Privacy Policy
Last updated: 23 October 2026
1. Who we are
Eddit.ai is operated by AVR Investment Group Ltd, company number 17379977, 4 The Boulevard, Crawley, RH10 1XX, United Kingdom (“Eddit”, “we”). We are the controller of the personal data about our users described below. For the people who appear in footage you upload for clients, you are the controller and we are your processor. Section 5 of our Terms of Service explains how we handle footage in every case.
Questions about privacy: support@eddit.ai. General enquiries: hello@eddit.ai.
2. What we collect and why
| Data | Where it comes from | Why we use it | Legal basis |
|---|---|---|---|
| Email address; name and profile picture if you sign in with Google | You, when you sign in with an email link, or your Google account when you sign in with Google | To create your account, sign you in and contact you about the Service | Contract |
| Footage you upload or import, and the films, timelines and analysis made from it | You, or your Google Drive or Dropbox | To produce your edits | Contract (we act as your processor) |
| Google Drive and Dropbox access tokens | You, when you connect a storage account | To import the folders you choose, read-only | Contract |
| Subscription, credit and invoice records | Stripe and the Service | To bill you and keep accounting records | Contract; legal obligation |
| Messages to our support chat | You | To answer your questions and pass unresolved issues to our team | Contract; legitimate interests |
| Technical logs: IP address, request times, errors | Your browser | To keep the Service secure and fix problems | Legitimate interests |
| Usage statistics: projects, storage used, credits spent | The Service | To run and improve the Service and plan capacity | Legitimate interests |
We do not sell personal data, use it for advertising, or use your footage to train AI models.
3. Who processes data for us
We use these service providers. Each processes data only on our instructions and under a data processing agreement.
| Provider | What they do for us | Data involved | Location |
|---|---|---|---|
| Amazon Web Services | Hosting, storage, database, sending emails | All data described above | United Kingdom (London) |
| Google (Gemini API) | AI analysis of still frames from footage; replies in the support chat | Still frames; support chat messages | United States and other Google locations |
| Google (Sign-In) | Signing you in | Name, email address, profile picture | United States and other Google locations |
| Stripe | Taking payments and managing subscriptions | Name, email address, billing and card details | United States and EU |
| Google Drive, Dropbox | Importing footage, only if you connect them | The folders you choose | United States and other provider locations |
Where data goes outside the UK, it is protected by the UK’s adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework) or by the UK International Data Transfer Addendum to the standard contractual clauses.
Google processes frames and chat messages sent to the Gemini API under its paid service terms, which do not allow Google to use them to improve its products.
4. How long we keep data
| Data | How long |
|---|---|
| Raw footage you upload or import | Deleted automatically 24 hours after the edit is delivered |
| Edited films, XML timelines and project records | Until you delete the project or close your account |
| Account details | Until you close your account. If you do not sign in for 12 months, we email you, and delete the account 30 days later unless you sign in |
| Storage access tokens | Until you disconnect the storage account or close your Eddit account |
| Invoices and payment records | 6 years, as UK tax law requires |
| Support conversations passed to our team | 12 months |
| Technical logs | 30 days |
You can delete a project at any time with the Delete button. This removes its footage, analysis, films, timelines and records. Copies in backups are removed within 30 days.
5. Your rights
Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another service. Email support@eddit.ai and we will reply within one month.
To close your account and delete all your data, email support@eddit.ai from the email address of your account.
If you appear in footage a videographer uploaded, please contact that videographer: they decide how the footage is used. We will help them answer your request.
You can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to deal with your concern first.
6. Your Google Drive and Dropbox
We ask only for read-only access: Google Drive (drive.readonly) and Dropbox (files.content.read). We use it only to list and download the folders you choose to import. We never change or delete anything in your storage.
You can disconnect a storage account on your Account page, or revoke access at myaccount.google.com/permissions or in Dropbox under Settings, Connected apps.
Eddit’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
7. Security
Data is stored in Amazon Web Services in London and encrypted at rest and in transit. Access to production systems is limited to the people who run the Service and is protected by single sign-on.
8. Cookies
We set one essential cookie that keeps you signed in. It is HttpOnly and cannot be read by other sites. We do not use advertising or analytics cookies. Stripe sets its own cookies on its payment pages to prevent fraud.
9. Children
The Service is not intended for anyone under 18.
10. Changes
We will post any change to this policy here and email you about important changes before they take effect.