Updated May 13, 2026
Privacy Policy
What we collect, why we collect it, and how you can see, export, or delete your data.
What we collect
- Account info: email, password hash (via Supabase).
- Billing info: Stripe handles card data directly; we receive only the subscription status and customer id.
- Uploaded content: the videos and images you upload while using the editor. Deleted on export or session end.
- Analytics: PostHog autocapture (page views, clicks, form interactions). No personally identifying fields are captured.
- Server logs: standard request logs (IP, user-agent, timestamps), retained 30 days for abuse and debugging.
Why we collect it
- Account info: to authenticate you.
- Billing info: to provide the subscription you bought.
- Uploaded content: to perform the editing operation you requested. Stored only as long as needed for the export.
- Analytics: to understand product usage and improve the Service.
- Server logs: to detect abuse and debug errors.
Legal bases (GDPR)
- Contract: billing data.
- Legitimate interest: server logs, anti-abuse, performance analytics.
- Consent: the cookie banner; you can refuse non-essential cookies and the Service still works.
Sub-processors
We share data only with these processors, under their respective DPAs:
| Processor | Purpose | Location |
|---|---|---|
| Stripe | Payments | US |
| Vercel | Hosting | US |
| Backblaze B2 | Object storage | US |
| Supabase | Auth + database | US (closest region) |
| PostHog | Product analytics | US (US Cloud) |
| Google (Gmail) | Customer support email | US |
Your rights
You can:
- Access your data — email hitasidzikiti@gmail.comand we'll respond within 30 days.
- Correct your data — edit your account.
- Delete your data — delete your account from settings; this removes all account-linked data within 30 days.
- Export your data — JSON export available from settings.
- Object to processing based on legitimate interest — email us.
For EU residents: complaints can also be filed with your local data protection authority.
Retention
- Uploaded content: deleted at session end / on export, whichever is later.
- Account: until you delete it, plus 12 months for audit.
- Billing records: 7 years (tax law).
- Server logs: 30 days.
Cookies and tracking
- Essential cookies(auth session): always on. The Service doesn't work without them.
- Analytics cookies (PostHog): on by default, opt-out via banner.
- We do not use third-party advertising cookies.
- We do not sell your data.
Children
Edge Cutter is not directed at children under 13. We do not knowingly collect personal information from anyone under 13.
Security
- HTTPS everywhere.
- Stripe handles all card data; we never see or store it.
- Passwords are hashed via Supabase.
Changes
Material changes to this policy will be announced with at least 30 days' notice.
Contact
1-1071 Woodhaven Drive, Kingston, ON K7P0H7, Canada
Designated DMCA agent
For copyright concerns, see our DMCA Policy.
