simplyedit Logo

Privacy policy

A plain-language explanation of what stays local, what reaches our services, and the choices available to you.

Effective and last updated: September 4, 2026

This Privacy Policy explains how SimplyEdit ("SimplyEdit", "we", "us") handles information when you use simplyedit.co, the SimplyEdit web application, and related services. Questions or privacy requests can be sent to hello@simplyedit.co.

1. The short version

  • Ordinary editing and local projects run in your browser and can remain on your device.
  • Account, cloud project, cloud export, billing, AI, transcription, and support features send some information to us or our service providers.
  • We do not sell personal information or use it for cross-context behavioural advertising.
  • We use essential authentication and security technologies. We do not currently use advertising cookies.
  • You can delete cloud projects and your account from the application.

2. Information we collect

Account and authentication information

When you create an account, we process your email address, display name, email-verification status, authentication identifiers, and account settings. Supabase handles passwords and authentication. We do not receive your plain-text password. Authentication, security, and hosting logs may contain an IP address, browser or device information, timestamps, and requested pages.

Projects and media

Projects may include video, audio, images, captions, timeline data, prompts, thumbnails, proxies, revisions, and exported files. Local projects are stored in browser storage. If you use cloud storage, cloud export, sharing, or another cloud feature, the relevant project data and media are uploaded to our infrastructure.

AI and generation data

When you use AI features, we process the prompt and the context needed to perform the request. Depending on the feature, this can include transcript text, clip names and timing, audio for transcription, reference images, or rendered frames from your video. We also store job status, usage, errors, and diagnostic information needed to operate and improve reliability.

Billing and usage information

We process your plan, subscription status, billing interval, Stripe customer and transaction identifiers, credit grants and usage, and automatic top-up settings. Stripe collects and stores payment-card and billing details. SimplyEdit does not receive complete card numbers or security codes.

Communications

If you contact us or submit feedback, we process the message and the contact and account information associated with it.

3. When content leaves your device

Importing media, editing, playback, and local project storage can occur on your device. Content leaves your device when you deliberately use a feature that requires a server, including:

  • cloud projects and cloud exports;
  • AI assistance and visual analysis;
  • transcription and automatic captions;
  • image, motion-graphic, background-removal, or 3D generation;
  • stock-media searches and downloads; and
  • support or feedback submissions that include content.

The interface may show a credit cost or cloud indicator for many of these operations. Avoid cloud and AI features if you do not want the relevant content transmitted to a service provider.

4. How we use information

We use information to provide and secure the service; authenticate users; store, process, and export projects; provide AI features; process payments and credits; prevent fraud and abuse; diagnose failures; respond to support requests; comply with tax, accounting, and legal requirements; and communicate material service or policy changes.

Where privacy law requires a legal basis, we rely on performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating, securing, and improving the service. We ask for consent where the law requires it.

5. Service providers and disclosures

We disclose information only as needed to operate the service, complete a transaction, comply with law, protect users and the service, or complete a business transfer. Current categories of providers include:

  • Supabase for authentication and database services;
  • Cloudflare for object storage and infrastructure;
  • Vercel for hosting, security, and operational logs;
  • Stripe for checkout, subscriptions, taxes, receipts, and payment processing;
  • Resend and configured email infrastructure for transactional messages;
  • Upstash for short-lived rate-limit data;
  • OpenAI, Groq, OpenRouter and its routed model providers, Google, and fal.ai for AI and media-processing features; and
  • Pexels and Freesound for stock-media features.

Providers may process information in countries different from yours. Their handling of data is also governed by their applicable terms and privacy commitments. We do not sell personal information.

6. Cookies and browser storage

We use authentication cookies and similar storage needed to keep you signed in, secure requests, remember settings, and operate the editor. Local projects can use IndexedDB and the browser's Origin Private File System. Vercel BotID and related security measures use request and browser signals to identify automated or abusive traffic.

We do not currently use advertising cookies or cross-site advertising trackers. If we introduce non-essential tracking that requires consent, we will request consent before activating it where required.

7. Retention and deletion

We generally keep account information while the account is open and cloud content until you delete the project or account. Operational and AI job records are retained only as long as reasonably needed for delivery, security, troubleshooting, dispute handling, and legal obligations. Billing and transaction records may be retained after account deletion for tax, accounting, fraud-prevention, and legal purposes.

Account deletion is intended to cancel active billing and remove account-linked cloud objects and database records. Provider backups, security logs, and records that law requires us to retain may remain for their normal retention periods. Local browser projects are controlled by your browser and must be cleared from that device separately.

8. Security

We use measures such as encrypted transport, access controls, row-level database security, scoped storage credentials, and short-lived signed media URLs. No online service can guarantee absolute security. Contact us promptly if you believe your account has been compromised.

9. Your choices and rights

You can update account information, delete projects, disable automatic top-up, manage billing, cancel a subscription, or delete your account through the application. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a privacy regulator.

Send requests to hello@simplyedit.co from the email associated with the account. We may need to verify your identity. Mandatory rights under applicable law are not limited by this policy.

10. Children

SimplyEdit is not directed to children under 13. A person below the age at which they can independently consent to an online service in their location must use the service only with permission from a parent or legal guardian. Contact us if you believe a child has provided personal information without appropriate permission.

11. Changes

We may update this policy as the product or law changes. The date above identifies the version in effect. We will provide an appropriate notice before a material change takes effect when required.

12. Contact

Email: hello@simplyedit.co

Website: simplyedit.co

Policy version 2026-09-04