Privacy Policy

Third-Party Service Providers

We share your information with third-party service providers who perform services on our behalf. These providers have access to your personal information only to perform these tasks and are obligated to protect your information:

• Payment Processing: Stripe processes all payment transactions and billing information. We do not store your credit card details on our servers.
• AI Services: OpenAI (GPT-4, DALL-E) and Google Gemini process content for AI-powered features such as script generation, image creation, and content analysis. ElevenLabs processes audio for text-to-speech and speech-to-text features.
• Authentication: Google OAuth provides secure authentication services when you log in with your Google account.
• Cloud Infrastructure: We use secure cloud storage providers to store your uploaded media files (videos, images, audio) and exported content. Our application data is hosted on cloud database services, and we use cloud hosting and content delivery services to deliver our Service to you.
• Analytics: We may use analytics services to understand how users interact with our Service and improve user experience.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to meet national security or law enforcement requirements.

Business Transfers

In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, your information may be transferred to the acquiring entity.

We Do Not Sell Personal Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. All data sharing is solely for the purpose of providing and improving our Service.

Types of Cookies We Use

• Essential Cookies: Required for the Service to function properly. These include authentication cookies, session management, and security cookies. You cannot opt out of these cookies as they are necessary for the Service to work.
• Preference Cookies: Remember your settings and preferences (language, region, display preferences) to provide a personalized experience.
• Analytics Cookies: Help us understand how visitors interact with our Service by collecting and reporting information anonymously. This helps us improve the Service and user experience.
• Local Storage: We use browser local storage and IndexedDB to store media files locally for better performance and offline access to your projects.

How to Control Cookies

Safeguards for International Transfers

• Standard Contractual Clauses: We use Standard Contractual Clauses approved by the European Commission for transfers of personal data to third countries.
• Service Provider Compliance: Our service providers maintain compliance certifications including SOC 2, ISO 27001, and GDPR compliance where applicable.
• Data Encryption: All data transfers are encrypted in transit using industry-standard TLS/SSL encryption.

Retention Periods

• Active Accounts: We retain your account information and user content for as long as your account remains active and you continue to use our Service.
• Deleted Accounts: When you delete your account, we will delete or anonymize your personal information within 90 days, unless we are required to retain it for legal or regulatory purposes.
• Billing and Transaction Data: We retain billing information and transaction records for 7 years to comply with tax laws and financial regulations.
• Analytics Data: Usage analytics and aggregated data may be retained for up to 26 months, after which it is anonymized or deleted.
• Backup Data: Data in our backup systems is automatically deleted within 90 days of account deletion.
• Legal Holds: If required by law or legal process, we may retain certain information beyond these periods (e.g., ongoing litigation, regulatory investigation).

Security Measures We Implement

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using industry-standard TLS/SSL encryption (HTTPS).
• Encryption at Rest: Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
• Secure Authentication: We use NextAuth with Google OAuth for secure authentication. Passwords (if applicable) are hashed using industry-standard algorithms.
• Access Controls: We implement role-based access controls to ensure that only authorized personnel can access personal information.
• Regular Security Audits: We conduct regular security assessments and vulnerability scans to identify and address potential security risks.
• Secure Payment Processing: Payment information is processed by Stripe, a PCI DSS Level 1 certified payment processor. We do not store credit card information on our servers.
• Data Backup: We maintain regular backups of data to prevent data loss in case of system failures.

Your Role in Security

While we take security seriously, you also play an important role in protecting your information:

• Use a strong, unique password for your account
• Keep your login credentials confidential
• Log out of your account when using shared or public computers
• Report any suspicious activity or unauthorized access immediately

Your Rights Under GDPR (EU Users)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.
• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal information in certain circumstances.
• Right to Restrict Processing: You have the right to request that we limit how we use your personal information.
• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transfer it to another controller.
• Right to Object: You have the right to object to processing of your personal information based on legitimate interests.
• Right to Withdraw Consent: If we process your data based on consent, you have the right to withdraw that consent at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

Your Rights Under CCPA (California Users)

If you are a California resident, you have the following rights:

• Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: While we do not sell personal information, you have the right to opt out if we ever do so in the future.
• Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your CCPA rights.

How to Exercise Your Rights

Our Breach Response Process

• Prompt Notification: We will notify affected users within 72 hours of confirming a data breach, as required by GDPR and other applicable regulations.
• Notification Methods: We will contact you via email registered to your account and/or display a prominent notice on our website.
• Information Provided: Our notification will include: the nature of the breach, what data was affected, steps we are taking to address the breach, and recommended actions you should take to protect yourself.
• Authority Notification: We will notify relevant data protection authorities as required by law.

Age Requirements

• Minimum Age: You must be at least 13 years old to use our Service.
• Parental Consent: If you are between 13 and 18 years old, you must have permission from your parent or legal guardian to use the Service.
• COPPA Compliance: We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect information from children under 13.

If We Learn We Have Collected Data from a Child

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible. If you believe we might have information from or about a child under 13, please contact us at Discord or support@askeditor.com.

Categories of Personal Information We Collect

We collect the following categories of personal information:

• Identifiers (name, email address, IP address)
• Commercial information (subscription records, payment information)
• Internet activity (browsing history, interaction with our Service)
• Professional or employment-related information (if provided)
• User-generated content (videos, images, audio, projects)

We Do Not Sell Personal Information

We have not sold and do not sell personal information. We do not sell personal information to third parties for monetary or other valuable consideration. In the preceding 12 months, we have not sold any personal information of California consumers.

Your California Privacy Rights

California residents have the right to:

• Request Disclosure: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Request Deletion: Request deletion of your personal information that we have collected.
• Opt-Out of Sale: While we do not sell personal information, you have the right to opt out if our practices change.
• Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.