Privacy Notice

EZ Organic is a business software service provided by Recovery Amped LLC ("EZ Organic", "we", "us", or "our"). This Privacy Notice describes information handled through our website, applications, support, and related services.

It covers website visitors, customer account owners and users, people who contact support, and people whose comments or messages a customer chooses to manage through the service. When an EZ Organic customer connects an account or enables an automation, that customer decides what information to process and why. We generally process social inbox, commenter, and lead information to provide that customer's requested service. The customer may have a separate privacy notice that explains its own practices.

Account and workspace information, such as name, email address, login and membership identifiers, roles, workspace settings, and account status.

Connected social and lead information made available through customer-authorised providers: account names and identifiers, post and comment details, profile information returned by the platform, message text and delivery status, conversation identifiers, opt-in and opt-out records, CRM notes, lead stages, and follow-up activity.

Content and instructions a customer chooses to provide or create, such as business and campaign training, prompts, messages, posts, generated text and images, uploaded documents and reference images, and relevant conversation history.

Voice information when a user chooses AI Me voice dictation. The browser first tries to transcribe audio on the user's device. If local transcription cannot run and the workspace has an eligible OpenAI connection, the recording may be sent to OpenAI for transcription. A resulting transcript may then be used to prepare the requested AI Me draft. We do not create a voiceprint to identify the speaker.

Billing and transaction information, such as plan, billing status, subscription and invoice identifiers, payment status, and records needed to administer a purchase. Stripe handles payment card entry for direct Stripe checkouts; we receive relevant billing records and identifiers, not the full card number.

Support and operational information, such as support correspondence, security and audit events, feature activity, timestamps, and technical request or error details needed to run, protect, and troubleshoot the service. Your browser may also store necessary session, theme, and unfinished-draft information locally.

We receive information directly when a person creates an account, uses a workspace, contacts support, or submits content. We also receive information from services a customer connects or authorises, including Zernio and the relevant social network, and from payment, email, or other providers involved in a requested feature.

Social platform data is processed when the customer connects an account or enables a supported inbox, publishing, or automation feature. We do not obtain a person's private social information merely because they visit our website.

We use information to create and secure accounts; provide workspaces; publish content and operate customer-requested messaging; display inbox, opt-in, and CRM records; generate or transcribe content when requested; provide support; administer billing; prevent fraud and misuse; diagnose errors; measure service reliability; meet legal obligations; and enforce our agreements.

AI features may draft or classify content, transcribe a user-requested recording, assist with a reply, or provide a lead or conversation summary. They are tools for the user's requested workflow, not a guarantee of a particular outcome. We do not use a lead score to make decisions about a person's eligibility for credit, employment, housing, insurance, or another similarly significant service.

When an AI feature is used, relevant prompts, business instructions, uploaded materials, selected conversation messages, or other necessary input may be sent to the workspace's chosen AI provider. Text and conversation features may use OpenAI, Anthropic, or Google, depending on the workspace configuration. Image generation and the voice transcription fallback use OpenAI. Local voice transcription is attempted in the browser before the fallback.

Customers may connect their own provider API keys or use an available managed provider option. The selected provider receives the request needed to perform the feature. Its privacy terms, retention settings, and data handling apply to its processing. We do not control an independent provider's practices; customers should review the provider terms for their chosen account and configuration.

Customers should only submit information they are authorised to use and should avoid sensitive personal information unless the feature, provider, and applicable law permit it. AI-generated output can be inaccurate and should be reviewed by the customer.

We disclose information only as needed to provide, secure, and support the service, follow customer instructions, or meet legal obligations. Depending on features used, recipients may include:

• Supabase for account authentication, application database, and file storage.
• Azure and related hosting or delivery providers used to run the application; Cloudflare may provide domain or network services.
• Zernio and the social networks a customer connects, to provide requested publishing, inbox, and automation features.
• The AI provider selected for a requested generation, reply, analysis, image, or transcription feature.
• Stripe for direct billing and subscription administration.
• Resend for account and support email; Twilio may deliver an optional SMS alert when a workspace administrator enables it.
• Vercel Analytics only in deployments where the Vercel runtime is enabled.
• Professional advisers, authorities, or other parties where required by law, necessary to protect rights or safety, or involved in a business transfer subject to applicable safeguards.

We do not sell personal information for money. We do not use customer lead information to build advertising audiences for unrelated third-party advertising. We do not disclose it for cross-context behavioural advertising as part of the service's current operation.

Recovery Amped LLC operates from the United States. Our service providers and connected platforms may process information in the United States and other countries where they or their infrastructure operate. Those locations may have privacy laws different from the laws where you live.

Where required, we use contractual or other safeguards for international transfers. Provider locations and terms can change; check the provider's current privacy information for details about its own processing.

We keep information for the time needed to provide the service and for legitimate security, support, billing, dispute-resolution, and legal purposes. Customer workspace content generally remains while the workspace is active and until the customer deletes it or requests account deletion. A workspace owner can request deletion through account settings where available or by emailing us.

Some records, such as transaction, security, consent, opt-out, or audit records, may need to be retained for longer to meet legal obligations, resolve disputes, prevent abuse, or document that an opt-out was respected. Technical logs and provider records follow the applicable operational or provider retention schedules. When information is no longer needed, it is deleted or de-identified where practicable.

Deleting a workspace does not cancel a separately billed social, AI, or other provider account. Information already sent to an external provider is also subject to that provider's retention rules.

We use access controls, workspace separation, security monitoring, and safeguards designed to protect information. Certain connected credentials are encrypted in our application storage. Access is limited according to role and operational need. No online service can promise absolute security, so customers should protect their credentials and tell us promptly about suspected unauthorised access.

We use browser storage and similar technologies needed for sign-in, session security, remembering appearance settings, and preserving drafts a user is working on. Hosting or analytics technologies may also process technical information needed to deliver and understand service performance. The precise technologies can vary by deployment. We do not use customer lead data to target unrelated advertising.

Depending on where you live and which privacy laws apply, you may be able to request access to, correction of, deletion of, or a copy of personal information, object to or restrict certain processing, withdraw consent, or appeal a decision about a privacy request. Some laws also provide rights to opt out of certain sale, sharing, or targeted-advertising uses. We do not sell information for money or use customer lead information for cross-context behavioural advertising in our current operation.

To make a request, email jkt@ezpipeline.com with the subject “EZ Organic Privacy Request.” Tell us how to contact you and what information or workspace the request concerns. We may ask for reasonable information to verify the request and protect the account. We will respond as required by applicable law.

If your information is in a customer's social inbox or CRM, that customer may control the information and decide how to respond. You can contact the business whose account you interacted with; you may also contact us and we will help route the request where appropriate. Workspace owners can also request export or deletion of their workspace information.

Where Australian privacy law applies, you may request access to or correction of personal information we hold about you and may complain about how it is handled. Send a complaint to the privacy contact above with enough detail for us to investigate. We will acknowledge and review it and respond within a reasonable period or any period required by law. If you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner.

Information may be disclosed to overseas recipients as described in this notice. Where the Australian Privacy Principles apply, we take the steps required by applicable law for such disclosures.

If California privacy law applies to our processing, you may have rights to know or access, correct, or delete certain personal information, obtain a portable copy, and not be discriminated against for exercising a right. You may also have rights concerning sale, sharing, or targeted advertising. We do not sell personal information for money or share customer lead information for cross-context behavioural advertising in our current operation.

Submit a request using the privacy email above. An authorised agent may submit a request where the law allows; we may ask for proof of authority and verify the consumer's identity. We will not discriminate against you for exercising a privacy right.

EZ Organic is a business service and is not designed for children. Customers are responsible for ensuring their campaigns and audiences comply with laws and platform rules that protect children. If you believe a child provided personal information directly to EZ Organic, contact us so we can review it.

We may update this notice when the service or our practices change. We will update the date at the top and, where a change is material or law requires it, provide additional notice through the service or another appropriate channel.