Privacy Policy

1. Introduction

Editorial Check ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under applicable privacy laws worldwide — under the name Editorial Check.

This policy applies to users globally and is designed to comply with:

• GDPR (European Union / European Economic Area)
• UK GDPR (United Kingdom)
• CCPA / CPRA (California, USA)
• PIPEDA (Canada)
• Australian Privacy Act 1988
• EU AI Act (Regulation (EU) 2024/1689) — transparency obligations regarding AI-generated content
• General international SaaS privacy best practices

We are headquartered in the United States. Where we process data of individuals in the EEA or UK, we comply with GDPR and UK GDPR requirements respectively.

2. Categories of Data We Process

Account Information: Your name and email address, collected when you register.

Authentication Information: Session tokens and login credentials required to access your account securely.

Payment Information: Billing transactions are processed exclusively by Lemon Squeezy, who acts as Merchant of Record. Lemon Squeezy may share limited transaction metadata with us (such as subscription plan and user identifier) via secure webhooks for the sole purpose of activating your subscription. We do not store credit card numbers or full payment details on our servers.

Technical Log Data: Server logs including IP addresses, browser type, timestamps, and pages visited — collected for security and operational purposes only.

Submitted Text & Analysis Reports: Fact-Check, Plagiarism, AI Detection, and AI Citation Audit each store the text you submit together with the resulting report on your account, protected by strict database-level access control (owner-only row-level security) — only you can read your own reports; deleting your account permanently removes them. Editorial Audit, SEO Optimizer, and Benchmark Analysis do not store anything: your text and their results exist only for the duration of the request and are discarded immediately after the response is returned. None of this content — stored or transient — is ever used for AI training, sold, or shared with third parties beyond what is strictly necessary to run the analysis itself.

3. Legal Bases for Processing

Under GDPR Article 6, we process data on the following legal bases:

Contract Performance (Art. 6(1)(b)): We process your account data to provide the service you signed up for.

Legitimate Interest (Art. 6(1)(f)): We process technical log data to ensure the security and stability of our platform.

Legal Obligation (Art. 6(1)(c)): We retain billing records as required by applicable accounting and tax law.

Consent (Art. 6(1)(a)): We request explicit consent before enabling any optional analytics or marketing cookies. Currently, no such tools are active.

4. How We Use Your Data

We use your data exclusively to:

• Provide, maintain, and improve the Editorial Check service.
• Authenticate your account and manage your subscription.
• Process payments securely via Lemon Squeezy.
• Monitor platform security, prevent abuse, and enforce our acceptable use policy.
• Respond to your support requests and data access/deletion requests.

What We Do NOT Do:

• No Selling: We do not sell your personal data to third parties.
• No AI Training: Your content — neither your submitted text for analysis nor your stored analysis reports — is ever used to train or fine-tune any AI models.
• No Sharing: We do not share your data with advertisers, marketers, or third parties beyond what is strictly necessary to operate the service.
• No Profiling: We do not engage in behavioral profiling, targeting, or building consumer profiles about you.

5. Data Retention

Submitted text & reports (Fact-Check, Plagiarism, AI Detection, AI Citation Audit): Retained on your account for as long as your account remains active.

Submitted text (Editorial Audit, SEO Optimizer, Benchmark Analysis): Transient only — discarded immediately after processing. Not stored.

Account data: Retained for the duration of your active account.

Billing records: Retained in accordance with applicable U.S. legal accounting obligations (typically 7 years).

Upon account deletion, all account-related data and stored analysis history will be permanently removed. Only legally required billing records will be retained.

6. International Data Transfers

Editorial Check is based in the United States, which is outside the European Economic Area (EEA) and the UK. When we transfer personal data from the EEA or UK to the US, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission.

Payments are processed by Lemon Squeezy, which maintains its own international transfer mechanisms. Please refer to Lemon Squeezy's Privacy Policy for details.

For Canadian users, this policy is designed to comply with PIPEDA. For Australian users, this policy aligns with the Australian Privacy Principles under the Privacy Act 1988.

7. Your Rights Under GDPR (EEA & UK Users)

If you are located in the EEA or UK, you have the following rights:

• Right of Access: Request a copy of your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your data ("right to be forgotten").
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interest.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based.

To exercise these rights, use Security → Export My Data / Delete Account from your account, or contact us at support@laenethylabs.com. We will respond within 30 days.

8. Your Rights Under CCPA / CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• Right to Know: Request information about the personal data we collect, use, disclose, and sell.
• Right to Delete: Request deletion of your personal information.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell your personal data. No opt-out is required.
• Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.

To submit a CCPA request, contact us at support@laenethylabs.com.

9. Rights for Canadian Users (PIPEDA)

Canadian users have the right to access their personal information, request corrections, and withdraw consent for non-essential processing. We will fulfill requests within 30 days. Contact us at support@laenethylabs.com.

10. Rights for Australian Users

Australian users have rights under the Privacy Act 1988 and the Australian Privacy Principles (APPs), including the right to access and correct your personal information. Complaints may be directed to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Rights for Brazilian Users (LGPD)

If you are located in Brazil, the Lei Geral de Proteção de Dados Pessoais (Law No. 13,709/2018, “LGPD”) applies to our processing of your personal data. You have the right to confirmation of processing, access to your data, correction of incomplete or inaccurate data, anonymisation or deletion of unnecessary data, data portability, deletion of data processed with your consent, and revocation of consent. To exercise these rights, contact us at support@laenethylabs.com. Complaints may also be directed to Brazil’s national data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD).

12. Rights for Indian Users (DPDP Act)

If you are located in India, the Digital Personal Data Protection Act, 2023 (“DPDP Act”) applies to our processing of your personal data. As a Data Principal, you have the right to obtain a summary of the personal data we process about you, the right to correction and erasure of your personal data, and the right to grievance redressal. To exercise these rights or raise a grievance, contact us at support@laenethylabs.com. Unresolved grievances may be escalated to the Data Protection Board of India.

13. Rights for South Korean Users (PIPA)

If you are located in South Korea, the Personal Information Protection Act (“PIPA”) applies to our processing of your personal information. You have the right to access, correct, delete, and suspend the processing of your personal information. To exercise these rights, contact us at support@laenethylabs.com. Complaints may also be directed to the Personal Information Protection Commission (PIPC) of the Republic of Korea.

14. Notification of Personal Data Breaches

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it (GDPR Art. 33). Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay (GDPR Art. 34), describing the nature of the breach and the measures taken or proposed.

15. Cookies

We use technically necessary cookies required for authentication and session management. We also run a cookie-less analytics tool that does not require consent — see below. No marketing cookies are currently active.

Cookie categories:

• Necessary cookies — Always active. Required for login and session management.
• Analytics — Always active, no consent required. We use Vercel Web Analytics, a cookie-less, anonymous tool that measures aggregate page views, visitor counts, and a small set of product events (see Section 16). It does not set cookies, does not use persistent identifiers, does not permanently store IP addresses, and does not build individual visitor profiles — so it falls outside what cookie-consent laws (ePrivacy/GDPR) require consent for.
• Marketing cookies — Currently disabled. Will only be enabled with your explicit consent.

You can manage or withdraw your cookie preferences at any time via our cookie settings banner.

16. Tracking & Third Parties

No Behavioral Tracking: Editorial Check does not use any tool that identifies you across visits, builds a profile of you, or follows you across other sites.

Specifically, Editorial Check does not include:

• Google Analytics or other cookie-based web analytics services
• Meta Pixel or Facebook tracking
• Advertising or retargeting pixels
• Behavioral profiling or audience building tools
• Hotjar, Segment, Mixpanel, or similar session tracking services
• Any form of advertisement tracking or affiliate trackers

Analytics: We use Vercel Web Analytics, a cookie-less, anonymous analytics service provided by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), to measure aggregate page views and visitor counts, and to record a small number of anonymous product events (e.g., a contact form was submitted, a signup was completed, an upgrade button was clicked) so we can tell whether the product works, without attaching any of it to your identity. Because it is cookie-less and does not track individuals, it runs by default and is not gated behind the cookie consent banner. If we add tools that do require consent in the future, those will remain opt-in.

17. Security

We implement appropriate technical and organizational measures to protect your data, including:

• HTTPS enforced across all application endpoints
• SSL/TLS encryption for all data in transit
• Secure password hashing
• Access control restrictions and role-based permissions
• Database-level row-level security (RLS) ensuring strict data isolation: each user can only access their own records
• Server logging without storing user-submitted content
• Rate limiting to prevent abuse

18. Data Processing Addendum (DPA)

If you are an EU-based business and require a Data Processing Addendum, please contact us at support@laenethylabs.com. A DPA template is available upon request.

19. Contact & Complaints

Data Protection Officer & Privacy Contact:

support@laenethylabs.com

Harbinger Bros. LLC
1309 Coffeen Avenue STE 1200
Sheridan, WY 82801
Wyoming, USA

Supervisory Authority Complaints:

You have the right to lodge a complaint with your local data protection supervisory authority, including:

• EU/EEA: Your national Data Protection Authority (DPA)
• UK: Information Commissioner's Office (ICO) · ico.org.uk
• California, USA: California Privacy Protection Agency (CPPA)
• Canada: Office of the Privacy Commissioner of Canada (OPC)
• Australia: Office of the Australian Information Commissioner (OAIC) · oaic.gov.au

Submitting a complaint with a supervisory authority does not prevent you from exercising your other legal remedies.