Privacy Policy
This Privacy Policy describes how Eazip ("Eazip", "we", "us", or "our") collects, uses, and protects your personal information when you use the Eazip service ("Service"), including our API, dashboard, and website.
1. Information We Collect
Account Information
When you create an account, we collect your email address and name through our authentication provider. This information is used to identify you and manage your account.
Payment Information
Payment processing is handled by Stripe. We do not store your credit card number or full payment details. Stripe may collect and store your payment information in accordance with their privacy policy.
Usage Data
We collect information about how you use the Service, including:
- Job history (URLs submitted, ZIP file sizes, timestamps, job status)
- API key metadata (creation date, last used date; keys are stored as hashes, never in plain text)
- Webhook endpoint URLs you configure
Log Data
Our infrastructure automatically collects standard log data, which may include your IP address, User-Agent string, request timestamps, and API endpoints accessed.
2. How We Use Your Information
We use the information we collect to:
- Provide and operate the Service (fetching URLs, creating ZIP archives, delivering downloads)
- Process payments and manage subscriptions
- Send transactional communications (account verification, billing notifications)
- Monitor and prevent abuse or unauthorized use
- Improve the Service and fix issues
- Comply with legal obligations
We do not sell your personal information to third parties.
3. Third-Party Service Providers
We use third-party service providers to operate the Service. These providers process data on our behalf under appropriate agreements:
- Authentication provider — for sign-in and identity verification
- Payment processor (Stripe) — for billing and subscription management
- Cloud infrastructure providers — for data storage, processing, and content delivery
We do not share your personal information with third parties for their own marketing purposes.
4. Data Storage and Retention
- ZIP archives are stored for a limited period depending on your plan (Free: 24 hours; paid plans up to the retention limit shown on the Pricing page). After the retention period, archives are automatically and permanently deleted.
- Account data (email, name) is retained for as long as your account is active. Upon account deletion, we will remove your personal data within a reasonable period.
- Job history is retained for as long as your account is active to provide you with usage records.
- Log data is retained for up to 90 days for security and debugging purposes.
5. Data Security
We implement appropriate technical measures to protect your data, including:
- All communications are encrypted via HTTPS/TLS.
- API keys are stored as cryptographic hashes, never in plain text.
- Download URLs are signed with HMAC-SHA256 and expire automatically.
- Access to production systems is restricted to authorized personnel.
While we take reasonable steps to protect your information, no method of transmission or storage is 100% secure.
6. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate personal data.
- Deletion — request deletion of your personal data and account.
- Data portability — request your data in a structured, machine-readable format.
- Objection — object to certain processing of your personal data.
To exercise any of these rights, contact us at privacy@eazip.io.
7. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect and how it is used.
- Right to delete your personal information.
- Right to opt out of the sale of personal information — we do not sell your personal information.
- Right to non-discrimination for exercising your privacy rights.
8. Cookies and Tracking
Our website and application use essential cookies required for authentication and session management. We also use analytics tools, including Google Analytics and Microsoft Clarity, to understand aggregate usage, diagnose usability issues, and improve the Service. These tools may collect device, browser, page interaction, and session information. We do not sell your personal information.
9. Children's Privacy
The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
10. International Data Transfers
Your data may be processed and stored in various locations worldwide through our cloud infrastructure providers. By using the Service, you consent to the transfer of your data to these locations.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after such changes constitutes acceptance of the updated policy.
12. Contact
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@eazip.io.