Privacy Policy

This policy explains how Edit Bay Tools LLC handles personal information. It applies to our websites, our accounts system and our software.

1. What we collect

Information you give us

• Name — so emails and receipts are not addressed to a stranger.
• Email address — your sign-in name. We also send a one-time code to it to confirm the account, and use it for receipts, security notices and password resets.
• Mobile number — optional. Only so support can reach you about your account. We do not confirm it and we never text you.
• Payment details — handled entirely by our payment processor. Card numbers are entered on the processor's own form and never pass through our systems. We keep only what the processor tells us: the amount and status of each charge, and a scrambled, one-way fingerprint of the card that lets us tell whether the same card has already been used for a free trial. We do not store card numbers, expiry dates or the last four digits.
• Bug reports you choose to send from the software — your description of the problem, the version of the software and operating system, and, if you include them, the address that failed and the software's recent log lines. Nothing is sent unless you press the button.
• Anything you write to support.

Information collected automatically

• Device information — an identifier for each machine you sign in from, its operating system, and the version of our software, so that the session limit works and so we know which builds are in use.
• IP address and sign-in times — for security, rate limiting and fraud prevention. Failed sign-in attempts are recorded.
• Basic website analytics from our infrastructure provider, in aggregate.

What we do not collect

2. Why we use it

We use personal information to provide the Service and for no unrelated purpose:

• to create and run your account and check that you have an active plan;
• to take payment and send receipts;
• to confirm your identity, enforce one-trial-per-person, and detect abuse;
• to send service messages you need — trial reminders, renewal notices, security alerts, password resets, and important product changes;
• to provide support when you ask for it;
• to comply with tax, accounting and other legal obligations.

We do not send marketing email or text messages unless you have separately asked for them, and you can stop them at any time.

3. How your password is stored

Your password is never stored. When you set one, it is combined with a secret key held only on our servers and then run through a slow one-way hashing function; only that result is saved. There is no screen, no export and no database query — for us or for anybody who steals the database — that reveals a password.

This means we genuinely cannot tell you what your password is. If you forget it, we can only send you a link to set a new one.

4. How your other details are stored

Names, email addresses and phone numbers are encrypted before they are written to our database, using a key held separately from the data. Where we need to look something up — to find your account by email, or to check whether a number has already had a trial — we store a keyed one-way fingerprint of the value rather than searching the plain text.

Our infrastructure is provided by Cloudflare, and the database is stored in the United States.

5. Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share only what is necessary, with:

• Our payment processor (Stripe), to take payment and handle billing;
• Our infrastructure provider (Cloudflare), which hosts the servers and the database, and which delivers our email — confirmation codes, receipts and account notices;
• Professional advisers — an accountant or lawyer — where needed;
• Law enforcement or a court, where we are legally required to. We will tell you unless we are legally prohibited from doing so.

If the business is ever sold, account information would transfer with it, and you would be told before that happened.

6. How long we keep it

• Account details — while your account exists.
• Billing and tax records — seven years, because tax law requires it. This is the one category we keep after an account is deleted.
• Sign-in and security logs — 90 days.
• Verification codes and reset links — minutes to an hour, then deleted.
• Support emails — two years.

When you delete your account, we remove the identifying information and keep only an anonymous record that the account existed, plus the billing records above.

7. Your choices and rights

You can see your name, email and phone on your account page, and change your password there. To correct your name, email or phone, email admin@editbaytools.com from the address on the account and we will update it.

To get a copy of your data, or to delete your account, email admin@editbaytools.com from the address on the account. We will confirm it is you, then act within 30 days.

Depending on where you live you may have further rights — to correct information, to object to or restrict certain processing, to portability, and to complain to a supervisory authority. California residents have the rights described in the CCPA, including the right to know, delete, correct, and to opt out of sale or sharing; as above, we do neither. We will never charge you more or give you a worse service for exercising any of these rights.

8. Cookies and local storage

We do not use advertising or tracking cookies. The website stores a single sign-in token in your browser's local storage so that you stay signed in between visits, and occasionally a short-lived note about what you were doing. Clearing your browser data signs you out and removes both.

9. Children

The Service is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, email admin@editbaytools.com and we will delete it.

10. Security

We use encryption in transit and at rest, keyed hashing for identifiers, strict rate limits, and two-factor authentication on administrative access. No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the relevant authorities as the law requires, without unnecessary delay.

11. Changes

If we change this policy materially, we will email you and post a notice before it takes effect. The version and date at the top of this page always tell you which version you are reading.

12. Contact

Privacy questions, data requests and deletion requests: admin@editbaytools.com