Privacy Policy

1. Who We Are

EZPsych ("the Service", available at ezpsy.ai) is a web platform for questionnaire pilot studies using LLM-simulated respondents. The Service is operated independently by the EZpsy team. This policy explains what data we collect, why, and how we handle it.

2. Data We Collect

• Account data: username, email address, and a cryptographically hashed password. We never store passwords in plain text.
• Experiment content: the questionnaire workbooks or JSON specifications you upload, and the experiment results generated from them.
• Billing records: credit balance, transactions, and order references. Payment card details are handled entirely by our Merchant of Record (Creem.io) — we never see or store your card number.
• Technical data: IP addresses and request logs, used for security, rate limiting, and abuse prevention; a session cookie to keep you signed in.

3. How We Use Your Data

• To operate the Service: run your experiments, store your results, and maintain your credit balance.
• To send transactional email (account verification, important service notices). We do not send marketing email.
• To protect the Service against fraud and abuse.

We do not sell your data, and we do not use your uploaded content for any purpose other than running the experiments you request.

4. LLM Processing

To generate simulated responses, the content of your questionnaires is sent to third-party LLM providers (e.g., OpenRouter and its upstream model providers). Please do not include personally identifiable information about real individuals in your workbooks. Simulated respondent "personas" are synthetically generated and do not correspond to real people.

5. Payment Processing

All payments are processed by Creem.io as our Merchant of Record, which handles billing, tax collection, and invoicing. Your payment details are subject to Creem.io's Privacy Policy.

6. Data Retention

• Experiment data (uploaded workbooks and result files) is retained for a maximum of 90 days after the experiment completes, then automatically deleted. Please download your results promptly.
• Account and billing records are retained for as long as your account exists, and as required for financial record-keeping.
• Encrypted database backups are kept for up to 30 days.

7. Cookies

We use only essential cookies: a session cookie for sign-in and a CSRF token for security. We do not use advertising or cross-site tracking cookies.

8. Data Sharing

We share data only with the service providers required to operate the platform: cloud hosting and object storage providers, our Merchant of Record (Creem.io) for payments, LLM API providers for experiment execution, and our email delivery provider for transactional mail. Each receives only the data necessary for its function.

9. Security

All traffic is encrypted via HTTPS. Passwords are stored as salted hashes. Access to production systems is restricted to authorized personnel. Uploaded content and results are accessible only to the account that created them.

10. Your Rights

You may access your data at any time through your account. You may request correction or deletion of your account and associated data by contacting us; account deletion removes your experiment data and personal information, subject to records we must keep for financial compliance.

11. Children

The Service is intended for users aged 18 and over. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be announced via email or a notice on the platform.

13. Contact

For privacy questions or data requests, contact us at support@ezpsy.ai.