Privacy Policy

1 Overview

REDitors ("we", "our", or "us") is operated by the REDitors Team. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at reditors.com and our Adobe Premiere Pro plugin (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2 Data We Collect

We collect the following categories of information:

• Account Data: Name, email address, profile picture, and password (hashed, never stored in plain text) when you create an account.
• Billing Data: Payment information is processed by Stripe or PayPal. We never store your full card number — only a tokenized reference.
• Usage Data: Feature usage (transcription count, seconds processed, tool types used), plugin version, OS platform, and session timestamps.
• Technical Data: IP address, browser type, device fingerprint (for abuse prevention), and referring URLs.
• Communication Data: Messages sent via our contact form or support channels.
• Affiliate Data: If you join our affiliate program, we collect your referral activity, commission earnings, and payout details.

3 How We Use Your Data

We use the information we collect to:

• Provide, operate, and maintain the REDitors Service
• Process payments and manage your subscription or credit balance
• Authenticate your identity and protect your account
• Send transactional emails (receipts, password resets, account alerts)
• Improve product performance and fix bugs
• Detect and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations

We do not use your data for advertising profiling, sell it to third parties, or use it to train AI models.

4 Audio Processing

Transcription results (text and timestamps) are stored in your account so you can access your history. You can delete any transcription from your dashboard at any time.

5 Data Sharing & Third Parties

We share data with trusted third-party service providers only as necessary to operate the Service:

• Supabase — Database and authentication (EU region, GDPR compliant)
• Stripe — Payment processing (PCI-DSS Level 1 certified)
• PayPal — Alternative payment processing
• Google Analytics — Anonymous usage analytics (IP anonymized)
• Tawk.to — Live chat support (optional, only when you initiate chat)

We do not share your personal data with advertisers, data brokers, or any party for marketing purposes. We may disclose data if required by law or to protect the rights and safety of REDitors or its users.

6 Cookies & Tracking

We use the following types of cookies:

• Strictly Necessary: Session cookies required for authentication and security. Cannot be disabled.
• Analytics: Google Analytics cookies to understand usage patterns (anonymized). You can opt out.
• Preferences: Cookies to remember your language and theme settings.
• Affiliate Tracking: If you arrive via an affiliate link, a cookie stores the referral code for attribution.

You can manage or disable non-essential cookies through our cookie banner or your browser settings. Disabling analytics cookies will not affect your use of the Service.

7 Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Audio files: Deleted within 5 minutes of processing.
• Transcription history: Retained until you delete it or close your account.
• Payment records: Retained for 7 years for legal and tax compliance.
• Activity logs: Retained for 12 months for security monitoring.

8 Your Rights (GDPR & CCPA)

If you are in the European Economic Area (EEA) or California, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Restriction: Ask us to restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@reditors.com. We will respond within 30 days.

9 Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Row-Level Security (RLS) on all database tables
• Hashed passwords (bcrypt) — we never store plaintext passwords
• Rate limiting and brute-force protection on all authentication endpoints
• Regular security audits and vulnerability assessments

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10 Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

11 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you by email or via an in-app notification. Your continued use of the Service after changes constitutes acceptance of the revised policy.

12 Contact Us

If you have questions, requests, or concerns about this Privacy Policy or how we handle your data: