Privacy policy

This policy describes what EZBLOCK INC ("we", "us") collects when your organization uses Redtrail, which is the Redtrail add-in for Microsoft Word, the Redtrail service it connects to, and the redtrail.ai website, and what we do with it. Effective 7 September 2026.

Who we are

EZBLOCK INC, a Delaware corporation. Questions and requests about this policy go to [email protected].

What Redtrail is

Redtrail lets AI agents that your organization authorizes edit Microsoft Word documents you have open, as tracked changes, and records each agent edit in a history your organization controls. Your organization's administrator approves the service for your Microsoft 365 tenant and deploys the add-in; you sign in with your Microsoft work account. Under data protection law, your organization is the controller of the data described below and EZBLOCK INC is its processor, except for the website and billing data, for which EZBLOCK INC is the controller.

What we collect

• Identity from Microsoft Entra ID: your tenant identifier, your user object identifier, your user principal name and display name, and the identifiers of the Microsoft 365 applications that signed you in. We receive these when you sign in to the add-in or connect an agent; we never see your password.
• Agent connections: the name and version of each agent client you connect (for example "Claude Code on my laptop"), when it was authorized, and the tokens that keep it authorized. You or your administrator can revoke any of them.
• Session and audit metadata: which document is open (a document identifier stored in the file and its SharePoint or OneDrive location identifiers), version pointers, the type of each agent operation, the location within the document it targeted, verification hashes, timestamps, and the agent and person involved.
• Change history, when your organization enables it: one record per agent operation containing the text that was replaced and inserted, the agent's stated intent, and the review verdict. History content is encrypted at rest with a key held per tenant, or with your organization's own key on the Enterprise plan.
• Seat usage: for billing, which people used the service in each calendar month, identified by user object identifier.
• Marketplace billing data: when your organization buys Redtrail through Microsoft Marketplace, Microsoft sends us the subscription identifier, plan, quantity, status, your tenant identifier and the email address of the purchasing administrator. Microsoft handles payment; we never receive payment card or bank details.
• Website data: the email address and role you submit on the early-access form, and standard server logs (IP address, browser, pages requested) kept for security and capacity planning.
• Support correspondence: what you send to our support address.

What we do not collect

• Copies of your documents. Documents stay in your Microsoft 365 tenant. The add-in reads and edits the open document inside Word; the service relays each agent operation to the add-in and does not store document content outside the change history described above.
• Payloads passing through the relay. The relay routes agent operations by identity and does not log their content.
• Data from documents you did not open with the add-in. The Microsoft Graph permission the service holds (reading files) is used only to check whether a previously seen document still exists at its earlier location.

How we use it

To operate the service: route agent operations to the right person's document, enforce your organization's policies, run the review gate that checks each agent edit before it is applied, and provide the history, blame, revert and audit features to your organization's administrators. To bill seats. To keep the service secure, including detecting abuse and investigating incidents. To answer support requests. To contact you about early access if you asked us to. We do not sell personal data and do not use your data to train AI models.

Legal bases

Where the GDPR or UK GDPR applies: performance of the contract with your organization; our legitimate interests in securing and improving the service; and consent for the early-access form, which you may withdraw at any time.

Who else sees it

Sub-processors that host or transmit the data described above: Microsoft (identity, Microsoft 365 and the Marketplace billing relationship), DigitalOcean (service hosting, United States), Cloudflare (network edge, DNS and email routing), and Google (our email). We do not share data with advertisers or data brokers. We disclose data when the law requires it, and we will tell your organization when we are allowed to.

Where it is stored

In the United States. A European Union region is offered on the Team and Enterprise plans on request. Transfers out of the European Economic Area and the United Kingdom rely on standard contractual clauses.

How long we keep it

• Change history: for the retention period your administrator sets, and it is deleted on request.
• Session and audit metadata, seat usage, subscription records: for the life of your organization's account and up to 90 days after it ends, longer only where tax or accounting law requires.
• Agent authorizations: until revoked or expired.
• Server logs: 30 days.
• Early-access form: until you ask us to remove it or we launch, whichever is first.

Your organization's controls

Administrators can export, pause and permanently delete change history per document and per tenant, revoke agent authorizations, end sessions, kill a user or device, restrict which agent clients and document libraries may be used, and remove Redtrail from the tenant entirely, which ends processing.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict its processing, and to complain to a supervisory authority. Because your organization controls the data processed on its behalf, please direct requests about it to your administrator; we assist them. Requests about website or billing data can go directly to [email protected]. California residents may also ask what categories of personal information we hold; we do not sell or share personal information as those terms are defined in California law.

Security

All connections use TLS. Sign-in uses Microsoft Entra ID; agents authenticate with short-lived tokens bound to a person and device. History is encrypted at rest and chained with hashes so that alteration is detectable. Our staff have no standing access to history content. Our security overview describes the design in more detail.

Children

Redtrail is a workplace tool for organizations and is not directed at children.

Changes

We will post changes here and update the effective date. For material changes we notify the administrators of active organizations by email before the change takes effect.

Contact

EZBLOCK INC, a Delaware corporation, United States. [email protected].