Privacy Policy

Last Updated: January 2026

EdiAssist ("EdiAssist", "we", "us", or "our") is committed to protecting your privacy and handling personal information responsibly. This Privacy Policy explains how we collect, use, disclose, store, and safeguard personal information when you access or use our websites, applications, and services (collectively, the "Services").

This Privacy Policy is designed to comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the EU and UK General Data Protection Regulation (GDPR).

By using the Services or providing personal information, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect from: • Visitors to our websites • Users of the EdiAssist platform • Customers, prospects, and partners • Individuals who communicate with us or interact with our marketing activities This Privacy Policy does not apply to third-party websites, social networks, or services that you connect to through the Services. Their privacy practices are governed by their own policies.

2. Roles Under Data Protection Laws

For the purposes of applicable data protection laws: • EdiAssist acts as a data controller for personal information collected to operate our websites, manage accounts, handle billing, provide customer support, and conduct marketing activities. • EdiAssist acts as a service provider or data processor when customers use the Services to process personal information relating to their own contacts, followers, customers, or audience members. In these cases, the customer determines the purposes and means of processing, and EdiAssist processes information only in accordance with the customer's instructions. EdiAssist remains responsible for personal information under its control, including information processed by authorized service providers.

3. Information We Collect

Information You Provide Directly We may collect personal information you choose to provide, including: • Account information: name, email address, organization name, username, password • Billing information: billing address and payment details (processed by third-party payment providers) • Customer support communications: inquiries, feedback, requests, and attachments • Marketing and event information: webinar registrations, surveys, feedback, and event participation • Integration details: identifiers and settings for connected social media accounts that you authorize Information Collected Automatically When you use the Services, we may automatically collect: • Usage data: features used, actions taken, session duration • Log data: IP address, browser type, device information, operating system, timestamps • Analytics data: performance metrics, error logs, interaction patterns • Cookies and similar technologies: as described in our Cookie Notice Information from Connected Social Platforms If you connect third-party social media platforms, we may collect information made available to us through those platforms, such as: • Profile name, handle, and profile image • Posts, captions, images, videos, and engagement metrics • Audience and follower statistics • Messages, comments, and reactions, where authorized The scope of this information depends on the permissions you grant and the policies of the relevant platform.

4. How We Use Personal Information

We use personal information to: • Provide, operate, and maintain the Services • Create, authenticate, and manage user accounts • Generate, schedule, publish, and analyze content • Enable AI-driven features and automation • Respond to customer support requests • Improve, develop, and secure our products and Services • Communicate service-related notices and updates • Send marketing communications, where permitted by law • Prevent fraud, misuse, and security incidents • Comply with legal and regulatory obligations We do not use personal information for purposes unrelated to providing or improving the Services without obtaining additional consent, unless required or permitted by law.

5. AI Processing and Automated Features

EdiAssist uses artificial intelligence and automation to support features such as content generation, recommendations, prioritization, scheduling, and engagement workflows. These features are intended to assist users and generally do not produce legal or similarly significant effects on individuals. Where available, users can review, edit, approve, disable, or configure automation features through product settings. Customer Content processed by AI systems is used solely to provide and improve the Services. EdiAssist does not use Customer Content to train generalized AI models for unrelated purposes.

6. Legal Bases for Processing (EEA and UK)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process personal information only when we have a lawful basis, including: • Contract: to provide the Services and fulfill our contractual obligations • Legitimate interests: to secure, maintain, and improve the Services, prevent fraud, and understand usage patterns, balanced against your rights and expectations • Consent: where required by law, such as for certain cookies and marketing communications • Legal obligation: to comply with applicable laws and regulations We do not intentionally collect special categories of personal data. If such data is included in Customer Content, it is processed only as necessary to provide the Services and under customer instructions, where applicable.

7. How We Share Personal Information

Service Providers We may share personal information with trusted third-party service providers that assist us with hosting, infrastructure, payment processing, analytics, customer support, security, and AI services. These providers are contractually required to protect personal information and use it only for authorized purposes. Third-Party Integrations When you connect third-party services or platforms, information may be shared with those providers as required to enable the integration. Their use of your information is governed by their own privacy policies. Legal and Regulatory Disclosure We may disclose personal information where required to comply with applicable laws, regulations, legal processes, or lawful government requests, or to protect the rights, safety, and security of EdiAssist, our users, or others. Business Transactions Personal information may be disclosed or transferred as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including: • Account information: retained while the account is active • Billing and transaction records: retained as required by tax and financial laws • Logs and security data: retained for security and audit purposes • Customer Content: retained in accordance with customer instructions and account settings When information is no longer required, it is securely deleted or anonymized.

9. Security Safeguards

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption, access controls, monitoring, and regular security reviews. No system can be guaranteed to be completely secure.

10. International Data Transfers

Personal information may be processed or stored in Canada, the United States, and other jurisdictions where our service providers operate. Where required for transfers from the EEA or UK to countries that may not provide an equivalent level of protection, we rely on appropriate safeguards such as Standard Contractual Clauses and additional protective measures, as applicable.

11. Your Privacy Rights and Choices

Depending on your location, you may have the right to: • Access and obtain a copy of your personal information • Request correction of inaccurate or incomplete information • Request deletion of your personal information • Object to or restrict certain processing • Withdraw consent where processing is based on consent • Request data portability, where applicable If you are located in the EEA or UK, you also have the right to object to processing based on legitimate interests and to object to direct marketing at any time. We typically respond to verified requests within 30 days, unless an extension is permitted by law.

12. Complaints and Regulatory Authorities

If you are located in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection authority.

13. Marketing Communications

You may opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us. Service-related communications are not subject to marketing opt-out.

14. Children's Privacy

The Services are not intended for children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

15. Data Processing Addendum

Where EdiAssist acts as a processor on behalf of a customer, we process personal information under the customer's instructions. A Data Processing Addendum may be made available upon request.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Services or other appropriate means. Continued use of the Services after changes take effect constitutes acceptance of the updated Privacy Policy.

17. Contact Us

For privacy-related questions, requests, or complaints, please contact: Email: support@ediassist.ai Please include "Privacy Request" in the subject line.

18. Entire Policy

This Privacy Policy describes how EdiAssist handles personal information in connection with the Services and should be read together with our Terms of Service.
Privacy Policy - EdiAssist | EdiAssist