Privacy policy

Who is responsible

EZZAR is run by ANYA, the trade name of Morgane Hania Zemmali, a sole trader registered in France under SIRET 914 446 471 00015. She is responsible for the data described here, and can be reached at privacy@ezzar.co.

What is held

Your account: the email address, and the name and profile picture Google returns if you sign in with Google, or the name you gave if you sign in by link. Never your Google password.

What you make: the subjects you type, the photos you upload, the images that come back, and a ledger of every credit movement.

How the site is used. Visits are counted without a cookie and without anything stored in your browser. If you arrive from one of our links, one cookie keeps the name of the post it was in for thirty days. Once you have an account, its main steps (signing up, a shoot, a purchase) are counted under its internal number, never your name, your address or what you made. There is no advertising and no tracking across other sites.

Why, and on what basis

Your account and what you make are held to provide the service you signed up for: that is the contract between us. Payment records are kept because French accounting law requires it. Measuring how the site is used, and keeping it secure, rest on our legitimate interest in running a product that works; you can object to it at the address above.

Where it lives

Accounts, runs and the credit ledger are in a database hosted in Paris. Generated images and uploaded photos are kept with a cloud storage provider, and the site runs on a cloud hosting provider.

Who else sees it

The image and text generation providers EZZAR works with receive the subject you typed, any photo you uploaded and the instructions written from them, because that is where the pictures are made. Some of them are based in the United States, so what they receive may be processed there.

Stripe handles payment. Card details are entered on Stripe’s own checkout and never reach EZZAR; what comes back is that a payment succeeded and which pack it was for.

Google is the identity provider, and the hosting, storage and audience measurement providers keep what is described above, the last of them in the European Union. Each only processes data on EZZAR’s behalf. Nothing is sold, and nothing is shared with anyone else.

How long

What you make is kept until you delete it or your account, because the point of the gallery is that it is still there when you come back. The credit ledger is kept as long as the account exists. Payment records are kept for ten years, as accounting law requires, even after the account is gone. Usage counts are kept only as long as they are useful to compare one period with another.

Your rights

You can ask for a copy of what is held about you, have it corrected or deleted, limit or object to how it is used, or receive it in a format you can take elsewhere. Write to privacy@ezzar.co from the address you signed in with.

Deleting your account deletes its runs and its images. It is permanent, unspent credits are not refunded, and only the payment records the law requires stay.

Complaints

If something here is wrong, tell us first at the address above. You also have the right to complain to your national data protection authority. In France, that is the CNIL.