Privacy Policy

Last updated: October 6, 2026
Effective date: August 27, 2026

This Privacy Policy explains how EZ.AI Inc ("EZ.AI", "we", "us", or "our") collects, uses, shares, and protects personal information when you use EzeBld.AI and our related websites, mobile applications, messaging channels, APIs, and services (together, the "Service").

EzeBld.AI is a business platform for residential contractors. Contractors use it to manage leads and customers, projects, proposals, contracts and e-signatures, invoices and payments, schedules, subcontractors and suppliers, and to talk to an AI assistant on the web, in our mobile app, and over WhatsApp. Some of what you give us is processed by artificial intelligence systems, including systems operated by third parties. Section 5 explains how that works, including how to opt out of model training. Please read it.

If you do not agree with this Policy, please do not use the Service.

Key points at a glance

This summary is for convenience only and is not a substitute for the full Policy below.

• We collect the information you give us (account details, billing details, and the business records you keep in the Service), information we collect automatically (usage, device, and log data), and information we receive from third parties (Google or Apple sign-in, calendar connections, and our payment processor).
• When a contractor stores information about their own customers, subcontractors, or suppliers in the Service, the contractor controls that information and we process it on their behalf. See Section 1.
• AI features send your requests and related project context to our AI model providers (OpenAI, and Google where configured) to produce results. Under their API terms, these providers do not use that data to train their models.
• We may use your Content to improve our own AI features and safety systems. You can opt out at any time by emailing privacy@ezebld.ai.
• We do not sell your personal information, and we do not share it for advertising. We do not use advertising cookies or pixels.
• If you turn on SMS alerts, we use your mobile number only to send you those alerts. We never sell your mobile number or share it with third parties for marketing. See Section 7.2.
• Our mobile app asks for access to your camera, photos, and location only when you use a feature that needs it. Each permission is optional and can be revoked in your device settings.
• You can access, correct, export, and delete your information. See Sections 12 and 13.
• The Service is for users 18 and over.
• Questions or requests: privacy@ezebld.ai

1. Who we are and how to reach us

EZ.AI Inc is the controller of the personal information described in this Policy. We are a Wyoming corporation with a business address at 30 N Gould St, Ste R, Sheridan, WY 82801, United States.

Privacy enquiries and rights requests: privacy@ezebld.ai
General enquiries: info@ezebld.ai

Information contractors keep about other people. Our customers are contracting businesses. When a contractor uses the Service to store information about the people it works with, such as homeowners and other clients, leads, subcontractors, suppliers, and their own staff, and to send those people proposals, contracts, invoices, emails, or text messages, the contractor is the controller of that information and we act as its processor (service provider). In those cases the contractor's own privacy policy governs, and we process the information only to provide the Service to the contractor, under our Data Processing Addendum, a copy of which is available by emailing privacy@ezebld.ai. If you are one of a contractor's clients, subcontractors, or suppliers and have a question about your information, please contact that contractor. We will help them respond.

2. Definitions

• Account means the account you create to access the Service.

• Content means anything you submit to, create with, or store in the Service, including business records (leads, customers, projects, proposals, contracts, change orders, invoices, payments, tasks, schedules, and notes), uploaded files and photos, messages, voice notes, and Inputs and Outputs.

• Inputs means questions, instructions, files, images, voice notes, text, and other material you submit to an AI feature.

• Outputs means the material an AI feature generates in response to Inputs.

• Model Provider means a third party whose AI models we use to power features of the Service.

• Personal information (or personal data) means information that identifies, relates to, or could reasonably be linked with an identified or identifiable individual.

• Sensitive personal information has the meaning given under applicable law, including "special categories of personal data" under the GDPR.

• Service Provider or Subprocessor means a third party that processes personal information on our behalf and under our instructions.

• Usage Data means data generated automatically by your use of the Service or by the Service infrastructure.

3. Information we collect

3.1 Information you give us

• Account and profile information: name, email address, phone number, password credentials, profile photo, company name, job title, role and permissions, time zone, and notification preferences.

• Billing and transaction information: billing name, billing address, telephone number, tax identifiers, purchase history, subscription plan, and the last four digits and expiry of your payment card. Full payment card numbers are collected and processed directly by Stripe, our payment processor; we do not store them.

• Mobile number for SMS alerts: if you verify a mobile number to receive text-message alerts, we collect that number, the date and time you verified it, and a record of any STOP or START replies you send.

• Business records: the Content you keep in the Service. This often includes personal information about other people, such as clients' names, contact details, and property addresses; project details, photos, and documents; and the names, contact details, insurance and licence documents of subcontractors and suppliers. See Section 1 for who controls this information.

• E-signature records: when a contract or other document is signed through the Service, we record the signer's name, email address, typed or drawn signature, IP address, device and browser information, and the time of each step, to create an audit trail of the signature.

• Messages and AI assistant conversations: messages you exchange with our AI assistant on the web, in the mobile app, or over WhatsApp, including voice notes, which we transcribe to text.

• Communications with us: support tickets, emails, chat messages, survey and interview responses, and feedback. We may record or transcribe support calls and product demonstrations where permitted by law; where a call is recorded we will tell you at the start of the call.

3.2 Information we collect automatically

• Usage Data: the pages and features you use, the actions you take, the time and duration of your visits, search terms used within the Service, the volume and frequency of AI requests, error and crash reports, and performance and diagnostic data.

• Device and connection data: IP address, browser type and version, operating system, device type and model, unique device and installation identifiers, push notification tokens, language and locale settings, time zone, and mobile network information.

• Approximate location: derived from your IP address, and used for security, fraud prevention, tax determination, and regional feature availability.

• Message delivery data: for emails and text messages sent through the Service, whether each message was delivered, failed, or bounced, and the carrier's or provider's reason and cost.

• Cookies and similar technologies: see Section 9.

3.3 Information from third parties

• Google and Apple sign-in: if you register or sign in using your Google or Apple account, we receive the information that provider shares with us, typically your name and email address (Apple may give us a private relay address instead) and, from Google, your profile picture, subject to the permissions you grant and your settings with that provider.

• Calendar connections: if you connect a Google or Microsoft Outlook calendar, we receive the events, times, attendees, and locations needed to sync your schedule, using access tokens you authorize. You can disconnect at any time.

• Other connected accounts and integrations: if you connect a third-party tool to the Service, we receive access tokens and the data you authorize us to access, only to deliver the features you have enabled.

• Payment and banking providers: Stripe provides us with transaction confirmations, payment method metadata, chargeback and dispute records, and fraud signals.

• Publicly available and licensed sources: information used to verify accounts and businesses, prevent fraud, and comply with sanctions and legal screening obligations.

3.4 Optional, permission-based collection in our mobile app

Our mobile application asks for the following permissions. Each is optional, each is requested only when you first use the relevant feature, and each can be revoked at any time in your device settings. Revoking a permission disables the associated feature but does not otherwise affect your access to the Service.

• Camera and photo library: to let you take and upload job-site photos and documents.

• Location (while using the app): for location-aware features, such as showing your projects and job sites on a map.

• Notifications: to send you push alerts.

• Face ID, Touch ID, or fingerprint unlock: to let you unlock the app quickly. Your device performs the check; we never receive or store your biometric data.

Data collected under these permissions may be uploaded to our servers to deliver the feature, or may remain on your device, depending on the feature.

3.5 Sensitive information

We do not ask you for sensitive personal information, and we ask that you do not submit it through the Service unless a feature specifically requires it. If you include sensitive information in your Content, you are responsible for having a lawful basis to do so, and we will process it only as needed to provide the Service.

4. How we use information

We use personal information for the following purposes:

• To provide and operate the Service: create and administer your Account, authenticate you, store and display your Content, run AI features, generate and deliver documents, collect e-signatures, send the emails and text messages you or your company ask us to send, sync calendars, and provide integrations you enable.

• To process payments: bill you, manage subscriptions and renewals, calculate taxes, issue refunds, and handle disputes and collections.

• To support you: respond to enquiries, diagnose problems, and, with your permission or where necessary to resolve a reported issue, access your Content to troubleshoot.

• To maintain safety, security, and integrity: detect, investigate, and prevent fraud, abuse, spam, security incidents, prohibited uses, and violations of our Terms; enforce usage limits; verify accounts; and protect our users, our systems, and the public. This includes automated scanning of Inputs and Outputs, and human review of material our safety systems flag.

• To improve and develop the Service: understand how features are used, debug, measure performance, conduct research and analytics, and design new features.

• To develop and improve AI models and safety systems: see Section 5.3, including how to opt out.

• To personalize your experience: remember your preferences and settings, and tailor onboarding.

• To communicate with you: send service, security, transactional, and administrative messages, and the alerts you choose in your notification settings, by email, in-app notification, push notification, SMS, and WhatsApp. You cannot opt out of essential service messages while you hold an Account, but you can turn off each optional alert channel in your settings, and you can reply STOP to any text message.

• For marketing: send newsletters, product announcements, offers, and event invitations by email. You can unsubscribe at any time using the link in any marketing email. We do not send marketing by text message to the mobile number you verify for alerts.

• To comply with law: meet legal, tax, accounting, sanctions, and regulatory obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

• For corporate transactions: evaluate, negotiate, or complete a merger, financing, acquisition, reorganization, sale of assets, or bankruptcy proceeding.

• For new purposes: if we want to use your personal information for a materially different purpose, we will update this Policy and, where the law requires it, obtain your consent first.

5. How we handle AI

This section explains how AI features process your information.

5.1 You are interacting with an AI system

Features of the Service, including the AI assistant, are powered by artificial intelligence. Content generated by these features is produced by an AI system, may be inaccurate or incomplete, and should be reviewed before you rely on it or send it to anyone. Where required by law, AI-generated Outputs are marked or labelled as artificially generated.

5.2 Our Model Providers

To generate Outputs, we transmit your Inputs and, where relevant, related project context to our Model Providers, which process them on our behalf through their standard APIs in order to return a result. Our primary Model Provider is OpenAI, which also transcribes voice notes. Some features may instead use Google's Gemini models where we have configured them to. Under these providers' API terms, they do not use data submitted by us to train or improve their models, and they retain data only for a limited period for abuse monitoring.

We also send records of AI requests and responses to Langfuse, an observability provider, so that we can debug the AI features and measure their quality.

If we add or change Model Providers, we will update this Policy before routing your Inputs to a new provider.

5.3 Training and model improvement, and your opt-out

We may use your Content, including Inputs and Outputs, to train, fine-tune, evaluate, and improve the AI features and safety systems used in the Service. Before doing so, we take steps to remove or mask direct identifiers.

You can opt out at any time by emailing privacy@ezebld.ai from the email address on your Account. Opting out does not limit or degrade any feature available to you.

Opting out applies going forward. Content that has already been incorporated into a trained model cannot be extracted from that model, but once you opt out we will not use your Content for any future training.

We do not use Content belonging to business or enterprise customers for training without their separate written agreement.

5.4 Human review

We limit human access to your Content. Authorized personnel and vetted contractors under confidentiality obligations may review Content only where necessary to: investigate a suspected violation of our Terms or a safety risk; respond to a support request you have made; comply with a legal obligation; or evaluate and improve model quality, unless you have opted out under Section 5.3. Access is logged and restricted to those who need it.

5.5 Automated decision-making

We use automated systems to scan and score activity for fraud, abuse, and safety, which can result in rate-limiting, feature restriction, or account suspension. We do not use automated processing to make decisions that produce legal effects concerning you or similarly significantly affect you without human involvement, except where necessary to enter into or perform a contract with you or where permitted by law. If your account is restricted by an automated system, you may contact privacy@ezebld.ai to request human review and to contest the decision.

5.6 Your responsibilities for personal information in Inputs

If you submit personal information about other people, for example a client's details in a lead or a project, you are responsible for having the legal right to do so, for providing any required notice to those individuals, and for obtaining any required consent, including consent to receive text messages that you send them through the Service. Where we process that data on your behalf, we do so as your processor under our Data Processing Addendum, available on request.

6. Legal bases for processing (EEA, UK, and Switzerland)

We are a United States business and do not currently target or market the Service to individuals in the European Economic Area, the United Kingdom, or Switzerland. If you are located in one of those regions and use the Service, we process your personal data on the following legal bases:

• Performance of a contract: to create and administer your Account, deliver the Service, run AI features you invoke, process payments, and provide support.

• Legitimate interests: to secure the Service and prevent fraud and abuse, improve and develop features and models, conduct analytics, market to existing customers, and manage our business, where those interests are not overridden by your rights. You have the right to object; see Section 13.

• Consent: for SMS alerts, device permissions such as location, and certain marketing communications. You may withdraw consent at any time without affecting processing carried out before withdrawal.

• Legal obligation: to meet tax, accounting, sanctions, and other legal requirements, and to respond to lawful requests.

• Vital interests: in rare cases involving a threat to life or safety.

7. How we share information

We share personal information in the following circumstances, and not otherwise:

• Service Providers and Subprocessors: the providers listed in Section 7.1, each of which is contractually required to protect your information and to use it only for the services it provides to us.

• Within your company and with the people you work with: with teammates in your company according to the roles and permissions your company sets, and with the clients, subcontractors, suppliers, and other recipients you send proposals, contracts, invoices, messages, or portal invitations to.

• At your direction: with integrations and third-party services you connect.

• Within our corporate group: with parents, subsidiaries, and affiliates under common control, who must honor this Policy.

• Business transfers: in connection with a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy. We will give notice before your personal information becomes subject to a different privacy policy.

• Legal and safety: where we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or an enforceable governmental request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of EZ.AI, our users, or the public. Where permitted, we will notify you of a legal demand for your information before we respond.

• Aggregated or de-identified information: which cannot reasonably be used to identify you, for any lawful purpose. We will not attempt to re-identify it and will require recipients not to.

• With your consent: for any other purpose disclosed to you at the time.

We do not sell personal information, we do not share it for advertising, and we do not share your contact details with third parties for those third parties' own marketing purposes.

7.1 Our subprocessors

We update this list when we add or replace a provider that processes personal information.

7.2 Mobile phone numbers and text messages (SMS)

If you choose to receive SMS alerts, you give us your mobile number and verify it by entering a one-time code we text to it. Verifying is how you agree to receive alert texts from EzeBld.AI. These texts are account notifications, such as overdue tasks, invoices and payments, pending approvals, and appointment changes. We do not send marketing texts to this number. Message frequency varies. Message and data rates may apply.

We use your mobile number and SMS consent only to send you the alerts you asked for, to verify your number, and to honor your opt-out. We do not sell, rent, or share mobile phone numbers or SMS opt-in data and consent with any third party or affiliate for marketing or promotional purposes. The only party that receives your number is our SMS provider, Twilio, which delivers the messages on our behalf. Every category of sharing described in this Policy excludes text-messaging originator opt-in data and consent. That information will not be shared with any third party.

You can opt out at any time by replying STOP to any message. You will receive one confirmation text and no further alerts. Reply START to resume. Reply HELP for help, or email info@ezebld.ai. You can also turn SMS alerts off for each notification type in Settings → Notifications.

8. Retention

We keep personal information only as long as necessary for the purposes described in this Policy, and then delete or de-identify it. Our retention periods are:

We may retain information longer where required by law, where necessary to resolve disputes or enforce our agreements, or where an account has been suspended for abuse, in which case we retain the minimum necessary to prevent the abuse from recurring.

9. Cookies and similar technologies

We and our providers use cookies, local storage, and mobile SDKs to operate the Service. We use:

• Strictly necessary technologies: for authentication, session management, load balancing, security, and fraud prevention. These cannot be disabled.

• Functional technologies: to remember preferences such as language, layout, and table settings.

• Error and performance monitoring: to detect crashes and slow pages (see Sentry and Grafana in Section 7.1).

We do not use advertising cookies, pixels, or cross-site tracking. If that ever changes, we will update this Policy first and give you a way to opt out.

You can control cookies through your browser settings. The Service may not function properly without strictly necessary cookies.

9.1 Opt-out preference signals

Because we do not sell or share personal information for advertising, there is nothing for Global Privacy Control or Do Not Track signals to opt you out of. If we ever begin such processing, we will honor Global Privacy Control signals as a valid opt-out request.

10. International transfers

We are based in the United States, and our providers are located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored in, and processed in the United States, whose data protection laws may differ from those in your jurisdiction. Where we transfer personal data out of the EEA, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. You can request a copy of the relevant safeguards by emailing privacy@ezebld.ai.

11. Security

We maintain technical, administrative, and physical safeguards designed to protect personal information, including encryption of data in transit and at rest, access controls and least-privilege permissions, separation of each company's data, logging and monitoring, vulnerability management, and security review of our providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

12. Your choices

• Account information: you can review and update most of your information in your account settings.

• Content: you can edit or delete records, files, and photos from within the Service, subject to the permissions your company sets.

• Model training: opt out of the use of your Content for model training at any time by emailing privacy@ezebld.ai.

• Notifications: choose which alerts reach you by email, push, SMS, or WhatsApp in Settings → Notifications.

• Text messages: reply STOP to any SMS alert, or turn SMS alerts off in Settings → Notifications. See Section 7.2.

• Marketing: unsubscribe using the link in any marketing email. We will still send essential service messages.

• Calendar connections: disconnect a Google or Outlook calendar at any time in your settings.

• Device permissions: revoke camera, photo, location, or notification access at any time in your device settings.

• Account deletion: email privacy@ezebld.ai from the email address on your Account to ask us to delete your Account. If your Account belongs to a company, we may confirm the request with your company's administrator, because the company controls its business records (see Section 1).

13. Your privacy rights

13.1 Rights available to everyone

Regardless of where you live, you may ask us to:

• confirm whether we process personal information about you, and give you access to it;
• correct inaccurate or incomplete information;
• delete your information;
• provide a copy in a portable, machine-readable format;
• stop sending you marketing.

Submit requests to privacy@ezebld.ai. We will verify your identity before acting, typically by confirming control of the email address on the Account, and we will respond within the time required by applicable law. We will not discriminate against you for exercising your rights. If we deny your request, we will explain why, and you may appeal by replying to our response. We will inform you of the outcome of the appeal, and of your right to contact your state attorney general, within the period required by law. If your information is held by a contractor that uses the Service (see Section 1), we will pass your request to that contractor and help them respond.

13.2 EEA, UK, and Switzerland

If you are in one of these regions, you may also object to processing based on legitimate interests, request restriction of processing, withdraw consent at any time, and object to direct marketing at any time. You have the right to lodge a complaint with your local supervisory authority: in the UK, the Information Commissioner's Office; in the EEA, the authority in your country of residence or work. We would appreciate the chance to address your concern first.

13.3 United States: state privacy rights

Residents of states with comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and Washington, have the rights described in Section 13.1, and, depending on their state, the right to:

• opt out of the sale of personal information, the sharing of personal information for targeted or cross-context behavioral advertising, and profiling in furtherance of decisions producing legal or similarly significant effects;
• limit the use and disclosure of sensitive personal information;
• obtain a list of the categories of third parties to whom we disclosed personal information;
• appeal a denied request;
• designate an authorized agent to submit requests on their behalf, on presentation of valid written authorization.

To exercise these rights, contact privacy@ezebld.ai.

13.4 Sale and sharing of personal information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the twelve months before the last-updated date of this Policy. This includes mobile phone numbers and SMS opt-in data (see Section 7.2). We do not knowingly sell or share the personal information of anyone under 16, and the Service is not available to anyone under 18.

13.5 California: additional disclosures

In the twelve months preceding the last-updated date of this Policy, we collected the categories of personal information set out in the Appendix. For each category, the sources, business purposes, and categories of recipients are described in Sections 3, 4, and 7. We use sensitive personal information only as needed to provide the Service and as otherwise permitted by law, and not to infer characteristics about you. California residents may also request information about disclosures to third parties for their direct marketing purposes under California's "Shine the Light" law; we make no such disclosures.

13.6 Other jurisdictions

If you are in Canada, Brazil, Australia, or another jurisdiction with applicable data protection law, you may have equivalent rights under that law. Contact us and we will honor them to the extent they apply.

14. Children

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact privacy@ezebld.ai and we will delete it. If we learn that we have collected personal information from a user under 18, we will delete the information and terminate the account.

15. Third-party sites and services

The Service links to and integrates with services we do not control, such as WhatsApp, calendar providers, and payment providers. This Policy does not apply to them. Review their privacy policies before providing information.

16. Changes to this Policy

We may update this Policy. We will post the revised version here and update the "Last updated" date. If the changes are material, we will provide at least 30 days' advance notice by email or prominent in-product notice before they take effect, and where the law requires it, we will obtain your consent. Continuing to use the Service after the effective date means you accept the revised Policy.

17. Contact us

For any question about this Policy or our handling of your information:

Email: privacy@ezebld.ai
Post: EZ.AI Inc, Attn: Privacy, 30 N Gould St, Ste R, Sheridan, WY 82801, United States

Appendix: Categories of personal information

The following table uses the categories defined by the California Consumer Privacy Act.

Retention for each category is set out in Section 8. Sources are set out in Section 3. Purposes are set out in Section 4. Recipients are set out in Section 7.