Privacy Policy

This Privacy Policy applies to personal information we collect from: • Visitors to our websites • Users of the EdiAssist platform • Customers, prospects, and partners • Individuals who communicate with us or interact with our marketing activities This Privacy Policy does not apply to third-party websites, social networks, or services that you connect to through the Services. Their privacy practices are governed by their own policies.

For the purposes of applicable data protection laws: • EdiAssist acts as a data controller for personal information collected to operate our websites, manage accounts, handle billing, provide customer support, and conduct our own business operations. • EdiAssist acts as a service provider or data processor when customers use the Services to process personal information relating to their own contacts, followers, customers, or audience members. In these cases, the customer determines the purposes and means of processing, and EdiAssist processes information only in accordance with the customer's instructions. EdiAssist remains responsible for personal information under its control, including information processed by authorized service providers.

Information You Provide Directly We may collect personal information you choose to provide, including: • Account information, such as name, email address, organization name, username, and password • Billing information, such as billing address and payment details processed by third-party payment providers • Customer support communications, such as inquiries, feedback, requests, and attachments • Marketing and event information, such as webinar registrations, surveys, feedback, and event participation • Integration details, such as identifiers and settings for connected social media accounts that you authorize Information Collected Automatically When you use the Services, we may automatically collect: • Usage data, such as features used, actions taken, and session duration • Log data, such as IP address, browser type, device information, operating system, and timestamps • Analytics data, such as application performance metrics, error logs, and interaction patterns • Cookies and similar technologies, as described in our Cookie Notice Information from Connected Social Platforms If you connect third-party social media platforms, we may collect information made available to us through those platforms, based on the permissions you grant and the policies of the relevant platform. This may include: • Profile name, handle, and profile image • Posts, captions, images, videos, and engagement metrics • Audience and follower statistics • Messages, comments, and reactions, where authorized The scope of this information depends on the permissions you grant and the capabilities of the relevant platform. YouTube and Google Account Information If you connect YouTube or related Google services to EdiAssist, we may collect limited information made available through the permissions you authorize, such as: • Channel or profile name • Channel or profile ID • Profile image • Existing video metadata • Video upload information • Basic engagement information related to videos, where authorized This information is used only to provide the YouTube-related functionality requested by you within EdiAssist, such as connecting your account, displaying connected account information, and uploading user-approved videos. We do not use this data for advertising, marketing, profiling, or unrelated analytics.

We use personal information to: • Provide, operate, and maintain the Services • Create, authenticate, and manage user accounts • Generate, schedule, publish, and analyze user-requested content • Enable AI-assisted features and automation within the Services • Respond to customer support requests • Secure, maintain, troubleshoot, and improve the reliability and performance of the Services • Communicate service-related notices and updates • Send marketing communications, where permitted by law and based on non-Google data • Prevent fraud, misuse, and security incidents • Comply with legal and regulatory obligations We do not use personal information for purposes unrelated to providing, securing, maintaining, or improving the Services without obtaining additional consent, unless required or permitted by law. For clarity, data obtained through Google APIs is subject to the additional limitations described in Section 19 below.

EdiAssist uses artificial intelligence and automation to support features such as content generation, recommendations, prioritization, scheduling, and engagement workflows. These features are intended to assist users and generally do not produce legal or similarly significant effects on individuals. Where available, users can review, edit, approve, disable, or configure automation features through product settings. Customer Content processed by AI systems is used only to provide the Services and related user-facing functionality. EdiAssist does not use Customer Content to train generalized AI models for unrelated purposes. EdiAssist does not use data obtained from Google APIs to train artificial intelligence or machine learning models.

If you are located in the European Economic Area (EEA) or the United Kingdom, we process personal information only when we have a lawful basis, including: • Contract: to provide the Services and fulfill our contractual obligations • Legitimate interests: to secure, maintain, and improve the Services, prevent fraud, and understand usage patterns, balanced against your rights and expectations • Consent: where required by law, such as for certain cookies and marketing communications • Legal obligation: to comply with applicable laws and regulations We do not intentionally collect special categories of personal data. If such data is included in Customer Content, it is processed only as necessary to provide the Services and under customer instructions, where applicable.

Service Providers We may share personal information with trusted third-party service providers that assist us with hosting, infrastructure, payment processing, analytics, customer support, security, and AI services. These providers are contractually required to protect personal information and use it only for authorized purposes. Third-Party Integrations When you connect third-party services or platforms, information may be shared with those providers as required to enable the integration. Their use of your information is governed by their own privacy policies. Legal and Regulatory Disclosure We may disclose personal information where required to comply with applicable laws, regulations, legal processes, or lawful government requests, or to protect the rights, safety, and security of EdiAssist, our users, or others. Business Transactions Personal information may be disclosed or transferred as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including: • Account information, retained while the account is active • Billing and transaction records, retained as required by tax and financial laws • Logs and security data, retained for security and audit purposes • Customer Content, retained in accordance with customer instructions and account settings When information is no longer required, it is securely deleted or anonymized, subject to legal and operational requirements.

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption, access controls, monitoring, and regular security reviews. No system can be guaranteed to be completely secure.

Personal information may be processed or stored in Canada, the United States, and other jurisdictions where our service providers operate. Where required for transfers from the EEA or UK to countries that may not provide an equivalent level of protection, we rely on appropriate safeguards such as Standard Contractual Clauses and additional protective measures, as applicable.

Depending on your location, you may have the right to: • Access and obtain a copy of your personal information • Request correction of inaccurate or incomplete information • Request deletion of your personal information • Object to or restrict certain processing • Withdraw consent where processing is based on consent • Request data portability, where applicable If you are located in the EEA or UK, you also have the right to object to processing based on legitimate interests and to object to direct marketing at any time. We typically respond to verified requests within 30 days, unless an extension is permitted by law.

If you are located in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection authority.

You may opt out of marketing emails at any time by using the unsubscribe link in the message or by contacting us. Service-related communications are not subject to marketing opt-out.

The Services are not intended for children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to delete it.

Where EdiAssist acts as a processor on behalf of a customer, we process personal information under the customer's instructions. A Data Processing Addendum may be made available upon request.

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Services or other appropriate means. Continued use of the Services after changes take effect constitutes acceptance of the updated Privacy Policy.

For privacy-related questions, requests, or complaints, please contact: Email: support@ediassist.ai Please include "Privacy Request" in the subject line.

This Privacy Policy describes how EdiAssist handles personal information in connection with the Services and should be read together with our Terms of Service.

If you connect Google services, including YouTube, EdiAssist only uses Google user data to provide user-requested functionality within the application. Google user data is used only for limited purposes such as: • Connecting and authenticating your Google or YouTube account • Displaying connected account information within EdiAssist • Uploading user-approved videos or related content to YouTube • Supporting the specific Google or YouTube features that you directly enable within the Services We do not use Google user data for: • Advertising • Marketing • Profiling • Unrelated analytics • Sale or transfer to data brokers or information resellers • Training generalized artificial intelligence or machine learning models EdiAssist does not transfer, sell, or use Google user data for any purpose other than providing or improving user-facing features that are directly related to the functionality requested by the user. EdiAssist's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.