Privacy Policy

1. Introduction

Welcome to EzzyPony. We are committed to protecting your privacy and personal data. This Privacy Policy details how we collect, use, and process your information.

This policy is drafted in accordance with globally recognized data protection standards, including the EU General Data Protection Regulation (GDPR) and the US California Consumer Privacy Act (CCPA/CPRA). Regardless of your location, we are dedicated to providing high standards of data privacy protection.

2. Data Controller & Processor

Data Controller: EzzyPony (responsible for determining the purposes and means of data processing).
Data Processor: Our third-party service providers (such as Better Auth, Creem, APImart, etc.).

3. Information We Collect

3.1 Information You Provide Directly

Account Data: Email address, username, encrypted password, or OAuth tokens (login via Google, etc.).
AI Input & Output: The text prompts you submit to AI models, uploaded images, and the generated image content.
Transaction Data: Purchase history and subscription details. Note: As a merchant, we do not directly process or store your credit card information. All financial transactions are securely handled by our Merchant of Record, Creem.
Customer Support: Feedback or communication records provided when you seek assistance.

3.2 Information Collected Automatically

Technical Data: IP address, browser type, device fingerprint (for fraud prevention), operating system.
Usage Data: Clickstream data, time spent on pages, feature usage frequency (collected ONLY via Google Analytics and Microsoft Clarity).

Purpose	Lawful Basis (GDPR)
Service Provision: Maintaining accounts, generating images via APImart using Nano Banana Pro model	Performance of Contract: We need to process such data to deliver the services you purchased.
Payment Processing: Managing subscriptions, invoicing, fraud prevention (via Creem)	Performance of Contract & Legal Obligation (Tax compliance).
Service Improvement: Analyzing generation failure rates, optimizing AI model response	Legitimate Interests: We have a right to improve our products to provide a better user experience.
Marketing & Notifications: Sending product updates or offers	Consent: Sent only if you subscribe to the newsletter; you may withdraw consent at any time.

Our servers and core data infrastructure are located in the United States. Therefore, your personal information will be transferred to, stored, and processed in the United States. We will implement appropriate safeguards (such as EU Standard Contractual Clauses SCCs) to protect your cross-border data security.

We only share necessary data with the following categories of third parties:

AI Model Providers (APImart / Nano Banana Pro): Transmitting anonymized prompts to generate images.
Merchant of Record (Creem): Handling global payments and tax compliance.
Cloud Infrastructure: Amazon AWS, Vercel, Cloudflare (for hosting and storage).
Analytics Tools: Google Analytics, Microsoft Clarity (for website traffic and interaction analysis).

We never sell your personal data.

Regardless of where you live, we grant you the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Correct inaccurate personal data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your account and all related data (to the extent permitted by law).
Right to Data Portability: Obtain your data in a structured, machine-readable format.
Right to Restriction of Processing: Request us to suspend processing of your data.
Right to Non-Discrimination (CCPA): You will not be discriminated against in services for exercising your privacy rights.

To exercise these rights, please send an email to: [email protected].

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes of collection.

Account Data: Until you delete your account.
Generated Content: You can delete history in your dashboard at any time.
Transaction Records: Retained for several years (typically 5-7 years) as required by tax laws.

8. Children's Privacy

Our services are intended for a general audience. We do not knowingly collect personal information from children under the age of 13 (or other age limit as defined by local law). If you are a minor between the ages of 13 and 18, you must use the services with the permission of a parent or guardian. If we discover that we have collected information from a child under 13, we will take steps to delete it as soon as possible.

Data Controller: EzzyPony (responsible for determining the purposes and means of data processing).
Data Processor: Our third-party service providers (such as Better Auth, Creem, APImart, etc.).

3. Information We Collect

3.1 Information You Provide Directly

Account Data: Email address, username, encrypted password, or OAuth tokens (login via Google, etc.).
AI Input & Output: The text prompts you submit to AI models, uploaded images, and the generated image content.
Transaction Data: Purchase history and subscription details. Note: As a merchant, we do not directly process or store your credit card information. All financial transactions are securely handled by our Merchant of Record, Creem.
Customer Support: Feedback or communication records provided when you seek assistance.

3.2 Information Collected Automatically

Technical Data: IP address, browser type, device fingerprint (for fraud prevention), operating system.
Usage Data: Clickstream data, time spent on pages, feature usage frequency (collected ONLY via Google Analytics and Microsoft Clarity).

Purpose	Lawful Basis (GDPR)
Service Provision: Maintaining accounts, generating images via APImart using Nano Banana Pro model	Performance of Contract: We need to process such data to deliver the services you purchased.
Payment Processing: Managing subscriptions, invoicing, fraud prevention (via Creem)	Performance of Contract & Legal Obligation (Tax compliance).
Service Improvement: Analyzing generation failure rates, optimizing AI model response	Legitimate Interests: We have a right to improve our products to provide a better user experience.
Marketing & Notifications: Sending product updates or offers	Consent: Sent only if you subscribe to the newsletter; you may withdraw consent at any time.

We only share necessary data with the following categories of third parties:

AI Model Providers (APImart / Nano Banana Pro): Transmitting anonymized prompts to generate images.
Merchant of Record (Creem): Handling global payments and tax compliance.
Cloud Infrastructure: Amazon AWS, Vercel, Cloudflare (for hosting and storage).
Analytics Tools: Google Analytics, Microsoft Clarity (for website traffic and interaction analysis).

We never sell your personal data.

Regardless of where you live, we grant you the following rights:

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Correct inaccurate personal data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your account and all related data (to the extent permitted by law).
Right to Data Portability: Obtain your data in a structured, machine-readable format.
Right to Restriction of Processing: Request us to suspend processing of your data.
Right to Non-Discrimination (CCPA): You will not be discriminated against in services for exercising your privacy rights.

To exercise these rights, please send an email to: [email protected].

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes of collection.

Account Data: Until you delete your account.
Generated Content: You can delete history in your dashboard at any time.
Transaction Records: Retained for several years (typically 5-7 years) as required by tax laws.

1. Introduction

2. Data Controller & Processor

3. Information We Collect

3.1 Information You Provide Directly

3.2 Information Collected Automatically

7. Data Retention

8. Children's Privacy

9. Policy Changes

10. Contact Us

Privacy Policy

1. Introduction

2. Data Controller & Processor

3. Information We Collect

3.1 Information You Provide Directly

3.2 Information Collected Automatically

7. Data Retention

8. Children's Privacy

9. Policy Changes

10. Contact Us