Ezora
Privacy notice
Who is responsible
Ezora decides why and how your personal data is used (the controller). To reach us about privacy:
Use the contact form on the home page. Direct email details have not been published yet.
What we collect and why
| When | Data | Why |
|---|---|---|
| You send a project brief or ask for a call | Name, email, company and phone if you give them, budget, services of interest, your message | To reply to you and discuss work (steps you ask for before any agreement) |
| You subscribe to the newsletter | Email address; the time you confirmed | To send the newsletter after you confirm by link (double opt-in). You can unsubscribe in every email |
| You create a client portal account | Name, email, company, a salted password hash (never the password), sign-in and security events | To run your account and keep it secure |
| You use the portal | Projects, comments, uploaded files and their names, status history | To deliver the work you asked for. Files are visible only to you and Ezora admins |
| Every request | A one-way hash of your IP address, browser identifier, request time | Spam and abuse prevention, security logs. We do not store your raw IP address in forms or leads |
Legal bases
- Taking steps at your request before a contract, and performing a contract (briefs, call requests, the portal).
- Your consent (newsletter). You can withdraw it at any time.
- Our legitimate interest in keeping the service secure and free of spam.
Cookies and tracking
The portal sets one cookie, ezora_session, to keep you signed in. It is strictly necessary, HttpOnly, SameSite=Strict and expires with your session. The public website sets no cookies and uses no analytics, advertising or tracking scripts. Fonts are served from this site, not from a third party.
How long we keep data
- Messages flagged as spam: deleted automatically after a short period.
- Newsletter sign-ups never confirmed: deleted automatically.
- Security (audit) events: deleted automatically after a fixed period.
- Password reset links: expire after 30 minutes and are single use.
- Briefs, portal accounts, projects and files: kept while the relationship lasts and as needed for legal and accounting duties, then deleted or anonymised. Ask us for earlier deletion at any time.
Who receives your data
We do not sell personal data. It is processed by the infrastructure and email providers that run this service on our behalf, under their own data protection terms. Uploaded files and the database stay on servers we control. We may disclose data where the law requires it.
Security
Connections use HTTPS. Passwords are stored as salted hashes, sessions can be ended from every device, accounts lock after repeated failed sign-ins, and file uploads are checked before they are stored. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.
Your rights
Depending on where you live (for example under India's Digital Personal Data Protection Act, 2023, or the GDPR), you can ask to access, correct, delete or export your data, to restrict or object to its use, to withdraw consent, and to complain to your data protection authority. In the portal you can edit your profile and projects yourself. For anything else, contact us:
Write to . We answer within 30 days.
Use the contact form and mention that your message is a privacy request. We answer within 30 days.
International transfers
Ezora is run from India and works with clients worldwide, so your data can be processed in India or in the country of our hosting provider. Where the law requires safeguards for such transfers, we use them.
Children
This service is for businesses and is not directed at children under 18. We do not knowingly collect their data.
Changes
When this notice changes, we update the date above. Material changes are announced on the home page or by email to portal users.