UploadEditor
Privacy Policy
Privacy and Security
UploadEditor’s privacy policy explains what minimal data is collected, how uploaded files are processed securely, and that data is only used to provide core features. It also clarifies that no personal data is sold or misused and users have full control over their data.
More details
We collect only the information needed to create accounts, verify access, activate plans, and provide support. That includes login and subscription data, plus the minimum details required to run the service.
Files are processed securely so UploadEditor can edit or optimize them during the upload flow. We use them only to perform the requested feature and to keep the service working correctly for your account.
We do not sell, rent, or share your personal data with advertisers, other users, or unrelated third parties. Your email address is stored only as your account username and identifier for sign-in, password setup, account notices, billing records, and support. It is not used for unrelated marketing. We disclose the minimum information to essential providers, such as payment or email-delivery services, only when needed to provide the feature you requested or when required by law.
Your email belongs to your account and is kept confidential. UploadEditor does not make it public or provide it to another customer. We use it to identify your account, protect access, send requested security or service messages, and connect your support requests to you. You can contact Support to ask what account information is held or request deletion, subject to records we must retain for security, billing, fraud prevention, or legal compliance.
You can review your dashboard for plans, keys, rules, and payment history, manage exclusions, and contact support whenever you need help. Your account remains under your control.
We protect access with authentication, session handling, route checks, and server-side validation. These controls are meant to reduce unauthorized use and keep account activity secure.
UploadEditor follows security principles commonly used in SOC-style programs, including least-privilege access, separation of account and service responsibilities, change review, monitoring, and secure handling of production credentials. This statement does not claim that UploadEditor currently holds a SOC 2 certification.
Website connections use HTTPS in production. Passwords are stored as protected password hashes rather than plain text. Session and password-reset tokens are stored in protected form, and private service credentials are kept on the backend rather than in the website or extension.
Payments are handled through the configured payment provider. UploadEditor stores the transaction status and payment references needed for reconciliation, but does not store full card numbers or payment PINs. Email delivery and infrastructure providers receive only the information needed to provide their service.
Temporary files are used to complete the requested processing and are cleaned up after the operation when possible. Account, license, payment, support, and security records are retained only as long as needed for service operation, fraud prevention, legal obligations, and dispute handling. You can request account-data review or deletion through Support, subject to required records.
We investigate suspected security incidents, limit access when appropriate, preserve relevant evidence, and take steps to restore safe service. If an incident materially affects personal data, we will provide notice when required by applicable law.
You may review your account, plans, keys, payment history, support requests, rules, and excluded sites from the dashboard. You may stop using the extension, request help with your data, or contact Support about an access or privacy concern.
UploadEditor’s goal is simple: use the smallest amount of data needed, keep it secure, and use it only to provide the features you signed up for.