Privacy Policy

Effective Date: 01.12.2026

1. Introduction

Welcome to Ezail, an AI executive assistant ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect your personal data when you use our app. We process personal data in compliance with the General Data Protection Regulation (GDPR).

2. Data We Collect

We collect the following types of data:

• Account Information: When you sign in using Google, Apple, Microsoft, or email OTP, we collect your name, email address, and profile picture (if available). Authentication is managed through Google Firebase.
• Google User Data (Optional): If you connect your Google account, we may access email messages and attachments and calendar events strictly to provide user-requested features such as reading emails, replying to existing email threads, and creating or managing calendar events. We do not access Gmail or Calendar data unless the user explicitly connects their account and grants permission.
• Usage Data: We collect analytics and conversion data using Google Analytics to understand user interactions and improve our services.
• Technical Data: Device information, IP address, and app usage statistics.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent, such as accepting cookies or marketing communications.
• Contract Performance: When processing is necessary to provide our services.
• Legitimate Interest: When we process data for fraud prevention, security, and service improvement.
• Legal Obligations: When required by law or regulatory authorities.

4. How We Use Your Data

We use your data for the following purposes:

• To authenticate and manage user accounts.
• To analyze app performance and improve user experience.
• To track conversions and optimize marketing efforts.
• To ensure security and prevent fraud.

Google Gmail data is accessed only at the user’s explicit request and is used solely to display emails, attachments, and to send replies or messages initiated by the user. We do not modify, delete, label, or organize emails, and we do not use Gmail data for advertising, profiling, or training generalized AI models.

We do not use Google Workspace data (including Gmail and Google Calendar data) to train or improve generalized artificial intelligence or machine learning models. Any AI-based processing is performed solely to provide real-time, user-requested assistance within the app.

Analytics and conversion data is collected independently of any Gmail or Google Calendar data and is not linked to email content or calendar event details.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. After this period, data is securely deleted or anonymized.

Email and calendar data accessed via Google APIs is processed in real time and is not stored permanently unless required to fulfill a user-requested action. Any temporary data is deleted as soon as the requested task is completed, unless retention is legally required.

6. Data Sharing and Third-Party Services

We do not sell your personal data. However, we may share data with:

• Appsflyer: For analytics and conversion tracking.
• Authentication Providers (Google, Apple, Microsoft): For sign-in functionality.
• Legal Authorities: If required by law.
• Data Transfers Outside the EU: Some of our service providers may process data outside the EU. We ensure GDPR compliance through Standard Contractual Clauses (SCCs) or other legal safeguards.

7. Data Security

We implement appropriate security measures to protect your data against unauthorized access, alteration, or destruction.

8. Your Rights Under GDPR

As an EU resident, you have the following rights:

• Right to Access: Request a copy of your personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure (Right to Be Forgotten): Request deletion of your personal data under certain conditions.
• Right to Restriction of Processing: Limit the processing of your data.
• Right to Data Portability: Receive your data in a structured format and transfer it to another service.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

Users can revoke access to their Google account data at any time through their Google Account security settings or within the app. Revoking access immediately stops further data processing.

To exercise your rights, contact us at privacy@ezail.com.

9. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be communicated through the app or our website.

10. Contact Us

If you have any questions about this Privacy Policy or GDPR-related requests, please contact us at privacy@ezail.com.