Customer questions, answered
Your Data & Security
How EZ4YouTech.com stores workspace data, retention and purge rules, and what your team controls.
What We Store
- Tenant workspace data in MongoDB Atlas and Azure Blob
- Files, app runs, email drafts, reminder CSV imports, plus accounts and settings
- Paths stay scoped to your company workspace
- We do not sell your data. We do not use workspace content to train public AI models; when you connect your AI provider account, inference and provider data-use terms apply to that provider
How We Defend It
- HTTPS-only traffic, Key Vault secrets, encrypted provider credentials, and tenant isolation on every API call
- Passwords are hashed; provider API keys are never logged or exposed in the browser
- Login rate limits, security headers, and WAF/rate limiting on public surfaces
- Connect your AI provider account: inference runs on your provider terms
If Something Goes Wrong
- No system is 100% safe. We follow our incident runbook: contain (rotate keys, preserve logs), fix, and redeploy
- Notify affected customers without undue delay; Enterprise DPA target: within 72 hours when personal data is involved
- We explain what happened, what data types may be affected, and what we have done
- Cyber insurance and counsel as needed
What You Can Do
- Agents clear their own files, analyses, app runs, email import history, and reminder CSV history
- Company admins can purge org-wide workspace data from Company setup; user accounts, billing, and OAuth connections stay in place
- Use strong passwords, limit admin seats, and review uploads before you trust the cloud with regulated records
Retention & Purge Policy
- Workspace history uses plan-tier hybrid retention (keep while among recent items or within your plan day window). Starter Free: up to 25 runs or 21 days per tool. Standard+: up to 50–100 runs or 90–180 days (see pricing)
- Archived email batches are removed after 90 days by scheduled ops jobs
- Deactivated workspaces are retained per our privacy policy, then purged with advance notice by email
- Policy and quote compare flows are session-only; they do not keep a long-term file vault in workspace storage
Certifications & Standards
- Built for client-facing and regulated work with an enterprise-ready architecture
- We do not claim SOC 2, ISO 27001, or HIPAA certification on the standard plan unless separately agreed in an Enterprise contract
Deeper review: Architecture & security guide · Security FAQ · Privacy policy
