Data Handling
Last updated: July 14, 2026
This page explains what EZAgent Tools stores, why it is needed, and how long it is kept.
What Is Collected
| Data | Purpose | Storage and Retention |
|---|---|---|
| Name and email | Account identity, login, and connecting known activity to the correct user. | Cloudflare KV while active and up to 90 days afterward. |
| Subscription and access status | Access control. | Cloudflare KV and Stripe. |
| Secure session token | Keep the user signed in. | Secure httpOnly cookie and Cloudflare KV until expiration. |
| IP address and approximate location | Security, repeat visit reporting, troubleshooting, and product analytics. | Detailed first party analytics records for up to 90 days. Cloudflare may retain separate edge logs under its policies. |
| Visitor ID and session ID | Distinguish browsers and visits without requiring a login. | First party browser storage and Cloudflare KV. Detailed records are retained for up to 90 days. |
| Pages, clicks, timing, and referring path | Measure feature use, daily activity, returning visitors, and likely bounce behavior. | Cloudflare KV for up to 90 days. Aggregate account totals may remain with the account. |
| Tool page views and tool runs | Understand which tools are opened and used. | Cloudflare KV account counters and detailed analytics events. |
| Browser, request, and tool errors | Find bugs and failed workflows. | Cloudflare KV for up to 90 days. |
| Deal inputs | Generate the requested output. | Sent to the OpenAI API for processing and not stored afterward unless the user explicitly saves an output or workspace record. |
| Payment data | Billing. | Stripe. EZAgent Tools does not store card numbers. |
Known and Anonymous Activity
After login, activity can be associated with the account name and email. Before login, EZAgent Tools only has a browser visitor ID, session ID, IP address, and technical activity. A visitor's real name cannot be known unless the person identifies through an account or another authorized form.
What Is Not Collected by the Analytics Layer
- Passwords or credit card numbers.
- Text typed into property, offer, client, or financial form fields.
- The contents of uploaded contracts, inspection reports, or MLS sheets.
- Generated outputs solely for the purpose of behavior analytics.
Security and Access
The detailed EZAgent analytics report is restricted to Brian's authenticated owner account. Traffic is served over HTTPS. Authentication uses secure login links or Google login rather than stored passwords.
Deletion
Email Brian@BrianHymas.com to request deletion of account and associated usage records.