Privacy policy

Data we collect

• Account email, display name, login/session records, and workspace membership.
• Markdown documents, assets, comments, suggestions, review links, share links, and related activity.
• Security, diagnostic, and product usage data. On signed-in app pages, analytics may be associated with your account email, Edith user ID, and the current organisation.
• Billing contact details, Stripe identifiers, plan and subscription status, and payment or invoice status if you buy a paid plan. Edith does not store your full card or bank details.

How we use it

• Provide the Edith app, authentication, document review, sharing, support, and billing.
• Protect accounts, prevent abuse, debug problems, and improve product quality.
• Send login codes and service messages through Postmark.
• Use Umami Analytics for cookieless product analytics. Signed-in app activity may be associated with your account and current organisation; public and signed-out visits remain anonymous. We do not use analytics cookies or cross-site tracking.

Providers

We use providers for hosting, email, analytics, site security, and billing. Current providers and payment partners are listed on the Providers and payment partners page. Paid purchases are sold through Onelink, built by Stripe. Onelink is the merchant of record and handles payment data under its own terms and privacy notice.

Retention

• Account and Team content is kept while the account is active. Inactive Team content is retained with access suspended so it can be reactivated, exported, or closed through support.
• Contact us to close an account or request access, correction, export, or deletion. We will delete or anonymise personal data where feasible.
• Backups, logs, billing records, and support records may remain where needed for security, recovery, accounting, or legal obligations.

Rights and safeguards

You can ask to access, correct, export, or delete personal data through the contact page. We and our providers may process data outside your country and use appropriate safeguards where required. We use reasonable technical and organisational measures, but no online service can be guaranteed completely secure.