Privacy Policy
EZM PRO — Privacy Policy
Version: privacy-2026-v3 · Effective date: November 9, 2026
1. Who We Are
This Privacy Policy explains how Harmonics INC, a registered company in Morocco, at 3éme Etage Appt 11, Imm Luistania Angle Rue d'Alger et 2 Rue Abou Bakr, Morocco ("EZM PRO", "we", "us"), collects, uses and protects information when you visit our website, create an account or use the EZM PRO rental-management service. Contact: support@ezmpro.com.
2. Our Role and the Role of Rental Businesses
We are responsible for the account, website, contact and assistant-usage information described in this policy. A business using EZM PRO to run its rentals ("Rental Business") is responsible for the records it enters about its own customers and staff; we process those records to provide the Service to that Rental Business. If your information was entered by a Rental Business, you may contact that business directly, and we may refer requests about that information to it.
3. Information We Collect
Account information. Name, email address, password (handled by our authentication service), optional phone number, company details and team membership.
Business records. Information a company enters, including equipment, categories, rentals, reservations, quotes, customers and customer notes, dispatch and returns, maintenance and work orders, invoices, payments, expenses and reports.
Activity and audit records. Records of changes to company data (including values before and after a change) and billing events, kept for accountability and accuracy.
Storefront and booking requests. Names, email addresses, phone numbers and messages submitted through a Rental Business's storefront or booking-request form. These are delivered to that Rental Business.
Messages. Name, email, subject and message you send through our Contact page, and questions you send to the AI assistant.
Terms acceptance. The version of our Terms you accepted, when you accepted it and how (for example, at email signup, Google signup or when asked to accept updated Terms).
Technical information. Information needed to operate and secure the Service, such as sign-in session data and error diagnostics. Our infrastructure providers also process technical request data, such as IP addresses and browser information, when your browser connects to the Service.
4. How We Use Information
We use information to provide, maintain and secure EZM PRO; authenticate users and enforce company permissions; record Terms acceptance; respond to support and contact requests; send service emails such as verification and security messages; diagnose problems; and improve the Service. We do not sell personal information.
5. AI Assistant
The assistant is optional. Starter does not include AI assistant access. Professional includes 200 AI requests per user per UTC calendar month. Business includes 250 AI requests per company per UTC calendar month. Service-wide usage safeguards also apply. When you use it, we send the following to an external AI model to generate a response: your question, your saved conversation for the selected company, and limited summaries of records from that company that you are permitted to view. These summaries can include equipment names and quantities, customer names and notes, rental numbers, dates, statuses and totals, and — where your plan and permissions include reports — invoice numbers, statuses and amounts.
Conversation history is saved to your account separately for each company. You can clear it from the assistant, which deletes that saved conversation. Usage records (such as request status and the amount of AI processing used) and records of proposed and confirmed assistant changes are kept separately and are not removed when you clear your history. Please do not enter passwords or sensitive personal information into the assistant.
Public website chat. Messages you send through the chat on our public website are sent through the Lovable AI Gateway to an OpenAI model to generate a response. Please do not include passwords or sensitive personal information in these messages.
6. Service Providers
We use the following providers to run EZM PRO. Each receives only the information needed for its function, and handles it under its own terms.
| Provider and function | Information involved |
|---|---|
| Lovable Cloud — database, authentication and file storage | Account information, business records, activity and audit records, assistant conversations, usage and proposal records, Terms acceptance records, contact messages, storefront and booking requests, uploaded images |
| Lovable hosting, running on the Cloudflare Workers platform — delivers the website and application, and collects visitor analytics | Technical request information (such as IP address and browser details), the information passing between your browser and the Service, and visit statistics such as page views and traffic sources (for example the referring website or campaign tags) |
| Lovable email-sending service — verification, security and service emails | Recipient email address, name where included, and the content of the email |
| Lovable AI Gateway, which routes assistant and public website chat requests to an OpenAI model | Your assistant questions, the saved conversation for the selected company, and the limited company record summaries described in Section 5, including customer notes where relevant; and messages sent through the public website chat |
| Google Fonts — website typefaces | When a page loads, your browser connects to Google's servers, which receive technical information such as your IP address and browser details |
Paddle — payments and Merchant of Record. EZM PRO uses Paddle (Paddle.com) to process subscription payments. Paddle acts as the Merchant of Record for purchases made through EZM PRO. When you make a purchase, relevant payment and transaction information (such as your name, email address, billing address, payment method details, purchase and tax information) is processed by Paddle in accordance with its applicable privacy and payment practices, for the sale of the product, subscription management, payments, tax compliance and invoicing. We receive limited subscription and transaction information from Paddle, such as the plan, billing status and transaction identifiers. EZM PRO does not store customers' full payment card details.
We may also disclose information where required by law or to protect the security and integrity of the Service.
7. International Processing
Our providers operate internationally, so your information may be processed in countries other than your own, including countries outside Morocco, whose data-protection laws may differ from yours. Where the law requires a specific basis, authorization or safeguard for such processing, we will rely on or obtain it.
8. Moroccan Data Protection
We are established in Morocco, where Law No. 09-08 on the protection of individuals with regard to the processing of personal data applies, under the supervision of the Commission Nationale de contrôle de la protection des données à caractère personnel (CNDP). We process personal information in accordance with the requirements of that law that apply to us.
9. Cookies and Browser Storage
The Service uses the following browser storage, which it needs to work:
- Local storage for your sign-in session, so you stay signed in.
- Session storage, cleared when you close the tab, for a plan you chose before signing up, for in-progress submissions such as company creation, payment and expense records (so a retry does not create a duplicate), and for a temporary marker used to reload the page once after an update.
- One cookie (
sidebar_state) that remembers whether the app's side menu is open.
Your selected company is saved with your account on our servers, not in your browser.
The EZM PRO application does not include advertising cookies or analytics or tracking scripts. Our hosting provider, Lovable, collects visitor analytics for our website and application, including visit counts, page views and traffic sources such as the referring website or campaign tags. Our pages load fonts from Google Fonts, so your browser connects to Google's servers as described in Section 6.
10. Security
Access to company records requires authentication and is restricted by company membership checks enforced in the database and by role-based permissions. Information is transmitted over encrypted (HTTPS) connections. The Service has not undergone an independent security certification or penetration test. No system is completely secure, and we cannot guarantee the security of information. Please use a strong password and keep your credentials private.
11. Retention
We keep information for as long as needed to provide the Service, keep it secure, maintain accurate business and financial records, meet legal obligations, and resolve disputes.
- Account and company records are kept while the account exists. There is no automatic deletion of account or company records, including when a trial ends.
- Customers and equipment are archived rather than deleted. Authorized owners and administrators can permanently delete certain unused records.
- Financial records with financial history (such as invoices, payments, refunds and credit notes) are not deleted; mistakes are corrected with reversal, void or credit records so the financial history stays accurate.
- Activity and billing audit records are kept; no automatic deletion schedule applies to them.
- Assistant conversation history is kept until you clear it.
- Assistant usage records and assistant proposals are kept after conversation history is cleared; no automatic deletion schedule applies to them.
- Contact-page messages are deleted after 90 days. This period applies only to contact messages.
- Technical logs held by our infrastructure providers are kept according to those providers' own practices.
12. Requests to Access or Delete Data
To request access to, a copy of, correction of, or deletion of your account or company data, email support@ezmpro.com from the email address on the account. Requests are handled manually:
- We review the request and may ask you to verify your identity or authority over the company.
- We tell you what can be provided or deleted.
- We delete eligible information and confirm when the request is completed.
Some information may be kept after a deletion request where it is needed for financial accuracy, security, audit, legal obligations, or to preserve the accurate records of other users — for example invoices and payments with financial history, and audit records. Deleting information from active systems may not immediately remove it from providers' technical logs.
13. Your Rights
Depending on where you live, including under Moroccan Law No. 09-08, you may have rights to access, correct, delete or object to the processing of your personal information, to receive a copy of it, and to complain to a data protection authority such as the CNDP. You can update much of your account information in the app and make other requests by email as described in Section 12.
14. Changes and Contact
We may update this policy. We will show the new version and effective date and notify users of material changes. For privacy questions or requests, contact support@ezmpro.com or write to Harmonics INC, 3éme Etage Appt 11, Imm Luistania Angle Rue d'Alger et 2 Rue Abou Bakr, Morocco.
Customer support phone: +212684841556