Privacy Policy
Last updated August 3, 2026
Introduction
Ezly is an AI communication platform built by Silverthread Labs. It helps solo professionals manage client conversations across multiple platforms. Ezly has two surfaces: the webapp at getezly.com and the Ezly Chrome extension. This Privacy Policy covers both.
- This policy explains what data we collect, why we collect it, who we share it with, and how you can control it
- By using Ezly, you agree to the data practices described here
- If you have questions, contact us at privacy@getezly.com
Data the Chrome Extension Collects
The Ezly Chrome extension reads conversation data from supported platforms only when you activate it. It doesn't run in the background, doesn't track your browsing, and doesn't collect data on unsupported pages.
- Conversation messages from Upwork, Fiverr, Discord, LinkedIn, and Gmail, scraped on demand when you open the extension and request AI assistance
- Sender names from those conversations, used to give context to the AI
- The URL of your active tab, used only to detect which supported platform you're on
- Data stored locally on your device via chrome.storage.local: conversation history (your messages and AI responses keyed by URL), a cached copy of your persona list, and a cached copy of your quick replies
- The extension does NOT collect browsing history, does NOT track activity on unsupported pages, does NOT run analytics or telemetry, and does NOT monitor keystrokes or clipboard content
Data the Webapp Collects
When you use the Ezly webapp at getezly.com, we collect the information below to run the service.
- Account information: your name, email address, and authentication credentials (email/password or Google OAuth)
- Chat messages and AI-generated responses
- Uploaded files (PDF, DOCX, TXT, MD) for your persona knowledge base, up to 10 MB per file
- Persona configurations, communication style settings, custom tones, and knowledge base documents
- Quick replies and saved message templates
- Team accounts: organization name, member roles, and the email addresses of teammates you invite
- Subscription and billing information processed through Stripe
- Usage data: message, proposal, and feature usage counts, tracked in our own database to enforce plan limits
- Analytics data: page views and feature usage via Google Analytics, only if you accept analytics cookies (webapp only, anonymized after 90 days)
- Device data: IP address, user agent, and browser type, collected for security and session management
How We Use Your Data
We use your data only to run and improve Ezly. We don't sell your data, use it for advertising, or share it with data brokers.
- Provide AI-powered communication assistance, including suggested replies, deal stage classification, and proposal generation
- Process your messages through AI models to generate relevant, persona-grounded responses
- Process payments and manage your subscription through Stripe
- Send transactional emails for account verification, password resets, and two-factor authentication
- Maintain security through session management, rate limiting, and fraud prevention
- Improve the service based on aggregated, anonymized usage patterns
Chrome Extension Permissions
The Ezly Chrome extension requests these browser permissions. Each one is required for a specific function.
- storage: saves your conversation history, persona cache, and quick reply cache locally on your device using chrome.storage.local, so your data persists when you close and reopen the extension panel
- activeTab: allows the extension to read the URL and conversation messages from the page you're currently viewing when you activate Ezly
- scripting: runs the scraper that extracts conversation text from supported platform pages (Upwork, Fiverr, Discord, LinkedIn, Gmail) when you request AI assistance
- Host permissions (getezly.com): allows the extension service worker to make authenticated API requests to the Ezly backend over HTTPS
- Content scripts: injects a small floating trigger button on Upwork, Fiverr, Discord, LinkedIn, and Gmail using Shadow DOM. The extension only runs on these five platforms and doesn't load on any other websites
Third-Party Services
We share data with third-party services to run Ezly. Here's who they are, grouped by what they do. We don't share data beyond what's described here.
- AI text generation: OpenAI and Anthropic receive your messages and conversation context to generate responses, suggested replies, and deal stage classifications. OpenAI also receives persona knowledge base text to generate the embeddings that power semantic search
- Payments: Stripe handles subscription billing and receives your payment details
- Email delivery: Resend sends transactional emails (verification, password reset, two-factor authentication) and receives your email address for that purpose
- File storage: Hetzner (S3-compatible object storage) stores files you upload to your persona knowledge base
- Rate limiting: Upstash Redis tracks rate limit counters with no personally identifiable information
- Analytics: Google Analytics receives page views and feature usage from the webapp only (not the extension), only if you accept analytics cookies, anonymized after 90 days
- Proposal research: Serper.dev receives job keywords you provide, and Firecrawl (with Jina.ai as fallback) receives job posting URLs to scrape content for proposal generation
- Database: a managed PostgreSQL database hosts all persistent user data
Data Retention
We keep your data only as long as it's needed. Here's how long each type sticks around.
- Chat history: stored until you delete it
- Account data: kept while your account is active, deleted when you close your account
- Payment records: retained for 7 years as required by law
- Google Analytics data: anonymized after 90 days
- Session and verification tokens: expire automatically
- Extension local storage (chrome.storage.local): stays on your device until you remove the extension, clear extension data, or log out
Your Rights Under GDPR
If you're in the EU or EEA, you have the rights below under the General Data Protection Regulation. To use any of them, contact us at privacy@getezly.com.
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: correct inaccurate or incomplete data
- Right to erasure: request deletion of your personal data
- Right to restrict processing: limit how we use your data
- Right to data portability: receive your data in a machine-readable format
- Right to object: object to certain types of data processing
- Right to withdraw consent: withdraw consent at any time where processing is based on consent
Data Security
We protect your data with standard security measures across both the webapp and the extension.
- All data transmitted between the extension, your browser, and our servers uses TLS encryption
- HTTP Strict Transport Security (HSTS) enforced across getezly.com
- Content Security Policy (CSP) headers to prevent cross-site scripting
- API rate limiting via Upstash Redis to prevent abuse
- Session management with automatic token expiration
- CSRF protection on all authenticated endpoints
Chrome Web Store Limited Use Compliance
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
- Data accessed through Chrome APIs is used only to provide or improve the Ezly extension as described in this policy
- We don't transfer your data to third parties except to provide the service, for security purposes, or as required by law
- We don't use your data for advertising, and we don't serve personalized or non-personalized ads
- We don't sell your data to data brokers or any third party
- We don't use your data for creditworthiness determinations or lending purposes
- No human reads your data unless you give explicit consent, the data is aggregated and anonymized, it's necessary for security purposes, or it's required by law
Cookies and Tracking
The Ezly webapp uses cookies for authentication, analytics, and preferences. The Chrome extension doesn't use cookies. See our Cookie Policy for full details.
- Essential cookies for session management and security
- Google Analytics cookies for anonymized usage tracking (webapp only, set only after you accept them in the cookie banner)
- Preference cookies for language and theme settings
- The extension uses chrome.storage.local instead of cookies, as described above
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we'll notify you by email or through a notice on getezly.com.
- The "Last updated" date at the top of this page reflects the most recent revision
- Continued use of Ezly after a policy change means you accept the updated terms
- We encourage you to review this policy periodically
Contact Us
Questions about this Privacy Policy or want to exercise your data rights? Get in touch.
- Email: privacy@getezly.com
- We respond to all privacy inquiries within 30 days
- You can also lodge a complaint with your local data protection supervisory authority