Privacy policy

Information we collect

• Account information: email address, display name, authentication identifiers, and account creation and update times.
• Experiment information: evaluation question, text or image creatives, selected audience criteria, run status, AI respondent responses, and results.
• Usage information: credit balance and ledger activity, run counts, and error status.
• Transaction information: customer, order, and transaction identifiers from Lemon Squeezy, quantity, amount, currency, and payment or refund status. Lemon Squeezy processing applies only when you use Lemon Squeezy checkout. EZPZ does not store full payment-card numbers.
• Technical information: access logs, device and browser information, cookies, and session tokens processed by service providers for security and reliable operation.

Why we use information

We use information to authenticate accounts, run synthetic panels, save results, administer credits, payments and refunds, provide support, prevent fraud and abuse, maintain security, and meet legal obligations. Depending on your location, processing is based on performance of a contract, legitimate interests, legal obligations, or consent where required. We do not use buyer information for promotional marketing without any consent required by law.

Essential usage measurement and optional analytics

Separate from the optional behavioral analytics below, essential operational records—such as account creation, run status, the credit ledger, payment confirmation, and security events—are processed to deliver the service independently of optional analytics consent. Declining optional analytics does not disable these essential records.

To understand basic service use, we count how many times the landing page is opened by date and language without a visitor identifier or cookie. When a signed-in account enters Studio, we record the account identifier, first and latest entry times, and number of entries. This essential usage measurement is separate from optional analytics consent and is not used for advertising tracking.

With permission, we store limited first-party product events in Supabase, such as page and button use, upload success or error, selected country, panel size, checkout flow, exports, and allowlisted UTM campaign values. Detailed events are retained for 13 months. We use a daily rotating one-way identifier instead of a raw IP for abuse prevention. Analytics events do not contain email, full URLs or arbitrary queries, images, creative text, questions, AI respondent responses, or payment-card details. You can decline without losing service access and change your choice below.

If you allow Google Ads conversion measurement, we send Google the order identifier, amount, and currency for a confirmed, non-refunded purchase. Advertising personalization and advertising user data remain disabled.

Service providers and recipients

• Supabase — account authentication, database, and run-history storage
• Vercel — web hosting and server execution
• Google Cloud — private storage of completed creatives, temporary image processing during a run, and access to synthetic-persona data
• Google Gemini — processing submitted creatives, evaluation questions, optional product context, and synthetic personas to generate results
• Google Ads — advertising conversion measurement when permitted; not used for advertising personalization
• Lemon Squeezy — when Lemon Squeezy checkout is used, Lemon Squeezy, LLC processes buyer, billing, order, and payment information as merchant of record for payments, taxes, receipts, fraud prevention, and refunds.

These providers may process information outside your country, including outside the Republic of Korea. EZPZ relies on protections required by applicable law and provider agreements.

Lemon Squeezy also applies its own privacy notice to purchase and payment information. Each company’s privacy role depends on the processing activity.

Lemon Squeezy privacy notice

Retention and deletion

Completed-run creatives are retained privately until you request deletion so you can reopen results. For incomplete tests with saved progress, creatives, validated responses, and run settings are retained privately so you can resume the same panel. Failed attempts without saved progress have their images removed from active storage. You can request deletion of this failed-run data at ad@ezpzspace.com. Account or other data deletion can be requested at the same address; associated creatives and account data are deleted or anonymized except where retention is legally required. Objects deleted from active Google Cloud storage may remain in provider backups for up to 7 days. Detailed optional product-analytics events are deleted after 13 months, while credits and transaction records may be retained separately for legal, accounting, or dispute-resolution obligations. Quick history on this device and PDFs you previously downloaded are not erased by server deletion and must be removed by you.

Your rights and choices

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, or withdraw consent. Send account or data-deletion requests to ad@ezpzspace.com. We may verify your identity and the scope of the request before responding within the applicable legal period.

Security, children, and changes

We use reasonable technical and organizational safeguards, but no internet transmission or storage system is completely secure. The service is not directed to people under 18, and we do not knowingly collect children's personal information. We will update this policy when our practices change and give notice of material changes where required by law.

Business details

EZPZ CO., LTD. · Business Taxpayer ID 620-81-61533 · 96 Misagangbyeon-daero, Hanam-si, Gyeonggi-do, Republic of Korea · Contact ad@ezpzspace.com