Privacy Policy

Edit8 ("Company", "we", "us", or "our") operates an AI-powered content creation platform at https://edit8.app (the "Service"). This Privacy Policy describes how we collect, use, share, and protect personal information when you use the Service, visit our website, or interact with us.

By using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Service.

This Privacy Policy applies to all visitors and registered users of the Service. We may provide supplemental privacy notices for specific features at the time we collect personal information.

2.1 Information You Provide

Personal information you provide through the Service includes:

• Account data — email address, password (stored in hashed form), display name, and avatar.
• Demographic data — date of birth and gender, if you choose to provide them during onboarding. This information is optional.
• Onboarding responses — your selections during the onboarding flow (use case, experience level, team size, creation goals, referral source, and feedback).
• AI inputs — text prompts, descriptive instructions, reference images, identity configuration data (face and body descriptions), and voice samples that you submit to generate content.
• Generated content — AI-generated images, videos, and audio files produced by the Service in response to your inputs.
• Voice data — voice samples you upload for text-to-speech, voice design, or voice change features, along with associated text and audio outputs.
• Community content — images you choose to share publicly on the Explore feed, and your likes on other users' shared content.
• Payment data — payment information is collected and processed directly by our third-party payment processor. We store your payment processor customer ID, subscription ID, and credit balance, but we do not store or have access to your full card number or bank details.
• Communications — messages you send to us via email or support channels.
• Preferences — your marketing email opt-in preference, cookie consent choice, and other settings.
• Feedback — information about your experiences with the Service, including bug reports and feature requests.
• Creator Program data — if you participate in our Creator Program, we collect your submissions, campaign participation data, and payout information.

You should not provide us with any confidential, sensitive, unlicensed proprietary, or biometric information through the Service.

2.2 Information Collected Automatically

We and our service providers automatically collect certain information when you use the Service:

• Device data — browser type, operating system, screen resolution, device type, language settings, and similar technical information.
• Usage data — pages viewed, features used, generation history, time spent on the Service, navigation paths, and interaction patterns.
• IP address — we collect your IP address for rate limiting and abuse prevention. IP addresses are stored in hashed form (SHA-256 with a unique salt) and are automatically deleted after 90 days.
• Client fingerprint — we may optionally collect a browser fingerprint hash for free tier abuse prevention. Like IP addresses, fingerprints are stored only in hashed form and deleted after 90 days.
• Geolocation data — we derive your approximate location (country and city) from your IP address. This data is used for analytics, localisation, and compliance purposes.
• Analytics data — we log internal analytics events including generation metadata, model performance data, and error events. Prompts are stored as fingerprint hashes in analytics (not in full text).
• Communication interaction data — whether you open or click links in emails we send, tracked via pixel tags.

2.3 Information from Third Parties

We may receive personal information from third-party sources:

• Authentication providers — if you sign in using a third-party service (e.g., Google), we receive your name, email address, and profile picture as permitted by your account settings with that provider.
• Payment processor — we receive transaction confirmations and subscription status updates from our payment processor.

2.4 Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service. See Section 6 (Cookies & Tracking Technologies) for details. We display a cookie consent banner and only load non-essential tracking technologies after you provide consent.

We use personal information for the following purposes:

• Service delivery — to provide, maintain, and improve the Service, including processing your AI generation requests, managing your account, and enabling features like identity management, voice studio, and community sharing.
• AI processing — to process your inputs through AI models and deliver generated outputs. Your inputs (prompts, images, voice samples) are transmitted to our AI service providers solely for the purpose of generating your requested content.
• Personalisation — to understand your needs and preferences, customise your experience, and remember your settings.
• Analytics and improvement — to analyse usage patterns, monitor Service performance, diagnose technical issues, and improve the Service. This includes using aggregated and anonymised data to understand how features are used.
• Safety and moderation — to detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms of Service. This includes content moderation of generated outputs.
• Fraud prevention — to prevent abuse of free tier limits using hashed IP addresses and client fingerprints.
• Marketing — to send you product updates, tips, and promotional communications if you have opted in to receive them. You can opt out at any time.
• Legal compliance — to comply with applicable laws, respond to legal requests, and protect our rights and the rights of others.
• Aggregated and anonymised data — we may create aggregated, de-identified, or anonymised data from your information for analytics, research, and business purposes.

The Service uses third-party AI service providers to process your inputs and generate outputs. When you use generation features, your inputs (text prompts, reference images, voice samples, identity data) are transmitted to these providers for processing.

You acknowledge that your inputs and outputs may be used by the Company to improve its AI models, algorithms, and related technology, as well as for content moderation purposes, as described in our Terms of Service.

We implement content safety measures to detect and prevent the generation of harmful, illegal, or policy-violating content. Safety checks are performed on both inputs and outputs, and the results (pass/fail status, safety category) are logged for moderation purposes.

We may share your personal information with the following categories of recipients:

• AI service providers — to process your generation requests (prompts, images, audio). These providers process your data solely to deliver the requested AI outputs.
• Payment processor — to process payments and manage subscriptions. Your email and user ID are shared; full payment card details are handled directly by the payment processor.
• Cloud infrastructure providers — to host, store, and deliver the Service, including your account data, generated content, and uploaded files.
• Analytics and advertising partners — to understand how the Service is used and to measure the effectiveness of our marketing, subject to your cookie consent preferences.
• Law enforcement and authorities — where required by law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to protect rights, safety, or property.
• Business transfers — in connection with any merger, acquisition, sale of assets, or similar transaction, your information may be transferred as part of the business assets.
• Other users — content you choose to share publicly (e.g., on the Explore feed) is visible to other users. Your display name may be shown alongside shared content.
• Professional advisors — lawyers, auditors, and insurers where necessary for professional services.

We do not sell your personal information.

6.1 Essential Cookies

We use authentication cookies to maintain your session and keep you signed in. These cookies are strictly necessary for the Service to function and cannot be disabled.

6.2 Analytics and Advertising Cookies

With your consent, we use the following tracking technologies:

• Tag management — to manage and deploy analytics and marketing tags across the Service.
• Advertising pixels — to measure conversions and the effectiveness of our advertising campaigns. Events tracked include page views, registrations, content views, and purchases.

6.3 Cookie Consent

When you first visit the Service, we display a cookie consent banner. Non-essential tracking technologies are only loaded after you provide consent. You can change your consent preferences at any time by clearing your browser's local storage for edit8.app, which will cause the consent banner to appear again.

6.4 Do Not Track

We respect the Do Not Track (DNT) signal sent by your browser. If your browser sends a DNT signal, we will not load non-essential tracking technologies, regardless of any prior cookie consent.

We retain personal information for as long as necessary to fulfil the purposes described in this Privacy Policy:

• Account data — retained until you delete your account. Upon account deletion, your data is purged from active systems within 30 days and from backups within 90 days.
• Generation history — retained until you delete individual items or your account.
• IP and fingerprint hashes — automatically deleted after 90 days.
• Analytics data — retained in aggregated or anonymised form indefinitely for Service improvement.
• Payment records — retained as required by applicable tax and accounting laws.

When we no longer need personal information, we either delete it, anonymise it, or isolate it from further processing.

8.1 Access and Update

You can review and update your account information at any time through the Settings page of the Service.

8.2 Deletion

You can delete your account through the Settings page. You can also request deletion by contacting us at support@edit8.app. Account deletion is processed within 30 days, with backup purging completed within 90 days.

8.3 Marketing Opt-Out

You can opt out of marketing emails at any time through your Account settings or by following the unsubscribe link in any marketing email. You will continue to receive essential service-related communications.

8.4 Cookie Preferences

You can manage cookie preferences through the consent banner displayed on the Service. Most browsers also allow you to reject or remove cookies through browser settings.

8.5 Do Not Track

We honour the Do Not Track signal. If enabled in your browser, non-essential tracking technologies will not be loaded.

8.6 Data Portability

You can download your generated content (images, videos, audio) directly from the Service at any time.

We implement technical, organisational, and physical safeguards designed to protect your personal information, including:

• Encryption of data in transit (TLS) and at rest
• Hashing of sensitive identifiers (IP addresses, fingerprints) with unique salts
• Row-level security policies on database tables
• Access controls and authentication requirements
• Regular security reviews

However, no method of transmission or storage is completely secure. We cannot guarantee the absolute security of your information.

We are based in the United Arab Emirates and use service providers that may operate in other countries, including the United States and the European Union. Your personal information may be transferred to and processed in countries where privacy laws may differ from those in your jurisdiction.

Where we transfer personal information internationally, we implement appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable law.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@edit8.app. We will take steps to delete such information.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where you have an account, by sending you an email notification. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

support@edit8.app