Privacy Policy

1. Introduction

EzUGC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered content creation platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, and profile details
• Payment Information: Billing details and payment method (processed securely through our payment providers)
• Content: Images, videos, scripts, and other content you upload
• Communications: Messages you send to us or through the platform

2.2 Information Collected Automatically

• Usage Data: Features used, content created, and interaction patterns
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and pages viewed
• Cookies: Session cookies, privacy preferences, always-on analytics and source-attribution cookies, and optional advertising attribution cookies
• Conversion Data: When advertising measurement is enabled, completed registration and checkout-start events, the page origin and path, and opaque campaign attribution supplied by the ad platform

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process your transactions and manage subscriptions
• Generate AI content based on your inputs
• Improve and personalize your experience
• Measure marketing-site usage, CTA interactions, and traffic sources
• Run masked Session Replay when you enable it
• Measure advertising registrations and checkout starts when you enable advertising measurement
• Communicate with you about updates and support
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your data is stored on secure servers with encryption in transit and at rest.

Content you create is stored in secure cloud storage (Supabase) with access controls and regular security audits.

5. Sharing of Information

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties who help us operate the Service (e.g., payment processors, cloud storage)
• AI Providers: OpenAI and Captions AI for content generation (only necessary data is shared)
• Analytics Providers: Google Analytics and Mixpanel for always-on event analytics; Mixpanel Session Replay only when you enable it
• Advertising Measurement Providers: OpenAI Ads, Meta, Google Ads, Tolt, and Apollo when advertising measurement consent is enabled
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers or acquisitions

6. Your Rights and Choices

You have the right to:

• Access and download your personal information
• Correct or update your information
• Delete your account and associated data
• Opt-out of marketing communications
• Request data portability

To exercise these rights, please contact us at [email protected].

You can also open Privacy choices at the bottom of the marketing site to change optional Session Replay and advertising measurement. Marketing-site event analytics and source attribution remain active regardless of those optional choices.

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and comply with legal obligations. Content you create is retained until you delete it or close your account.

8. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

10. Cookies and Tracking

The marketing site always uses Google Analytics and Mixpanel event analytics to measure page views, CTA clicks, and engagement. It also stores first and latest source attribution for 90 days so visits from search engines, AI assistants, campaigns, referrals, and direct traffic remain measurable across the marketing-to-app handoff.

Source attribution can include UTM parameters, the first and latest landing-page path, and the referring origin and domain. Referrer paths and query strings are not stored in EzUGC's attribution record. When no campaign or external referrer is available, the source is recorded as direct.

Mixpanel Session Replay is separate and stays off for unknown or declined visitors. If you enable it, sessions are eligible at the configured rate (currently 100% in production). Text and form inputs are masked, and image, video, and audio elements are blocked from replay capture.

If you enable advertising measurement, the OpenAI Ads Measurement Pixel and server-side Conversions API may report the standardregistration_completedandcheckout_startedevents. For matching, EzUGC normalizes and SHA-256 hashes the account email address and internal user identifier before sending them. Raw email addresses and raw internal user identifiers are not included in OpenAI Ads conversion payloads. The server may also send the approved EzUGC page origin and path and the raw, opaque OpenAI advertising referral value when available; URL query strings and fragments are excluded from the source URL.

The same consent choice is stored in a first-party cookie shared across EzUGC subdomains in production and uses a host-only fallback on localhost. The cookie contains the consent version, category choices, and update time, but no account or contact information. When you are authenticated, the same PII-free category choice is also stored on your EzUGC profile so server-side and background systems can honor optional tracking choices. Missing or unknown choices disable Session Replay and advertising measurement, but not marketing event analytics. Global Privacy Control always forces advertising measurement off.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

12. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy and updating the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: