Privacy Policy

Who uses Ezra

Ezra is used in two ways, and this policy covers both:

Agency workspaces. A talent management agency operates an Ezra workspace to manage the creators it represents: their media kits, statistics, deals, contracts and campaigns. The talent an agency represents may connect their own social accounts into the agency's workspace; when they do, they authorise the platform connection themselves through the platform's official consent screen (for example Instagram's), and the resulting data is managed by their agency inside its workspace. For information inside an agency workspace, the agency decides what is collected and how it is used; Ezra processes it on the agency's behalf.

Individual creators. A self-managed creator operates their own workspace and connects their own accounts. They control their own information directly.

Where this policy says “you”, it means the account holder — the agency for agency workspaces, the creator for individual workspaces.

1. Information we collect

Account information. Name, email address, password credentials, workspace and billing details.

Connected platform data. When you or your talent connect social accounts (Instagram, TikTok, YouTube), we receive profile information and performance data from those platforms via their official APIs with the account holder's authorisation: handles, names, profile images, follower counts, audience demographics, and content metrics (views, likes, comments, shares, saves, reach, impressions). We do not collect platform passwords.

Content you provide. Media kits, images, videos, pitches, reports, deal records, notes, rates and rate cards, commercial terms, and messages you exchange with Moxy (our AI assistant).

Documents. Contracts, briefs and other files you upload. Uploaded contracts are stored encrypted in private storage, are never made public, and are accessible only through your authenticated account.

Information about other people. Agency workspaces contain information about third parties: the talent an agency represents and the brand contacts it deals with (names, emails, deal terms). If you operate an agency workspace, you are responsible for having the authority and consents needed to provide that information to us. We process it only to provide the Service to you.

Usage data. IP address, device and browser information, pages viewed and actions taken, collected via cookies and similar technologies for security, functionality and product analytics.

2. How we use information

• To provide and operate the Service, including generating media kits, pitches, reports, deal records, contract analyses and invoices at your direction.
• To power AI features: content you provide (including uploaded documents and chat messages) is processed by third-party AI providers via their APIs to generate outputs for you. Your data is not used by us or, under our API agreements, by those providers to train their models.
• To secure the Service, prevent abuse, provide support and meet legal obligations.
• We do not sell personal information. We do not use your data to advertise to third parties.

3. Who we share information with (subprocessors)

We use service providers to operate Ezra. They process data only to provide their service to us:

• Supabase (database, authentication and file storage)
• Vercel (application hosting)
• Uploadcare (media storage and delivery)
• OpenAI and Anthropic (AI processing via API)
• Meta Platforms and Phyllo/InsightIQ (social platform data connections you authorise)
• Stripe (payments and billing, where payment features are used)

We may also disclose information where required by law. If Ezra is involved in a merger, acquisition or asset sale, information may be transferred as part of that transaction with notice to you.

4. International transfers

Some providers process data outside Australia (including the United States and the European Union). We take reasonable steps to ensure recipients handle personal information consistently with the Australian Privacy Principles.

5. Retention and deletion

Account and workspace data is kept while your account is active. You can delete content or your account at any time; deletion removes data from live systems, with backups purged on a short rolling window. Records of terms acceptance and financial records may be retained as required by law.

6. Security

Data is encrypted in transit and at rest. Contracts and sensitive documents are stored in private buckets accessible only via authenticated, owner-checked requests. Access within Ezra is limited to what is needed to operate and support the Service.

7. Your rights

You may request access to or correction of your personal information, or make a privacy complaint, by contacting hello@ezrakits.com. We will respond within a reasonable period. If you are unsatisfied, you may complain to the Office of the Australian Information Commissioner (OAIC). If you are in the EEA or UK, you may also have rights of access, rectification, erasure, restriction, portability and objection, and may complain to your local supervisory authority.

8. Talent represented by agencies

If you are a creator whose information appears in an agency's Ezra workspace:

• Your social account connection was authorised by you through the platform's own consent flow, and you can revoke it at any time in that platform's settings (for example Instagram's Apps and Websites page) or by asking your agency.
• Your agency controls what information about you is held in its workspace and how it is used. Contact your agency in the first instance to access, correct or remove your information.
• You can also contact us at hello@ezrakits.com and we will assist, working with your agency where needed.

9. Changes and contact

We will post updates to this policy here and note material changes in the app. Questions and requests: Ezra Labs Pty Ltd (ABN 48 672 172 833), Level 1, 63–73 Ann Street, Surry Hills NSW 2010, hello@ezrakits.com.