Privacy Policy

1. Introduction

At Editoya, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our image editing services.

Editoya is operated by Softadom, a software development company. By using our service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Account Information: Email address, name, phone number (optional)
• Profile Information: Avatar, preferences, settings
• Payment Information: Billing address, payment method details (processed securely by Stripe)
• Communication Data: Messages sent through our contact forms or support channels

2.2 Usage Information

We automatically collect certain information about your use of our service:

• Image Processing Data: File names, sizes, processing parameters, and results
• Usage Statistics: Number of edits, tools used, processing times
• Device Information: IP address, browser type, operating system
• Log Data: Access times, pages viewed, errors encountered

2.3 Images and Content

When you upload images to our service, we temporarily store them to process your requests. We do not use your images for any purpose other than providing the requested editing services.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To process your images and provide editing services
• Account Management: To create and maintain your account, process payments
• Communication: To send service updates, support responses, and important notices
• Improvement: To analyze usage patterns and improve our AI models and services
• Security: To detect and prevent fraud, abuse, and security threats
• Legal Compliance: To comply with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our service:

• Stripe: For payment processing and subscription management
• Postmark: For sending transactional emails
• Google: For OAuth authentication (if you choose to sign in with Google)
• Cloud Infrastructure: For secure data storage and processing

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests from government authorities.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: All data is encrypted in transit and at rest using industry-standard protocols
• Access Controls: Strict access controls limit who can access your information
• Regular Audits: We regularly audit our security practices and systems
• Secure Infrastructure: We use secure cloud infrastructure with enterprise-grade security
• Data Minimization: We only collect and retain the minimum amount of data necessary

6. Data Retention

We retain your information for different periods depending on the type of data:

• Account Information: Retained until you delete your account
• Processed Images: 30 days (free users) / 90 days (Pro users)
• Usage Data: Up to 2 years for analytics and service improvement
• Payment Records: Retained as required by law and accounting standards
• Support Communications: 3 years for quality assurance and support purposes

After the retention period, we securely delete your data from our systems. You can request immediate deletion of your account and associated data at any time.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests

To exercise these rights, please contact us at privacy@editoya.com. We will respond to your request within 30 days.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for basic functionality and security
• Analytics Cookies: Help us understand how you use our service
• Preference Cookies: Remember your settings and preferences
• Session Cookies: Maintain your login session and processing state

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. GDPR Compliance

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR). This includes the right to data portability, the right to be forgotten, and the right to object to processing. We are committed to complying with GDPR requirements.

14. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.