Privacy Policy | EZO Labs Inc

This Privacy Policy describes how EZO Labs Inc, a Delaware corporation ("EZO Labs," "we," "us," or "our"), collects, uses, and discloses information in connection with the Services. By accessing or using the Services, you acknowledge and agree to this Policy. If you do not agree, do not access or use the Services.

1. Scope

"Services" has the meaning given in our Terms of Service and includes the websites at ezolabs.io and ezolabs.net, the website at ezo.dev and its subdomains, the superbot product (including superbot.gg, beta.superbot.gg, the superbot desktop app, Helper and mobile apps), any waitlist or early-access registration we operate, and any other website, application, software, API, tool, agent, model, product, or service we make available.

Individual products may be governed by their own privacy policies. Where a product-specific privacy policy applies, it governs the information handled through that product and controls over this Policy to the extent of any direct conflict. This Policy continues to apply to all other information we handle.

superbot. The superbot privacy notice is the product privacy policy for superbot. It governs the information handled through superbot, and it replaces this Policy for superbot where the two differ.

This Policy does not apply to third-party websites, services, or platforms we do not control, even where linked from or integrated with the Services.

2. We may change this Policy at any time

We may change this Policy at any time. We publish every change at this URL, and the "Last updated" date above shows when it was last revised. A minor change, such as a correction or a clarification that does not change what we do with your information, takes effect when we publish it.

Material changes. A material change includes any new recipient or processor of your information, any new transfer of it out of the EEA or the UK, any new purpose, any new class of information we collect, and any longer retention period. Where we have your email address, we email you about a material change before it takes effect. We send that email at least 30 days before it takes effect if you live in the EEA or the UK, and at least 7 days before everywhere else. The email links to the new version, says what changes and says the date it takes effect. Where we do not have your email address, we publish the change at this URL at least as far ahead. Where the law needs your consent to a change, we ask for it rather than rely on notice. Where a law, or an urgent security or abuse problem, needs a change sooner, we tell you as early as we can.

If you do not accept a material change, you can stop using the Services and ask us to delete your information, or your account, before the change takes effect, as described in section 9.

A product's own change clause comes first. Where a product's own privacy policy has its own clause on changes, that clause governs changes for that product instead of this section. For superbot, that is section 11 of the superbot privacy notice, which emails you about a material change before it takes effect: at least 30 days before if you live in the EEA or the UK, and at least 7 days before everywhere else.

3. Information we collect

Information you provide. Your email address and any other contact details, message content, or information you submit through a waitlist, notification or early-access request, contact form, or direct correspondence with us.
Automatically collected information. Technical and usage data generated when you access the Services, including IP address (which we may store in hashed form), approximate location derived from IP address at the country level, browser and device characteristics, user agent, referring URL, pages and resources requested, and timestamps.
Security and abuse-prevention data. Information generated by rate limiting, bot and abuse detection, and similar protective measures.
Transaction information. If we make any paid offering available, details about the transaction. Payment card and bank details are collected and processed by our payment processors and are not stored by us.
Product data. Where you use a product, information necessary to operate it, as described in that product's own privacy policy.

We do not intentionally collect sensitive personal information, and we ask that you not submit it to us. Do not send us credentials, API keys, tokens, proprietary source code, or confidential information through a contact form or email, except where a product asks for them. The superbot Helper, when you allow it, sends us credentials, tokens and chat text, as the superbot privacy notice describes.

4. How we use information

To provide, operate, maintain, secure, and improve the Services.
To respond to your requests and communicate with you, including sending notifications you have requested about product availability or early access.
To administer waitlists and grant or decline access to pre-release offerings.
To detect, investigate, prevent, and address fraud, abuse, spam, security incidents, and technical problems, including by rate limiting and filtering automated submissions.
To analyze usage and measure performance in order to understand and improve the Services, including in aggregated or de-identified form. A product's own privacy policy may describe uses of identifiable product data, and for that product it governs.
To develop new products and features, including through aggregated and de-identified analysis. This does not describe product telemetry that a product's own privacy policy lists as identifiable, such as superbot's.
To comply with legal obligations and to establish, exercise, or defend legal claims, and to enforce our Terms of Service and other agreements.

Where required by applicable law, we rely on the following bases for processing: performance of a contract with you; our legitimate interests in operating, securing, and improving the Services and in developing our business; your consent where we request it; and compliance with legal obligations.

5. Cookies and similar technologies

We use cookies and similar technologies only as needed to operate and secure the Services, remember preferences, and measure performance. Some are set by infrastructure and security providers acting on our behalf. You can control cookies through your browser settings; disabling them may affect how the Services function. We do not currently respond to browser "Do Not Track" signals, as no common standard for them has been adopted.

Google Analytics. Our websites use Google Analytics 4 to count visits and see which pages and links are used: pages viewed, referring page, clicks on links and contact buttons, approximate location, and browser and device type. Google processes this data on our behalf. In the EEA, the UK and Switzerland, analytics cookies are off by default. Google signals and advertising features are off everywhere, and we strip sign-in and invite codes and email addresses from what is sent. You can opt out with the Google Analytics opt-out add-on.

6. How we disclose information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose information only as follows:

Service providers. To vendors who process information on our behalf and under contract to operate the Services, including hosting, content delivery, database, security, email delivery, payment processing, and analytics providers.
Legal and safety. To comply with applicable law, regulation, legal process, subpoena, or governmental request; to enforce our agreements; or to protect the rights, property, security, or safety of EZO Labs, our users, or the public.
Corporate transactions. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, in which case information may be transferred as a business asset.
Affiliates. To our corporate affiliates, who will handle it consistently with this Policy.
With your direction or consent. Where you ask us to, or otherwise consent.
Aggregated or de-identified data. We may create and disclose aggregated or de-identified information, which is not personal information, for any purpose. Data that a product's own privacy policy treats as personal data, such as superbot telemetry, is disclosed only as that policy says.

7. Data retention

We retain information for as long as necessary to fulfill the purposes described in this Policy, including to operate the Services, and for the additional period needed to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Retention periods vary by data type and context. We may retain aggregated or de-identified information indefinitely. Where a product's own privacy policy sets retention periods, those periods apply to that product's data. The superbot privacy notice lists a period for each class of superbot data.

8. Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction, including transport encryption and storing IP addresses in hashed rather than raw form for abuse prevention. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the security of any information. You transmit information to us at your own risk. If you believe your interaction with us is no longer secure, contact us immediately.

9. Your choices and rights

You may stop using the Services at any time, and you may ask us to remove your address from any waitlist or notification list by contacting us.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of your personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to appeal a denial of a request. California residents may have rights under the CCPA/CPRA, including the right not to receive discriminatory treatment for exercising them; as noted above, we do not sell or share personal information as those terms are defined. Residents of the EEA, UK, and Switzerland may have rights under the GDPR, including the right to lodge a complaint with a supervisory authority.

To exercise any right, contact contact@ezolabs.io. We will respond as required by applicable law. We may need to verify your identity before acting, and we may decline a request where an exception applies or where we are unable to verify it. An authorized agent may submit a request on your behalf with proof of authorization.

Requests about superbot. Send them to privacy@superbot.gg, or use the export and delete controls in your superbot account. If you live in the EEA or the UK, we answer without undue delay and in any event within 30 days of your verifiable request (GDPR Art. 12(3)). If you live in California, we answer within 45 days of your verifiable request (CCPA §1798.130). Everywhere else, we use the 45-day ceiling. Either window can be extended only by a notice sent to you before the original deadline passes. The superbot privacy notice sets out the full process.

10. International transfers

We are based in the United States, and the Services are operated on globally distributed infrastructure. Information we collect may be transferred to, stored in, and processed in the United States and other countries whose data protection laws may differ from those in your jurisdiction. Where required, we use appropriate safeguards for such transfers. By using the Services, you consent to the transfer of your information to the United States and other countries.

11. Children's privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

12. Third-party services

The Services may link to or integrate with third-party websites, services, and infrastructure that we do not control. Their handling of your information is governed by their own privacy policies, and we are not responsible or liable for their practices. We encourage you to review them.

13. No warranty regarding privacy practices

To the maximum extent permitted by applicable law, this Policy is a description of our current practices and does not create any contractual right, warranty, or guarantee. The disclaimers, limitations of liability, and dispute resolution provisions in our Terms of Service apply to any claim arising out of or relating to this Policy or our handling of information.

14. Contact

EZO Labs Inc, 1007 N Orange St, 4th Floor, Suite 5766, Wilmington, DE 19801, USA
contact@ezolabs.io

For privacy requests, please include enough detail for us to identify your information and the right you wish to exercise.