Privacy Policy

Last updated: July 30, 2026

1. Who We Are

This Privacy Policy explains how Editly, LLC ("Editly", "we", "us") collects, uses, shares, and protects your personal data when you use editly.ai, app.editly.ai, api.editly.ai, and related services (together, the "Services").

For the purposes of the EU General Data Protection Regulation (EU GDPR) and the UK General Data Protection Regulation (UK GDPR), Editly, LLC is the data controller for the personal data described in this Policy unless another role is expressly stated.

Data protection contact: legal@editly.ai. If applicable law requires us to appoint an EU or UK representative or a data protection officer, we will identify that representative or contact in this Policy or in a linked privacy notice.

Editly, LLC
3200 Kirkwood Highway #1061
Wilmington, DE 19808, USA
Email: legal@editly.ai

2. Information We Collect

We collect the following categories of personal data:

• Account data — your name, email address, hashed password, and optional profile information.
• Documents and submitted text — the text you submit for AI processing and the documents you submit for human or expert editing, including any personal data contained in them.
• Order data — word count, service type, urgency, selected expert, order status, delivery history, and related order metadata.
• Communications — order chat messages, support messages, contact-form messages, and emails you send us.
• Payment data — Stripe customer identifiers, payment references, token and credit balances, and transaction history. We do not store full card numbers.
• Editor application data — if you apply to become an editor, your name, email, country, phone number, languages, years of experience, CV file, motivation letter, and application communications.
• Technical data — authentication tokens, session identifiers, IP addresses in server logs, device and browser signals needed for security and service operation, and your language preference.
• Analytics and cookie data — with your consent where required, analytics or usage statistics such as pages visited, approximate location, device type, cookie identifiers, and similar pseudonymous or aggregated usage data. We do not use advertising trackers.

3. How We Use Your Data and Our Legal Bases

Under the EU GDPR and UK GDPR, each use of personal data must have a legal basis. Our main legal bases are:

• Performance of a contract (Art. 6(1)(b) GDPR) — creating and managing your account; processing submitted text and documents to deliver AI, human, or expert editing services; enabling order chat; processing payments, tokens, top-ups, and credits; sending transactional emails; and processing editor applications at the applicant's request.
• Legal obligation (Art. 6(1)(c) GDPR) — keeping financial and tax records and responding to lawful requests from authorities.
• Legitimate interests (Art. 6(1)(f) GDPR) — securing the Services, preventing fraud and abuse, enforcing rate limits and spam protection, debugging, maintaining service quality, enforcing our terms, and protecting our rights and users. We balance these interests against your rights and use the minimum data reasonably necessary.
• Consent (Art. 6(1)(a) GDPR) — loading optional analytics cookies and analytics services after you opt in; enabling optional functional support-chat cookies where required; and loading Google reCAPTCHA on marketing-site forms where consent is required by applicable law. You can withdraw consent at any time via "Cookie settings" in the footer, without affecting processing that occurred before withdrawal.

We do not use your personal data or documents for advertising, and we do not carry out automated decision-making that produces legal or similarly significant effects about you.

4. AI Processing and Human Editing — How Your Text Is Handled

AI Mode. When you use our AI features, the text you submit is sent through our service to Google Cloud. Google Cloud, acting as our processor or subprocessor, processes the text through Gemini for the purpose of generating the result you requested. Under the applicable Google Cloud terms and data-processing commitments for this API processing, Google Cloud is not permitted to use submitted API content to train its foundation models. We send only the text needed to perform the action you requested.

Human and Expert Mode. Documents you submit for human editing are stored in Google Drive and edited in Google Docs. Google Cloud acts as our processor for this storage and editing workflow. The assigned editor is granted access to your document only for the duration of the assignment, and all editors are bound by non-disclosure or confidentiality obligations.

We do not use your documents or submitted text to train Editly AI models, and we do not share them with anyone other than the processors and assigned editors described in this Policy.

5. Who We Share Data With

We do not sell your personal data, and we do not share it with advertisers or data brokers. We share data only as needed to operate the Services, comply with law, or protect our users and rights:

• Stripe — payment processing, invoices, and receipts. Stripe handles your card details directly; we never see or store full card numbers.
• Google Cloud — AI text processing via Gemini, Google Drive/Docs storage for human editing, Google reCAPTCHA v3 on marketing-site forms, and, only with your consent where required, Google Analytics for analytics and usage statistics. When you use forms or consent to analytics, Google may receive IP addresses, cookie identifiers, and device signals.
• Hosting, infrastructure, storage, and email providers — providers that run our servers, databases, file storage, monitoring, and transactional email delivery in the EU and US. A current list of material subprocessors is available on request at legal@editly.ai.
• Assigned editors — the editor working on your order receives access to your document content, order details, and order chat only for the duration of the assignment.
• Authorities and legal parties — where required by law or where reasonably necessary to protect our rights, our users, or the public.

Our Chaskiq support chat runs on our own self-hosted servers at support.editly.ai. Because it is self-hosted, no external Chaskiq provider receives support chat messages, although the chat still uses Editly infrastructure and cookies as described below.

Where applicable, service providers act under data processing agreements or equivalent contractual safeguards and may use personal data only on our instructions. Some recipients, such as authorities, independent payment processors, or assigned editors, may have different legal roles depending on the context.

6. International Data Transfers

We are a US company, and our infrastructure and processors may be located in the EU, the US, and other countries. Personal data may therefore be transferred between these regions.

Where personal data of EU/EEA, UK, or Swiss residents is transferred to a country without an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or equivalent UK safeguards, and appropriate Swiss safeguards where applicable. If we rely on an applicable adequacy framework, we will identify that framework in our records or upon request. You can request more information about these safeguards at legal@editly.ai.

7. How Long We Keep Your Data

• Account data — kept for as long as your account exists. When you delete your account, we delete or anonymize your personal data unless we must keep it for legal, security, or accounting reasons.
• AI submitted text and AI request history — kept while your account is active so you can access your history, unless you delete individual items sooner where the app permits deletion. Deletion removes active copies, subject to backups, logs, provider deletion schedules, and legal retention duties.
• Human and Expert Mode documents — kept while your account is active so you can access your order history, unless you delete a document or your account sooner. Deleting a document removes active copies from our storage and Google Drive, subject to backups, logs, provider deletion schedules, and legal retention duties.
• Chat messages — kept with the related order and removed or anonymized when the order, document, or account is deleted, subject to legal retention duties.
• Financial records — invoices, payment references, and transaction records are kept for 7 years, or longer if required by applicable tax, accounting, or legal obligations.
• Editor application data — kept while the application is under review and for up to 12 months after a final decision, unless a longer period is required or permitted by law or you request earlier deletion.
• Server logs — kept for up to 90 days for security, fraud prevention, and debugging, unless a longer period is needed to investigate abuse, security incidents, or legal claims.

8. Your Rights

If you are in the EU/EEA or UK, you may have the right to:

• Access your personal data and receive a copy of it;
• Rectify inaccurate or incomplete data;
• Erase your data ("right to be forgotten"), subject to legal retention duties;
• Restrict processing in certain circumstances;
• Receive your data in a structured, commonly used, machine-readable format;
• Object to processing based on legitimate interests;
• Withdraw consent at any time where processing is based on consent.

If you are in Switzerland, you may have similar rights under the Swiss Federal Act on Data Protection (Swiss FADP), though the scope and exercise of those rights may vary by jurisdiction.

You can exercise many rights directly in the app by updating your profile, deleting individual documents, or deleting your account. For other requests, email legal@editly.ai. We respond within one month where the GDPR or UK GDPR applies, unless an extension is permitted by law. You also have the right to lodge a complaint with your local data protection supervisory authority.

9. California Privacy Rights and Notice at Collection

If you are a California resident, you have the right to know what personal information we collect and how we use it, to access and receive a copy of it, to correct it, to delete it, and not to be discriminated against for exercising these rights. We do not sell or share your personal information as defined by the CCPA/CPRA, and we do not use it for cross-context behavioral advertising.

To exercise California rights, use your in-app account settings or email legal@editly.ai. We do not use sensitive personal information to infer characteristics about you except as necessary to provide the Services, comply with law, or protect security.

10. Cookies

We keep cookies to a minimum and ask for consent before non-essential cookies or similar technologies load where required by law. Our marketing site uses the following categories:

• Necessary — session, preference, and consent-choice cookies. These are always active because the site cannot work without them.
• Analytics — loaded only with your consent where required. Google Analytics helps us understand pages visited, approximate location, device type, and similar usage information. Google acts as our processor where applicable, may set cookies, and may receive your IP address and device signals; we enable IP anonymization where available and use no advertising features.
• Functional — loaded only with your consent where required. These enable functionality such as our self-hosted support chat. Support chat cookies help keep your conversation across pages, and messages you send are processed to answer your request.
• Security — used on contact and editor-application forms to protect against spam and abuse. Google reCAPTCHA v3 may set cookies and receives IP addresses and device signals. If you decline required security cookies, the site will still work normally except that you may need to enable security cookies before submitting those forms. You may also contact us directly at legal@editly.ai.

You choose via the cookie banner on your first visit and can change or withdraw your consent at any time through the "Cookie settings" link in the footer. The app uses session and authentication cookies needed to keep you signed in, plus a cookie storing your language preference. We never use advertising cookies, and analytics runs only with consent where required.

11. Children

The Services are not directed to children. You must be at least 16 years old to use the Services. We do not knowingly collect personal data from children under 13 or from children under 16 where our age threshold applies. If you believe a child has provided us personal data in violation of this Policy, contact legal@editly.ai and we will take appropriate steps to delete it.

12. Security and Breach Notification

We protect your data with technical and organizational measures designed to protect the Services, including encryption in transit using TLS, encryption at rest for documents where supported by our storage systems and providers, hashed passwords, role-based access controls, and time-limited editor access to documents. All editors are bound by confidentiality obligations. Payment card data is handled entirely by Stripe.

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and within 72 hours where required by the GDPR or UK GDPR. We will also inform affected users where the law requires it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the app before the changes take effect where required by law. The "Last updated" date at the top shows when this Policy was last revised. Continued use of the Services after changes take effect means the updated Policy applies, except that we will request new consent where required by law for consent-based processing or materially different uses of personal data.

14. Contact Us

For questions about this Privacy Policy or how we handle your data, contact legal@editly.ai or write to Editly, LLC, 3200 Kirkwood Highway #1061, Wilmington, DE 19808, USA.