Privacy Policy

Ezly is an AI communication platform built by Silverthread Labs. It helps solo professionals manage client conversations across multiple platforms. Ezly has two surfaces: the webapp at getezly.com and the Ezly Chrome extension. This Privacy Policy covers both.

• This policy explains what data we collect, why we collect it, who we share it with, and how you can control it
• By using Ezly, you agree to the data practices described here
• If you have questions, contact us at privacy@getezly.com

The Ezly Chrome extension reads conversation data from supported platforms only when you activate it. It doesn't run in the background, doesn't track your browsing, and doesn't collect data on unsupported pages.

• Conversation messages from Upwork, Fiverr, Discord, LinkedIn, and Gmail, scraped on demand when you open the extension and request AI assistance
• Sender names from those conversations, used to give context to the AI
• The URL of your active tab, used only to detect which supported platform you're on
• Data stored locally on your device via chrome.storage.local: conversation history (your messages and AI responses keyed by URL), a cached copy of your persona list, and a cached copy of your quick replies
• The extension does NOT collect browsing history, does NOT track activity on unsupported pages, does NOT run analytics or telemetry, and does NOT monitor keystrokes or clipboard content

When you use the Ezly webapp at getezly.com, we collect the information below to run the service.

• Account information: your name, email address, and authentication credentials (email/password or Google OAuth)
• Chat messages and AI-generated responses
• Uploaded files (PDF, DOCX, TXT, MD) for your persona knowledge base, up to 10 MB per file
• Persona configurations, communication style settings, custom tones, and knowledge base documents
• Quick replies and saved message templates
• Subscription and billing information processed through Stripe
• Usage data: message counts, proposal counts, and feature usage tracked via Google Analytics (webapp only, anonymized after 90 days)
• Device data: IP address, user agent, and browser type, collected for security and session management

We use your data only to run and improve Ezly. We don't sell your data, use it for advertising, or share it with data brokers.

• Provide AI-powered communication assistance, including suggested replies, deal stage classification, and proposal generation
• Process your messages through AI models to generate relevant, persona-grounded responses
• Process payments and manage your subscription through Stripe
• Send transactional emails for account verification, password resets, and two-factor authentication
• Maintain security through session management, rate limiting, and fraud prevention
• Improve the service based on aggregated, anonymized usage patterns

The Ezly Chrome extension requests these browser permissions. Each one is required for a specific function.

• storage: saves your conversation history, persona cache, and quick reply cache locally on your device using chrome.storage.local, so your data persists when you close and reopen the extension panel
• tabs: detects which platform you're on by reading the active tab URL, enables communication between the extension panel and the background service worker, detects authentication changes, and opens webapp pages when needed
• activeTab: allows the extension to read conversation messages from the page you're currently viewing when you activate Ezly
• scripting: runs the scraper that extracts conversation text from supported platform pages (Upwork, Fiverr, Discord, LinkedIn, Gmail) when you request AI assistance
• Host permissions (getezly.com): allows the extension service worker to make authenticated API requests to the Ezly backend over HTTPS
• Content scripts: injects a small floating trigger button on Upwork, Fiverr, Discord, LinkedIn, and Gmail using Shadow DOM. The extension only runs on these five platforms and doesn't load on any other websites

We share data with third-party services to run Ezly. Here's who they are, grouped by what they do. We don't share data beyond what's described here.

• AI text generation: Anthropic (Claude Sonnet 4) and OpenAI (GPT-4o-mini) receive your messages and conversation context to generate responses, suggested replies, and deal stage classifications. OpenAI (text-embedding-3-small) also receives persona knowledge base text to power semantic search
• Payments: Stripe handles subscription billing and receives your payment details
• Email delivery: Resend sends transactional emails (verification, password reset, two-factor authentication) and receives your email address for that purpose
• File storage: Vercel Blob stores files you upload to your persona knowledge base
• Rate limiting: Upstash Redis tracks rate limit counters with no personally identifiable information
• Analytics: Google Analytics receives page views and feature usage from the webapp only (not the extension), anonymized after 90 days
• Proposal research: Serper.dev receives job keywords you provide, and Firecrawl (with Jina.ai as fallback) receives job posting URLs to scrape content for proposal generation
• Database: Neon PostgreSQL hosts all persistent user data

We keep your data only as long as it's needed. Here's how long each type sticks around.

• Chat history: stored until you delete it
• Account data: kept while your account is active, deleted when you close your account
• Payment records: retained for 7 years as required by law
• Google Analytics data: anonymized after 90 days
• Session and verification tokens: expire automatically
• Extension local storage (chrome.storage.local): stays on your device until you remove the extension, clear extension data, or log out

If you're in the EU or EEA, you have the rights below under the General Data Protection Regulation. To use any of them, contact us at privacy@getezly.com.

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your personal data
• Right to restrict processing: limit how we use your data
• Right to data portability: receive your data in a machine-readable format
• Right to object: object to certain types of data processing
• Right to withdraw consent: withdraw consent at any time where processing is based on consent

We protect your data with standard security measures across both the webapp and the extension.

• All data transmitted between the extension, your browser, and our servers uses TLS encryption
• HTTP Strict Transport Security (HSTS) enforced across getezly.com
• Content Security Policy (CSP) headers to prevent cross-site scripting
• API rate limiting via Upstash Redis to prevent abuse
• Session management with automatic token expiration
• CSRF protection on all authenticated endpoints

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

• Data accessed through Chrome APIs is used only to provide or improve the Ezly extension as described in this policy
• We don't transfer your data to third parties except to provide the service, for security purposes, or as required by law
• We don't use your data for advertising, and we don't serve personalized or non-personalized ads
• We don't sell your data to data brokers or any third party
• We don't use your data for creditworthiness determinations or lending purposes
• No human reads your data unless you give explicit consent, the data is aggregated and anonymized, it's necessary for security purposes, or it's required by law

The Ezly webapp uses cookies for authentication, analytics, and preferences. The Chrome extension doesn't use cookies. See our Cookie Policy for full details.

• Essential cookies for session management and security
• Google Analytics cookies for anonymized usage tracking (webapp only)
• Preference cookies for language and theme settings
• The extension uses chrome.storage.local instead of cookies, as described above

We may update this Privacy Policy from time to time. When we make material changes, we'll notify you by email or through a notice on getezly.com.

• The "Last updated" date at the top of this page reflects the most recent revision
• Continued use of Ezly after a policy change means you accept the updated terms
• We encourage you to review this policy periodically

Questions about this Privacy Policy or want to exercise your data rights? Get in touch.

• Email: privacy@getezly.com
• We respond to all privacy inquiries within 30 days
• You can also lodge a complaint with your local data protection supervisory authority