Privacy Policy

Last updated: August 30, 2026

This Privacy Policy describes how AOK Digital ApS, trading as EZ Character, CVR 42409340 ("we", "us", or "our"), collects, uses, and shares information when you use ezcharacter.com. AOK Digital ApS is the data controller for the personal data described here.

What We Collect

• Account and authentication information — name, email address, secure authentication records, and, when you use Google sign-in, your Google profile photo and account identifier
• Uploaded images — images you upload for AI processing
• Generated images — AI-generated images produced by our tools
• Usage data — page visits, generation counts, tool usage, feature interactions, purchase events, and privacy-masked interaction replays on eligible tool pages
• Billing records — Stripe customer, checkout, subscription, invoice, and payment identifiers, purchase amounts, currency, and payment status; we do not receive or store your complete card number
• Support correspondence — messages and attachments you send to our support addresses and our replies
• Device and browser information — browser type, operating system, screen resolution, IP address
• Cookies — session tokens, analytics identifiers, and advertising tags (see Cookies section below)

How We Use Your Information

• Service delivery — processing your images through our AI tools and delivering generated results
• Billing — managing subscriptions and payments through Stripe, our payment processor
• Analytics — understanding usage patterns through Google Analytics and PostHog where your choices and applicable law allow it
• Advertising measurement — measuring whether Google, Meta, TikTok, or Reddit campaigns lead to signups and purchases where configured and allowed by your choices
• Security and fraud prevention — detecting abuse, enforcing rate limits, and protecting our infrastructure

Legal Bases (EEA / UK)

• Contract — to create your account, provide generations, process purchases, manage subscriptions, and answer service requests
• Legitimate interests — to secure the service, prevent fraud and abuse, diagnose failures, and improve product reliability
• Consent — for optional analytics and advertising measurement where consent is required; you can withdraw it through Cookie settings
• Legal obligations — for accounting, tax, dispute, and lawful-request records we must retain or disclose

Third-Party Services

We share data with the following third-party services as necessary to operate:

• Google — OAuth authentication, Google Analytics, Google Ads conversion tracking
• PostHog — consented product analytics and privacy-masked session replay on eligible tool pages
• Stripe — hosted checkout, subscription management, invoices, payment processing, and tax calculation only where we enable it
• Meta — advertising pixel for conversion tracking and audience measurement
• TikTok and Reddit — advertising measurement when their integrations are enabled
• Cloudflare — hosting, CDN, security (Workers, R2 storage, D1 database)

Image Data

Your images are important to us, and we handle them with care:

• Uploaded images are stored in Cloudflare R2 object storage
• AI-generated images are also stored in Cloudflare R2
• When you delete a job it is removed from your account immediately; the underlying images are retained for up to 30 days for safety and legal compliance, then permanently deleted
• We do NOT use your individual images to train AI models.

Cookies

We use the following categories of cookies:

• Essential (always on) — session and authentication cookies required for the service to function
• Analytics (consent required) — Google Analytics identifiers and PostHog local storage to understand how you use our site and where product actions become blocked
• Advertising — Google Ads, Meta, TikTok, and Reddit identifiers for conversion tracking and campaign measurement, subject to your region and choices

In opt-in regions, analytics and advertising tags do not load until you accept them. Elsewhere, regional defaults may allow them initially, and you can opt out at any time. PostHog is also disabled while authentication is unresolved and for staff accounts. Its session replay is restricted to an explicit list of creation tools: text, form inputs, element attributes, uploaded or generated media, canvas content, request bodies, response bodies, headers, and network URLs are not recorded. Replay is stopped before navigation and is not enabled on authentication, administration, account, billing, checkout, support, or Model Studio pages.

We honor the browser-level Global Privacy Control signal by keeping advertising measurement off. Your browser sends campaign click identifiers with checkout only when the relevant category is allowed. For a completed purchase, we may send the same transaction identifier through both the browser tag and a server conversion API so the advertising platform can deduplicate it.

Review cookie settings

Your Rights

You have the right to:

• Delete your account and all associated data
• Export your images by downloading them from your account
• Opt out of analytics and advertising cookies via the cookie banner
• Request access to the personal data we hold about you
• Request correction, restriction, portability, or an objection where applicable under data-protection law

If you are in the EEA, you may also complain to your local supervisory authority. Our lead contact in Denmark is Datatilsynet.

Children

EZ Character is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If we discover that a person under 18 has provided us with personal information, we will delete it promptly.

California Residents (CCPA)

If you are a California resident, please note:

• We do not sell personal information for money. Advertising measurement may be considered “sharing” under California law; you can opt out through Cookie settings.
• You may request deletion of your personal data at any time
• You may request disclosure of the categories and specific pieces of personal information we have collected
• You will not be discriminated against for exercising your privacy rights

Data Retention

• Account data is retained while your account is active
• Images are retained until you delete them or close your account. Deleted content is held for up to 30 days for safety and legal compliance (e.g. abuse investigation), then permanently removed
• Analytics data is retained according to our configured Google, PostHog, and advertising-provider retention periods
• Checkout attribution, including consented campaign and network identifiers, is retained for up to 30 days
• Transaction and delivery records exclude raw payment-card data and are retained as needed for billing, fraud prevention, accounting, and conversion deduplication
• Support correspondence is retained while needed to resolve the request and document related account or billing actions

Security

We take reasonable measures to protect your data:

• All data is encrypted in transit via HTTPS/TLS
• Data is stored on Cloudflare's global infrastructure with enterprise-grade security
• Authentication is handled through secure session management with supported email/password and Google OAuth sign-in methods

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes at least 30 days in advance by email or through a notice on our website. Your continued use of the service after any changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or want to exercise a privacy right, contact privacy@ezcharacter.com.

AOK Digital ApS, trading as EZ Character
CVR 42409340
Yderlandsvej 1
2300 København S, Denmark