Privacy Policy

• Account data — your email address and authentication details, handled by our authentication provider (Supabase). If you sign in with Google, we receive your email and basic profile from Google.
• Document content — the text you upload or paste, the edits you make, the suggestions you accept or reject, and the scores and flags generated for your documents.
• Billing data — subscription status and plan. Card details are collected and stored by Stripe; we never see or store your full card number.
• Usage data — basic product events (for example, scans run and limits hit) and standard server logs used to operate and secure the service.

• to provide the analysis, editing, and citation features you request;
• to authenticate you and manage your account and subscription;
• to learn and apply your writing-style preferences within your own account;
• to enforce usage limits, prevent abuse, and secure the service;
• to comply with our legal obligations.

We do notsell your personal data or your document content, and we do not use your document content to train our own or third parties' foundation models.

To deliver the service we share data with the processors below, only as needed to perform their function:

• Supabase — authentication, database, and file storage.
• Vercel — application hosting and delivery.
• Stripe — subscription payments and billing.
• OpenRouter and the AI model providers it routes to — to analyse and generate edit suggestions, we transmit the relevant sections of your document text for processing.
• Tavily / web search — for citation verification we transmit citation strings (not your full document) to a web-search provider.

Some of these providers may process data outside your country. Where required, we rely on appropriate safeguards for such transfers.

We keep your account and document data for as long as your account is active. You can delete your documents at any time from within the app. When you delete a document or close your account, the associated content is removed from our database; backups and provider logs may persist for a limited period before being overwritten.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us at ezsay@byzyb.ai. You also have the right to complain to your local data-protection authority.

We use encryption in transit, access controls, and per-user data isolation to protect your information. No system is perfectly secure; we cannot guarantee absolute security, but we work to protect your data and to notify you of material breaches where the law requires.

EzSay is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

We may update this policy from time to time and will revise the "Last updated" date when we do. For any privacy question or request, contact ezsay@byzyb.ai.