Privacy Policy.

Effective date: 31 August 2026 · Last updated: 31 August 2026

1. Who we are

Editlock is operated by a sole proprietorship owned by Suvajit Sarkar, based in Bongaon, North 24 Parganas, West Bengal, India. For the purpose of India's Digital Personal Data Protection Act, 2023 (DPDP), we are the Data Fiduciary for the personal data described here. This policy covers editlock.io and the app at app.editlock.io.

2. What we collect

• Account data — your name, email address, and a securely hashed password.
• Content you upload — your media files, along with the comments, annotations, and approvals made on them.
• Usage & billing metadata — plan, storage used, activity needed to run and secure the service, and invoices.
• Payment metadata — handled by our payment partner Razorpay. We receive confirmation and reference details; we do not store your full card or bank-account numbers.
• Technical data — basic logs and an essential authentication cookie needed to keep you signed in.

3. How we use it & our lawful basis

We use your data to provide the service (performing our contract with you), to process payments, to secure and maintain the platform, to send you service and billing notices, and to provide support. Optional communications are sent only on your consent, which you can withdraw at any time.

4. We do not sell or train on your content

We do not sell your personal data or your content to anyone, and we do not use your uploaded content to train machine-learning models.

5. Who we share data with

We share data only with the service providers (Data Processors) needed to run Editlock, under appropriate safeguards:

• Cloudflare — hosting, storage, and content delivery.
• Razorpay — payment processing.
• Brevo — transactional and notification email.

We may also disclose data where required by law or to protect our rights, users, or the security of the service. Your content is otherwise visible only to the people you invite.

6. Where your data is stored

Your content and account data are hosted on Cloudflare's infrastructure. Some processing may take place outside India through the providers listed above; where it does, we rely on their contractual and technical safeguards to protect your data.

7. How long we keep it

We keep your content while your plan is active and for the retention windows set out in our Refunds & Cancellation Policy after cancellation or non-payment, after which it is removed. Account records may be kept for as long as needed to meet legal, tax, or accounting obligations.

8. Your rights

Under the DPDP Act you can ask us to give you access to your personal data, correct or complete it, or erase it; you can withdraw consent for optional processing; and you can nominate another person to exercise your rights in the event of death or incapacity. To make a request, write to founder@editlock.io. We will respond within the timelines required by law.

9. Cookies

Inside the app we use a single essential cookie to keep you signed in. On our website (editlock.io) we use Google Analytics (GA4), which sets analytics cookies only after you accept via our cookie banner — you can accept, reject, or change your choice at any time. We do not use advertising cookies. See our Cookie Policy for details.

10. Children

Editlock is a business tool intended for users aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 18.

11. Security

We protect your data with encryption in transit, hashed passwords, and access controls. No system is perfectly secure, but we work to protect your data and will notify affected users and the authorities as required if a reportable breach occurs.

12. Grievance Officer

In line with the DPDP Act and the Information Technology rules, our Grievance Officer is Suvajit Sarkar, reachable at founder@editlock.io. We aim to acknowledge grievances quickly and resolve them within the timelines set by law.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date above and, where appropriate, notified to you.

14. Contact

Privacy questions: founder@editlock.io. General support: support@editlock.io. See our Contact page for full details.