Privacy Policy — EZO Labs Inc

This Privacy Policy describes how EZO Labs Inc, a Delaware corporation ("EZO Labs," "we," "us," or "our"), collects, uses, and discloses information in connection with the Services. By accessing or using the Services, you acknowledge and agree to this Policy. If you do not agree, do not access or use the Services.

1. Scope

"Services" has the meaning given in our Terms of Service and includes the websites at ezolabs.io and ezolabs.net, the website at ezo.dev and its subdomains, any waitlist or early-access registration we operate, and any other website, application, software, API, tool, agent, model, product, or service we make available.

Individual products may be governed by their own privacy policies, which may be published when and if a product becomes available. Where a product-specific privacy policy applies, it governs the information handled through that product and controls over this Policy to the extent of any direct conflict. This Policy continues to apply to all other information we handle.

This Policy does not apply to third-party websites, services, or platforms we do not control, even where linked from or integrated with the Services.

2. We may change this Policy at any time

We may modify, replace, add to, or remove any part of this Policy at any time, in our sole discretion. Changes take effect immediately upon posting the revised Policy at this URL, unless we state a later effective date, and the "Last updated" date above will reflect the revision. We may, but are not required to, provide additional notice. Your continued access to or use of the Services after changes are posted constitutes your acceptance of the revised Policy. If you do not agree to any change, your sole and exclusive remedy is to stop using the Services and to request deletion of your information as described below.

3. Information we collect

Information you provide. Your email address and any other contact details, message content, or information you submit through a waitlist, notification or early-access request, contact form, or direct correspondence with us.
Automatically collected information. Technical and usage data generated when you access the Services, including IP address (which we may store in hashed form), approximate location derived from IP address at the country level, browser and device characteristics, user agent, referring URL, pages and resources requested, and timestamps.
Security and abuse-prevention data. Information generated by rate limiting, bot and abuse detection, and similar protective measures.
Transaction information. If we make any paid offering available, details about the transaction. Payment card and bank details are collected and processed by our payment processors and are not stored by us.
Product data. Where you use a product, information necessary to operate it, as described in that product's own privacy policy.

We do not intentionally collect sensitive personal information, and we ask that you not submit it to us. Do not send us credentials, API keys, tokens, proprietary source code, or confidential information through a contact form or email.

4. How we use information

To provide, operate, maintain, secure, and improve the Services.
To respond to your requests and communicate with you, including sending notifications you have requested about product availability or early access.
To administer waitlists and grant or decline access to pre-release offerings.
To detect, investigate, prevent, and address fraud, abuse, spam, security incidents, and technical problems, including by rate limiting and filtering automated submissions.
To analyze usage and measure performance in order to understand and improve the Services, including in aggregated or de-identified form.
To develop new products and features, including through aggregated and de-identified analysis.
To comply with legal obligations and to establish, exercise, or defend legal claims, and to enforce our Terms of Service and other agreements.

Where required by applicable law, we rely on the following bases for processing: performance of a contract with you; our legitimate interests in operating, securing, and improving the Services and in developing our business; your consent where we request it; and compliance with legal obligations.

5. Cookies and similar technologies

We use cookies and similar technologies only as needed to operate and secure the Services, remember preferences, and measure performance. Some are set by infrastructure and security providers acting on our behalf. You can control cookies through your browser settings; disabling them may affect how the Services function. We do not currently respond to browser "Do Not Track" signals, as no common standard for them has been adopted.

6. How we disclose information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only as follows:

Service providers. To vendors who process information on our behalf and under contract to operate the Services, including hosting, content delivery, database, security, email delivery, payment processing, and analytics providers.
Legal and safety. To comply with applicable law, regulation, legal process, subpoena, or governmental request; to enforce our agreements; or to protect the rights, property, security, or safety of EZO Labs, our users, or the public.
Corporate transactions. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, in which case information may be transferred as a business asset.
Affiliates. To our corporate affiliates, who will handle it consistently with this Policy.
With your direction or consent. Where you ask us to, or otherwise consent.
Aggregated or de-identified data. We may create and disclose aggregated or de-identified information, which is not personal information, for any purpose.

7. Data retention

We retain information for as long as necessary to fulfill the purposes described in this Policy, including to operate the Services, and for the additional period needed to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Retention periods vary by data type and context. We may retain aggregated or de-identified information indefinitely.

8. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction, including transport encryption and storing IP addresses in hashed rather than raw form for abuse prevention. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the security of any information. You transmit information to us at your own risk. If you believe your interaction with us is no longer secure, contact us immediately.

9. Your choices and rights

You may stop using the Services at any time, and you may ask us to remove your address from any waitlist or notification list by contacting us.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to appeal a denial of a request. California residents may have rights under the CCPA/CPRA, including the right not to receive discriminatory treatment for exercising them; as noted above, we do not sell or share personal information as those terms are defined. Residents of the EEA, UK, and Switzerland may have rights under the GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any right, contact contact@ezolabs.io. We will respond as required by applicable law. We may need to verify your identity before acting, and we may decline a request where an exception applies or where we are unable to verify it. An authorized agent may submit a request on your behalf with proof of authorization.

10. International transfers

We are based in the United States, and the Services are operated on globally distributed infrastructure. Information we collect may be transferred to, stored in, and processed in the United States and other countries whose data protection laws may differ from those in your jurisdiction. Where required, we use appropriate safeguards for such transfers. By using the Services, you consent to the transfer of your information to the United States and other countries.

11. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

12. Third-party services

The Services may link to or integrate with third-party websites, services, and infrastructure that we do not control. Their handling of your information is governed by their own privacy policies, and we are not responsible or liable for their practices. We encourage you to review them.

13. No warranty regarding privacy practices

To the maximum extent permitted by applicable law, this Policy is a description of our current practices and does not create any contractual right, warranty, or guarantee. The disclaimers, limitations of liability, and dispute resolution provisions in our Terms of Service apply to any claim arising out of or relating to this Policy or our handling of information.

14. Contact

EZO Labs Inc — Delaware, USA
contact@ezolabs.io

For privacy requests, please include enough detail for us to identify your information and the right you wish to exercise.