Конфиденциальность

1. Controller

BLOOM & NOURISH LTD, Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London, United Kingdom, E14 9NN. Company number 14862714 (England & Wales). Email: info@ezilens.com. Full details are in the imprint.

2. What EziLens is

EziLens is a decision platform for life in Germany (jobs, housing, tariffs, benefits, official letters and documents) with AI-supported, source-backed guidance. EziLens is independent and does not sell the products it compares.

3. What we process

On your device: language choice, your cookie decision, a random device identifier, and inputs or tool settings you store locally (browser localStorage). When you use an account or enable certain features, additional data is processed on our servers, as described below.

Account & sign-in: your email address, short-lived sign-in links / one-time codes (magic link) and a session cookie. Guest use is possible; an account links your data across devices.

Profile details you enter: for example name, phone, address, date of birth, city/postcode and job, housing or career preferences, where you provide them for a tool. When you are signed in, these are stored on our servers and linked to your account.

Saved content: searches and goals you save, matches and similar tool results you choose to keep.

Payments & credits: for Plus we process billing events (purchase and status), your credit balance and credit-usage metadata (which AI feature, time and cost in credits). We do not store full payment or card details — payment is handled by an external payment provider such as PayPal.

AI processing: for AI features you request (for example translation, summaries, letter explanation, job tools) content you provide may be sent to an AI processor such as OpenAI in order to run the feature.

Letters & documents: when you decode an official letter, the letter text or photo is used to process it but the raw text is not stored — only the structured result (for example deadlines, topic and risk) is kept. A non-reversible hash (SHA-256, an internal “case fingerprint”) is also derived for duplicate and abuse prevention.

Contact & support: when you contact us, we process your email and message in order to reply.

Server logs: technical logs (shortened IP, time, page, referrer, browser type) for secure operation.

Analytics: anonymous, aggregated usage statistics for service improvement. We use Matomo Cloud (operated by InnoCraft Ltd) in a privacy-friendly, cookieless configuration — no analytics cookies are set, you are not tracked across other websites, and no personal profile is built. Only anonymous metrics are processed (such as page, language, device type and a few non-identifying interaction events). We do not send form content, names, emails or uploaded text, and we do not use session recording, Google Analytics, Microsoft Clarity or Hotjar. Analytics runs only on the production website, never on test/staging environments.

4. Purposes & legal bases

We process data to operate the service and provide the tools (Art. 6(1)(b) GDPR), to keep operation secure and abuse-free (lit. f), based on your consent for analytics cookies and notifications (lit. a), and to meet legal and accounting obligations relating to payments (lit. c).

5. Recipients & processors

We share data only to the extent necessary with carefully selected providers: hosting/infrastructure, an AI processor such as OpenAI, a payment provider such as PayPal, email delivery (Resend), messenger delivery (Telegram) and maps/geocoding (OpenStreetMap). When you click a partner or retailer offer, you are redirected to an external site, where that provider is responsible for its own processing.

6. Affiliate & external links

Some features link to partners (for example CHECK24 or the Awin network). After redirection, the partner may process data under its own privacy policy, and EziLens may earn a commission.

7. Data sources

We use official, public and external sources (for example official German authorities) as the basis for tool results.

8. International transfers

Some providers may process data outside the EU/EEA (for example AI or payment services). Where this happens, we rely on appropriate safeguards such as EU Standard Contractual Clauses, or on an adequacy decision.

9. Retention

We keep data only as long as needed. Server logs are generally kept up to around 30 days; sign-in links and one-time codes are short-lived and then invalid; account and profile data are kept until you delete your account; billing events are kept for as long as legal retention requires.

Raw letter text and photos are not stored; structured results and saved items are kept until you delete them or under our internal retention rules.

10. Export & deletion

You can request a copy of your data and delete your account from your account area. Certain billing records may be retained in pseudonymised form for legal reasons.

11. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. You also have the right to lodge a complaint with a supervisory authority. To exercise your rights, contact info@ezilens.com.

12. Cookies

Necessary cookies (language, your cookie decision and your session) are required for operation and cannot be disabled. Optional analytics cookies are set only with your consent.

13. Security

Data is transmitted encrypted (TLS/HTTPS), and we take appropriate technical and organisational measures to protect it.

14. Changes

The current version of this policy is always available on this page.

15. EziLens browser extension

The EziLens Companion extension runs only on the supported job, application and property domains declared in its manifest, plus EziLens itself. It reads the current supported page to identify the workflow and to prepare structured job/property facts or an autofill preview. It does not access unrelated sites and never submits an application automatically.

Language, module settings, local goals, autofill preferences, short extraction status and a revocable opaque pairing token are stored in Chrome local storage. The website session cookie and password are never copied into the extension. CV/contact data from a paired account is used locally for the user-reviewed autofill flow.

Structured page/profile content is transmitted over HTTPS only when necessary for an action the user requests, such as saving an item, handing a listing to EziLens, or generating an AI-supported draft. We do not sell extension data, use it for advertising, or transfer it for lending or credit decisions.

EziLens's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.