Privacy policy

Last updated 12 October 2026

editbay.ai is run by the operator of editbay.ai (“we”). This policy explains what personal data we process when you use editbay.ai, why, and your rights under the EU General Data Protection Regulation (GDPR).

What we process

• Account data: your email address, name and profile picture (if you sign in with Google), and which workspaces you belong to.
• Content: videos, audio, images, comments, drawings, cut sheets and other files you or your connected AI assistant upload or create.
• Usage data: processing minutes, storage used, sign-in times and technical logs (IP address, browser) kept for security and troubleshooting.
• Billing data: if you subscribe, our payment provider Stripe processes your payment details; we only see the plan, status and the last digits of the card.

Why (legal basis)

• To provide the service you signed up for (contract, Art. 6(1)(b)).
• To keep the service secure and prevent abuse (legitimate interest, Art. 6(1)(f)).
• To meet accounting and tax obligations (legal obligation, Art. 6(1)(c)).

AI assistants

editbay.ai does not include its own AI. When you connect an AI assistant (such as Claude) to your workspace, that assistant reads and changes your workspace content on your instruction, under your agreement with its provider. You can disconnect it at any time in Settings.

Processors and where data is stored

• Hosting, database and file storage: Railway (servers in the EU region, europe-west4).
• Payments: Stripe. Email delivery: Resend. Sign-in with Google: Google.

Where a processor handles data outside the EU/EEA, it does so under the EU Standard Contractual Clauses.

How long we keep it

Your content is kept until you delete it or close your account. After an account is closed we delete its content within 30 days, except billing records we must keep by law (up to 5 years) and backups that expire on their own.

Your rights

You can ask for access to, correction of, deletion of or a copy of your personal data, object to or restrict processing, and complain to your data protection authority (in Denmark: Datatilsynet). Contact us at [email protected].

Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies.