, why, who helps us process it, and the choices you have.
Who we are
EZShot is run by EZShot AI [legal entity name and address to be confirmed] ("EZShot", "we", "us"). We decide how and why your personal data is used, so we are the "controller" of it.
You can reach us at support@ezshotai.com.
What we collect
We collect only what we need to run the service:
- Account details: your email address and, if you sign in with Google, your name.
- Business details you enter: your business name, what you sell, your audience, your tone of voice, your brand colours and logo.
- Files you upload: photos, videos, voice recordings and logos.
- Your face and voice likeness, only when you choose to use it. We ask for your explicit consent in the app before you can add it.
- Content you make with EZShot: scripts, posts, posters, videos, captions, editor projects and scheduled posts.
- Your chat messages with our AI assistant, Yami.
- Usage and technical data: which features you use, error logs, device and browser type, and your credit balance and history.
- Payment information. Payments are handled by our payment provider (Stripe or Paddle). We never see or store your card number.
Why we use it
We use your data to provide the service you asked for: signing you in, writing and rendering your content, saving your work, charging credits and showing your Gallery. We also use technical logs to keep the service secure, to fix problems and to prevent abuse.
Where the law requires a legal basis, we rely on: performing our contract with you, your consent (for example for your face and voice likeness), our legitimate interest in running and protecting the service, and legal obligations such as accounting and tax rules.
We do not sell your personal data.
Who helps us process your data
We use trusted companies ("processors") to run EZShot. They receive only the data needed for their part of the job:
- Supabase: database, file storage and sign-in.
- Vercel: hosting of the website.
- Railway: our backend and video rendering.
- OpenRouter and Anthropic: AI that writes text and answers in chat.
- fal.ai: image and video models (including ByteDance OmniHuman and Kling), background removal and Whisper transcription.
- ElevenLabs: voices, voice cloning and music.
- Argil and HeyGen: talking-head video.
- Deepgram: speech transcription.
- Google: sign-in with Google.
- Our payment provider (Stripe or Paddle): payments and invoices.
- bundle.social (later): posting to social networks, only if you connect your accounts.
Your face and voice
We only use a person's face or voice with that person's consent. You may upload only your own face and voice, or ones you have the right to use. Do not upload anyone else's likeness without their permission.
Your face and voice are used only to make content for you. If you remove a photo, a video or a voice clone, we delete it. Voice clones are also deleted when you delete your account.
How long we keep data
We keep your data while your account is open. When you delete your account, it is locked at once and permanently deleted after a 30-day grace period (see the Data deletion page). Payment and credit records are kept in anonymised form as long as accounting and tax law require. Backups are overwritten within 30 further days.
Technical logs are kept only as long as needed to run and secure the service [retention period to be confirmed].
Your rights
Depending on where you live (for example under the EU GDPR, the Israeli Privacy Protection Law or California's CCPA), you may have the right to:
- access the personal data we hold about you;
- correct data that is wrong;
- delete your data;
- receive a copy of your data (export);
- object to certain uses of your data, or withdraw your consent at any time.
How to use your rights
Most things you can do yourself in the app: edit your business details in My Brand, remove your photo, video or voice, and delete your account from the Info Center. For anything else, write to support@ezshotai.com from your account email and we will answer as soon as we can and within the time the law requires. If you are not satisfied, you may complain to your local data protection authority. We never treat you worse for using your rights.
Children
EZShot is not for children under 16. We do not knowingly collect data from them. If you think a child has given us data, write to us and we will delete it.
Transfers between countries
Our processors may handle data in countries other than yours, including the United States. Where the law requires it, we rely on appropriate legal safeguards [details to be confirmed].
Security
We protect your data with measures such as encrypted connections, private storage for your files and access limits. No online service is perfectly secure, so we cannot promise absolute security.
Changes to this policy
We may update this policy. When we make an important change, we will tell you in the app or by email. The date at the top shows when it was last updated.
Contact
Questions or requests: support@ezshotai.com. Company: EZShot AI [legal entity name and address to be confirmed]. Website: ezshotai.com.