Privacy Policy

1. Information we collect

We collect only what we need to give you an honest edit and to run the service:

• Account information. Your name and email address when you create an account or join the waitlist, plus a password held by our authentication provider (we never see it in plain text).
• Your manuscripts and content. The text you upload, the editorial decisions you make, your replies in discussions, and anything else you submit to be edited. This is covered in detail in its own section below.
• Payment information. When you buy an edit, our payment processor collects and handles your card details. We do not see or store your full card number. We keep a record of the transaction itself (plan, amount, date, and status).
• Communications. Emails and support messages you send us.
• Usage and device information. Basic technical data such as your browser type, device, approximate region, pages viewed, and actions taken, collected through analytics (only with your consent, see Cookies below) and standard server logs.

2. Your manuscripts get special care

This is the heart of the matter, so we say it directly:

• Your work stays yours. We use your manuscript only to generate your editorial feedback and to provide the service to you. Nothing else.
• Never used to train AI. We do not use your writing to train AI models, and the AI provider that processes it is bound by commercial terms that forbid training on it too. Your work is never anyone's training data.
• Private to your account. Your manuscript is locked to your account. Other users cannot see it, and we never sell, share, or publish your work.
• Encrypted. Your manuscript is encrypted in transit and at rest.
• Never rewritten. The service only ever returns notes, comments, and suggestions. It does not generate finished prose in your place. Every word in your book stays yours.

You can read more about how your work is protected on our Security and privacy page.

3. How we use your information

We use the information above to:

• Provide the service: process your manuscript and generate your editorial feedback at each stage.
• Create and manage your account, and let you sign in.
• Take payment for the edits you buy, and keep the records the law requires.
• Send you service messages, such as confirming a stage is ready or letting you know a job has finished.
• Respond to your questions and provide support.
• Keep the service secure, prevent abuse, and diagnose problems.
• Understand, in aggregate, how the service is used so we can improve it. This never involves training AI on your text.
• Meet our legal and tax obligations.

4. Our legal bases (for EU and UK users)

If you are in the European Economic Area or the United Kingdom, we rely on these legal bases under the GDPR and UK GDPR:

• Performance of a contract: to provide the editing service you have signed up for and paid for.
• Legitimate interests: to keep the service secure, prevent fraud, and improve how it works, balanced against your rights.
• Consent: for analytics cookies and any optional marketing emails. You can withdraw consent at any time.
• Legal obligation: to keep financial records and respond to lawful requests.

5. Cookies and analytics

We use a small number of cookies and similar technologies. They fall into two groups:

• Essential cookies. These keep you signed in and the service working. They are necessary for the site to function, so they do not require consent.
• Analytics cookies. We use Google Analytics and PostHog to understand how people find and use the site. These run only after you accept them in our consent banner. Until you choose, analytics stays switched off and no analytics cookies are set. You can decline, and you can change your mind later by clearing the choice in your browser.

Both providers run only after you accept, and both respect your choice through the same consent control: Google Analytics through Google's Consent Mode, and PostHog through its own consent setting. Each may process data such as your approximate location, device, and on-site activity; PostHog processes this on servers in the European Union. You can read how each handles it in Google's privacy policy and PostHog's privacy policy. We do not use analytics to identify you personally, and we do not run advertising or cross-site tracking cookies.

6. Who we share information with

We do not sell your personal information, ever. We share it only with the categories of service providers that make the service work, and only for the purpose listed. Each is bound by contract to protect your data and to act only on our instructions:

• AI processing providers that generate your editorial feedback from your manuscript, under terms that forbid training on your work.
• Cloud hosting and database providers that run the service and store your account and manuscripts securely.
• Payment processors that take payment and handle your card details (we never store your full card number).
• Email providers that deliver your service and account emails.
• Analytics providers (Google Analytics and PostHog) that help us understand website usage, used only with your consent.

We choose established providers that handle data on certified, independently audited infrastructure, and we are happy to tell you which ones we currently use if you ask at support@edithedits.com. We may also disclose information if the law requires it, to protect our rights or users' safety, or as part of a business sale (in which case we would tell you first).

7. International transfers

Some of our providers are based outside your country, including in the United States. When we transfer personal data across borders, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, so your data keeps an equivalent level of protection wherever it is handled.

8. How long we keep your data

• Your account and manuscripts: for as long as your account is open. When you delete a manuscript or close your account, we remove your content from our active systems, and it is cleared from routine backups within a short period.
• Transaction records: kept for as long as tax and accounting law requires, even after you close your account.
• Support messages: kept only as long as needed to help you and improve our support.

9. How we protect your data

We encrypt your manuscript in transit and at rest, restrict access to it, and build on cloud infrastructure that is independently audited to recognised security standards. No service can promise perfect security, but protecting your unfinished work is something we take seriously and design for. You can read the full detail on our Security and privacy page.

10. Your rights and choices

Depending on where you live, you have rights over your personal data. These include the right to access a copy, correct it, delete it, export it, object to or restrict certain uses, and withdraw consent. You can exercise most of these directly in your account, or by emailing us at support@edithedits.com. We will not charge you for a reasonable request, and we will not treat you differently for making one.

If you are in the EEA or UK and believe we have mishandled your data, you have the right to complain to your local data protection authority. If you are a California resident, you have the right to know what we collect, to request deletion, and to opt out of any sale of personal information; we do not sell personal information.

11. Children

Edith is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the service grows or the law changes. When we make a material change, we will update the date at the top and, where appropriate, let you know by email or in the app.

13. How to reach us

Questions about your privacy or this policy? Email support@edithedits.com.