1. Introduction

Welcome to Editorium. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our services, and tell you about your privacy rights and how the law protects you.

2. Information We Collect

We collect and process the following types of information:

Personal Information

Name and email address (provided during account creation)
Profile information (display name, profile picture)
Authentication information (password hash, Google OAuth tokens)
Payment information (processed securely through Stripe)

Content Data

Articles, drafts, and content you create
Media files you upload (images, documents)
Comments and collaboration data
Version history and edit logs

Usage Data

IP address and browser information
Pages visited and features used
Time and date of visits
AI features usage statistics

3. How We Use Your Information

We use your information to:

Provide and maintain our Service
Process your transactions and manage subscriptions
Send you administrative information and updates
Respond to your requests, questions, and comments
Improve and optimize our Service
Provide AI-powered content assistance
Detect and prevent fraud and abuse
Comply with legal obligations

4. AI and Third-Party Services

Editorium uses third-party AI services to provide content assistance features. When you use AI features:

Your content may be sent to AI service providers (OpenAI, Anthropic) for processing
These providers have their own privacy policies and data handling practices
We do not use your content to train AI models
AI providers may temporarily cache your content for processing but do not retain it long-term

5. Data Storage and Security

We store your data using Google Firebase and implement industry-standard security measures:

Data encryption in transit (HTTPS/TLS)
Data encryption at rest
Secure authentication (Firebase Authentication)
Regular security audits and updates
Role-based access controls
Secure payment processing (PCI DSS compliant via Stripe)

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

Service Providers: With third-party vendors who provide services on our behalf (hosting, payment processing, AI services)
Legal Requirements: When required by law or to protect our rights and safety
Business Transfers: In connection with any merger, sale, or acquisition of all or a portion of our business
With Your Consent: When you explicitly authorize us to share your information

7. Your Privacy Rights

You have the following rights regarding your personal data:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data (subject to legal requirements)
Export: Request a copy of your data in a portable format
Opt-out: Unsubscribe from marketing communications
Restriction: Request restriction of processing of your data

To exercise these rights, please contact us at privacy@editorium.net

8. Cookies and Tracking

We use cookies and similar tracking technologies to:

Maintain your session and keep you logged in
Remember your preferences and settings
Analyze how you use our Service
Improve Service performance and user experience

You can control cookies through your browser settings. Note that disabling cookies may limit some functionality of the Service.

9. Data Retention

We retain your personal data for as long as necessary to provide our Service and fulfill the purposes outlined in this privacy policy. We will retain and use your data to the extent necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to your information being transferred to our facilities and those of third parties with whom we share it.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@editorium.net

Support: support@editorium.net

14. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal data.

15. CCPA Compliance (California Users)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). This includes the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information (we do not sell personal information).