Privacy Policy

1. Introduction

Editorial Check ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under applicable privacy laws worldwide — under the name Editorial Check.

This policy applies to users globally and is designed to comply with:

• GDPR (European Union / European Economic Area)
• UK GDPR (United Kingdom)
• CCPA / CPRA (California, USA)
• PIPEDA (Canada)
• Australian Privacy Act 1988
• EU AI Act (Regulation (EU) 2024/1689) — transparency obligations regarding AI-generated content
• General international SaaS privacy best practices

We are headquartered in the United States. Where we process data of individuals in the EEA or UK, we comply with GDPR and UK GDPR requirements respectively.

2. Categories of Data We Process

Account Information: Your name and email address, collected when you register.

Authentication Information: Session tokens and login credentials required to access your account securely.

Payment Information: Billing transactions are processed exclusively by Lemon Squeezy, who acts as Merchant of Record. Lemon Squeezy may share limited transaction metadata with us (such as subscription plan and user identifier) via secure webhooks for the sole purpose of activating your subscription. We do not store credit card numbers or full payment details on our servers.

Language Preference: When you select an output language for article generation, this preference is processed transiently as part of the generation request and is not stored as personal data.

Technical Log Data: Server logs including IP addresses, browser type, timestamps, and pages visited — collected for security and operational purposes only.

Uploaded Text (Transient Only): Any text you submit for analysis (AI detection, fact-checking, plagiarism) is processed temporarily and immediately discarded after the result is returned. This content is never stored persistently, never shared, and never used for AI training.

Generated & Analyzed Content: Articles, reports, and documents generated within Editorial Check — including multilingual articles, AI citation audit reports, fact-check results, plagiarism reports, social media snippets, newsletter summaries, and AI-generated keyword tags — are stored on your account and protected by strict database-level access control (owner-only row-level security). Only you can read, modify, or delete your own content. We do not use this content for AI training, marketing, or any purpose beyond providing the service.

3. Legal Bases for Processing

Under GDPR Article 6, we process data on the following legal bases:

Contract Performance (Art. 6(1)(b)): We process your account data to provide the service you signed up for.

Legitimate Interest (Art. 6(1)(f)): We process technical log data to ensure the security and stability of our platform.

Legal Obligation (Art. 6(1)(c)): We retain billing records as required by applicable accounting and tax law.

Consent (Art. 6(1)(a)): We request explicit consent before enabling any optional analytics or marketing cookies. Currently, no such tools are active.

4. How We Use Your Data

We use your data exclusively to:

• Provide, maintain, and improve the Editorial Check service.
• Authenticate your account and manage your subscription.
• Process payments securely via Lemon Squeezy.
• Monitor platform security, prevent abuse, and enforce our acceptable use policy.
• Respond to your support requests and data access/deletion requests.

What We Do NOT Do:

• No Selling: We do not sell your personal data to third parties.
• No AI Training: Your content — neither your submitted text for analysis nor your generated articles — is ever used to train or fine-tune any AI models.
• No Sharing: We do not share your data with advertisers, marketers, or third parties beyond what is strictly necessary to operate the service.
• No Profiling: We do not engage in behavioral profiling, targeting, or building consumer profiles about you.

5. Data Retention

Analyzed text: Transient only — discarded immediately after processing. Not stored.

Account data: Retained for the duration of your active account.

Billing records: Retained in accordance with applicable U.S. legal accounting obligations (typically 7 years).

Upon account deletion, all account-related data and stored analysis history will be permanently removed. Only legally required billing records will be retained.

6. International Data Transfers

Editorial Check is based in the United States, which is outside the European Economic Area (EEA) and the UK. When we transfer personal data from the EEA or UK to the US, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission.

Payments are processed by Lemon Squeezy, which maintains its own international transfer mechanisms. Please refer to Lemon Squeezy's Privacy Policy for details.

For Canadian users, this policy is designed to comply with PIPEDA. For Australian users, this policy aligns with the Australian Privacy Principles under the Privacy Act 1988.

7. Your Rights Under GDPR (EEA & UK Users)

If you are located in the EEA or UK, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your data ("right to be forgotten").
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interest.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based.

To exercise these rights, use Security → Export My Data / Delete Account from your account, or contact us at support@laenethylabs.com. We will respond within 30 days.

8. Your Rights Under CCPA / CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• Right to Know: Request information about the personal data we collect, use, disclose, and sell.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell your personal data. No opt-out is required.
• Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.

To submit a CCPA request, contact us at support@laenethylabs.com.

9. Rights for Canadian Users (PIPEDA)

Canadian users have the right to access their personal information, request corrections, and withdraw consent for non-essential processing. We will fulfill requests within 30 days. Contact us at support@laenethylabs.com.

10. Rights for Australian Users

Australian users have rights under the Privacy Act 1988 and the Australian Privacy Principles (APPs), including the right to access and correct your personal information. Complaints may be directed to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Rights for Brazilian Users (LGPD)

If you are located in Brazil, the Lei Geral de Proteção de Dados Pessoais (Law No. 13,709/2018, “LGPD”) applies to our processing of your personal data. You have the right to confirmation of processing, access to your data, correction of incomplete or inaccurate data, anonymisation or deletion of unnecessary data, data portability, deletion of data processed with your consent, and revocation of consent. To exercise these rights, contact us at support@laenethylabs.com. Complaints may also be directed to Brazil’s national data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD).

12. Rights for Indian Users (DPDP Act)

If you are located in India, the Digital Personal Data Protection Act, 2023 (“DPDP Act”) applies to our processing of your personal data. As a Data Principal, you have the right to obtain a summary of the personal data we process about you, the right to correction and erasure of your personal data, and the right to grievance redressal. To exercise these rights or raise a grievance, contact us at support@laenethylabs.com. Unresolved grievances may be escalated to the Data Protection Board of India.

13. Rights for South Korean Users (PIPA)

If you are located in South Korea, the Personal Information Protection Act (“PIPA”) applies to our processing of your personal information. You have the right to access, correct, delete, and suspend the processing of your personal information. To exercise these rights, contact us at support@laenethylabs.com. Complaints may also be directed to the Personal Information Protection Commission (PIPC) of the Republic of Korea.

14. Notification of Personal Data Breaches

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it (GDPR Art. 33). Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay (GDPR Art. 34), describing the nature of the breach and the measures taken or proposed.

15. Cookies

We use technically necessary cookies required for authentication and session management. Analytics is available as an opt-in category — see below — and is not active unless you explicitly accept it. No marketing cookies are currently active.

Cookie categories:

• Necessary cookies — Always active. Required for login and session management.
• Analytics cookies — Off by default. If you select “Accept All” in the cookie banner, we enable Vercel Web Analytics, a cookie-less, anonymous tool that measures aggregate page views and visitor counts only. It does not use cookies itself, does not permanently store IP addresses, and does not build individual visitor profiles.
• Marketing cookies — Currently disabled. Will only be enabled with your explicit consent.

You can manage or withdraw your cookie preferences at any time via our cookie settings banner.

16. Tracking & Third Parties

No Tracking by Default: Editorial Check does not activate any third-party tracking or analytics tool unless you explicitly opt in via the cookie consent banner (see Section 11).

Specifically, Editorial Check does not include:

• Google Analytics or other web analytics services
• Meta Pixel or Facebook tracking
• Advertising or retargeting pixels
• Behavioral profiling or audience building tools
• Hotjar, Segment, Mixpanel, or similar session tracking services
• Any form of advertisement tracking or affiliate trackers

Optional Analytics: We use Vercel Web Analytics, a cookie-less, anonymous analytics service provided by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), to measure aggregate page views and visitor counts. Consistent with our commitment above, it remains disabled by default and is only activated if you select “Accept All” in the cookie consent banner — we do not use pre-checked consent boxes or dark patterns to obtain consent. If further tracking or analytics tools are added in the future, they will follow the same disabled-by-default, explicit-consent model.

17. Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS enforced across all application endpoints
• SSL/TLS encryption for all data in transit
• Secure password hashing
• Access control restrictions and role-based permissions
• Database-level row-level security (RLS) ensuring strict data isolation: each user can only access their own records
• Server logging without storing user-submitted content
• Rate limiting to prevent abuse

18. Data Processing Addendum (DPA)

If you are an EU-based business and require a Data Processing Addendum, please contact us at support@laenethylabs.com. A DPA template is available upon request.

19. Contact & Complaints

Data Protection Officer & Privacy Contact:

support@laenethylabs.com

Harbinger Bros. LLC
1309 Coffeen Avenue STE 1200
Sheridan, WY 82801
Wyoming, USA

Supervisory Authority Complaints:

You have the right to lodge a complaint with your local data protection supervisory authority, including:

• EU/EEA: Your national Data Protection Authority (DPA)
• UK: Information Commissioner's Office (ICO) · ico.org.uk
• California, USA: California Privacy Protection Agency (CPPA)
• Canada: Office of the Privacy Commissioner of Canada (OPC)
• Australia: Office of the Australian Information Commissioner (OAIC) · oaic.gov.au

Submitting a complaint with a supervisory authority does not prevent you from exercising your other legal remedies.