Privacy Policy

1. Information we collect

We may collect the following categories of information:

• Account information: email address, name, phone number (if you provide it), authentication identifiers, and account preferences.
• Google Sign-In data: if you choose Continue with Google, we receive information such as your name, email address, and profile picture URL as permitted by your Google account settings.
• User content: reference photos you upload, order details, theme selections, and generated deliverables associated with your orders.
• Payment information: we do not store full card or UPI credentials. Razorpay processes payments and may share payment status, transaction identifiers, and billing metadata with us.
• Device and usage data: IP address, browser or app type, device identifiers, log data, and security signals needed to operate and protect the Service.
• Push tokens: if you enable notifications on mobile, we store a device push token to send order updates you opt into.

2. How we use information

We use information to:

• create and secure your account;
• authenticate you, including through Google Sign-In and email/password;
• process orders, payments, and deliver generated images;
• provide customer support and respond to requests;
• send service messages such as password reset or order status (and marketing only if you opt in);
• prevent fraud, abuse, and security incidents;
• improve reliability and debug technical issues;
• comply with law and enforce our Terms of Service.

3. Google Sign-In and Google user data

When you sign in with Google, we access Google user data only as needed to authenticate you and maintain your account. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy).

Specifically, we:

• use Google-provided email, name, and profile information only to create or sign in to your Eazyshoot account and display basic account details to you;
• do not use Google user data for advertising, remarketing, or selling to data brokers;
• do not use Google user data to train generalized AI or machine-learning models;
• do not transfer Google user data to third parties except service providers that process data on our behalf to operate the Service (such as Supabase for authentication storage), and only under confidentiality and security obligations consistent with this policy and Google's Limited Use requirements;
• do not allow humans to read Google user data except with your consent, for security or legal compliance, or when necessary to provide support you request;
• retain Google-derived account identifiers only while your account is active or as needed for the purposes above, unless a longer period is required by law.

You can stop our access to Google Sign-In data by signing out, disconnecting Google from your Google Account security settings where available, or requesting account deletion once support contact details are published.

4. How we share information

We do not sell your personal information. We may share information with:

• Service providers that help us operate the Service, including Supabase (database, authentication, and private file storage), OpenAI (image generation processing), Razorpay (payments), Inngest (background jobs), and hosting providers such as Vercel. These providers may access data only to perform services for us under contractual safeguards.
• Legal and safety: when required by law, court order, or to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to continued protection consistent with this policy.

5. Storage and security

Account data and uploaded media are stored using Supabase and related cloud infrastructure. Reference photos and generated deliverables are kept in private storage accessible through your authenticated session or time-limited signed links. We use industry-standard measures to protect data in transit and at rest, but no system is completely secure.

6. Retention and deletion

We retain uploaded reference photos, generated outputs, and related order and account information for as long as reasonably necessary to fulfill orders, provide account access to your history and downloads, respond to support requests, protect the security of the Service, and comply with legal and regulatory obligations.

Abandoned upload drafts and unpaid checkout data may be deleted automatically after the expiry periods shown in the Service.

You may request deletion of personal data, your account, or specific uploads and outputs. We will honor valid requests unless we must retain certain information for legal compliance, fraud prevention, security, or to complete an active order or dispute. Submit requests using the contact details in Section 12 once a support email is published, or through any in-product privacy or deletion request option we provide.

7. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, protect checkout flows, and measure basic reliability. You can control cookies through your browser settings, but some features may not work if cookies are disabled.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of your personal information. You can update some account details in the Service. You may also request deletion as described in Section 6. For other privacy requests, contact Eazyshoot once support contact details are published, or use any in-product request option we provide.

9. Children

The Service is not directed to children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us so we can take appropriate action once support contact details are published.

10. International processing

We and our service providers may process information in countries other than where you live. When we do, we take steps designed to protect your information consistent with this policy and applicable law.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date. Material changes may also be communicated through the Service where appropriate.

12. Contact

Eazyshoot. A dedicated support email address will be published on this page when available. Until then, use the contact options shown in your account area on the Service. Our Terms of Service are available at https://eazyshoot.com/legal/terms.