Privacy Policy — Edithly

1. About Us

Edithly is a product of Smazee Apps, an ABN-registered business based in Melbourne, Australia. When this policy refers to "we", "us", or "our", it means Smazee Apps operating under the Edithly brand.

For any privacy-related questions, contact us at [email protected].

2. What We Collect

We collect the following information when you use Edithly:

Account information: your email address and name when you sign up.
Documents you upload: PDFs, URLs, text, and any files you submit to the platform for processing.
Usage data: how you interact with the app (pages visited, features used, session duration) to help us improve the product.
Device information: browser type, operating system, and IP address for security and diagnostic purposes.

3. How Your Documents Are Stored

Documents you upload are processed and stored as encrypted chunks on secured, enterprise-grade hosting services. No document is stored as a single monolithic file — content is split into smaller, independently encrypted segments to minimise risk in the unlikely event of a security incident.

All storage infrastructure is managed by reputable cloud providers with industry-standard security certifications. Data is encrypted both at rest and in transit using AES-256 and TLS 1.2+ respectively.

4. Authentication & Security

User authentication credentials — including passwords and session tokens — are encrypted and never stored in plain text. We use industry-standard hashing and salting practices for passwords. Session tokens are signed and expire automatically.

We implement rate limiting, anomaly detection, and regular security reviews to protect accounts from unauthorised access.

5. We Do Not Train on Your Data

Your documents and content are never used to train AI models — by us or any third party we work with. Your data is strictly used to generate the outputs you request (summaries, visualizations, flashcards, etc.) and for nothing else.

We do not sell, rent, or share your content with advertisers, data brokers, or model training pipelines.

6. How We Use Your Data

Your data is used solely for the following purposes:

To process your documents and generate visualizations, summaries, and other outputs as explicitly requested by you.
To save and retrieve your documents so you can access them across sessions.
To improve the reliability and performance of the Edithly platform (using anonymised, aggregated analytics only).
To send transactional emails (e.g. account confirmation, password reset) when necessary.

We do not use your document content for any marketing, profiling, or purposes beyond analysis and viewing as per your own request.

7. Data Retention & Deletion

Documents you upload are retained as long as your account is active. You can delete individual documents at any time from within the app. On account deletion, all your documents and personal data are permanently purged from our systems within 30 days.

8. Third-Party Services

We use trusted third-party services to operate Edithly, including cloud hosting and AI inference providers. These providers process data on our behalf under strict data-processing agreements and are prohibited from using your data for their own purposes.

We do not embed third-party advertising or tracking scripts on the Edithly platform.

9. Your Rights

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data and account.
Export your documents and data at any time.
Withdraw consent at any time by deleting your account.

To exercise any of these rights, email us at [email protected].

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of Edithly after changes are posted constitutes your acceptance of the updated policy.

11. Contact

For any privacy questions or concerns, please reach out to Smazee Apps at: [email protected]