Privacy Policy
This explains what we collect, why, who else sees it and what you can ask us to do about it. The controller for the data described here is JESSICA PAIS SOARES, CNPJ 57.120.201/0001-40 (Brazil), Rua Aracaju, 58, Vila Terezinha, São José dos Campos, SP, 12209-695, Brazil. You can reach us at support@evaedit.com.
1. The short version
- Your videos stay on your computer. We never receive them.
- Transcription is your choice of engine. The local engine runs on your own machine and sends nothing anywhere. If you choose AssemblyAI, EVA extracts the audio only and sends it there using your own key. The picture is never uploaded either way.
- We hold what is needed to run a licence: your email, your plan, how many videos you have used, and which computers are activated.
- Payment details never reach us. Paddle handles the transaction.
- This website sets no analytics cookies, loads no trackers and makes no third party requests. Fonts are served from this site.
2. What we collect, and why
| Data | Why we hold it |
|---|---|
| Email address | To issue your licence, send your key, warn you about your allowance and answer support. |
| Order, subscription and customer identifiers from Paddle | To connect a payment to a licence, and to react to a renewal, cancellation, refund or chargeback. |
| Plan, licence state and billing period | To know what you are entitled to and until when. |
| Device activation records | To enforce the two computer limit and to release a machine when you replace it. |
| Video allowance usage | To count videos against your plan and to send the 80% and 90% warnings. |
| Support messages you send us | To answer you and to keep a record of the case. |
| Diagnostic package, only when you choose to send one | To reproduce a failure. It carries no API keys and no personal data. |
| Country and language, when provided | To bill correctly and to answer in the right language. |
We do not build a marketing database, we do not buy contact lists, and we do not add anyone who has not purchased or requested a licence.
3. What we do not collect
- Your video files, your takes and your finished exports.
- The transcripts, captions and headlines produced during editing. They are written to your disk.
- Your card number or any payment credential.
- Your AssemblyAI key, if you use one. It is stored locally on your machine.
- The audio processed by the local engine. It is transcribed on your machine and never sent to us or anyone.
- Faces, voices or any biometric data.
4. Where your content actually goes
4.1 On your computer
Silence detection, cutting, joining, transitions, zoom, caption rendering, the headline and the final encode all run locally. Temporary working files are written to a working folder on your disk and can be cleared from the app at any time using Clear cache.
If you choose the local transcription engine, transcription runs here too. The first time you use it, EVA downloads a speech model to your computer; after that it works offline. The audio, the model and the transcript stay on your disk, and none of it is sent to us or to any third party. The model can be removed by uninstalling EVA or clearing its data folder.
4.2 AssemblyAI, only if you choose it
AssemblyAI is optional. You select your transcription engine the first time you open EVA and can change it in Settings. If you select AssemblyAI, EVA extracts the audio track from your takes and uploads it to AssemblyAI through the API key you supplied. The video is not uploaded.
That request is made with your own AssemblyAI account, so your relationship for that processing is with AssemblyAI directly, under their terms and their privacy policy. We do not receive the audio and we do not receive the transcript. If you do not want audio leaving your machine, choose the local engine: you keep transcription and captions, entirely on your computer.
4.3 Paddle, for the purchase
Paddle.com Market Ltd is the merchant of record. They collect and process your payment details and your billing information as an independent controller for their own operation, and they pass us the identifiers and the billing events we need to keep your licence in the right state. We never see your card details.
5. Legal basis
- Performance of a contract: issuing and maintaining your licence, counting your allowance, and providing support.
- Legal obligation: keeping tax, accounting and transaction records.
- Legitimate interest: preventing fraud, abuse and licence sharing, and keeping the service secure.
- Consent: anything optional, such as sending a diagnostic package, which only happens when you choose to.
6. Where the data is held
Licence and account data is held in a managed database hosted in [HOSTING REGION], encrypted in transit and at rest. Access is limited to the people who need it to operate the service, and it is logged.
Because Paddle, AssemblyAI and our hosting provider operate internationally, data may be processed outside your country. Those transfers rely on the safeguards in our agreements with each of them.
7. How long we keep it
- Licence and account records: while your licence is active, and afterwards for as long as tax and accounting law requires.
- Support messages: up to [RETENTION: SUPPORT] after the case is closed.
- Diagnostic packages: up to [RETENTION: DIAGNOSTICS], then deleted.
- Operational event logs: a short window sufficient for reconciliation and incident response, then deleted.
8. Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to a particular use. You can also ask for it in a portable format, and you can complain to your local data protection authority.
Write to support@evaedit.com and we will answer within the period the law that applies to you sets. Note that deleting the records that prove your licence will end your ability to use EVA, and that we cannot delete what we are legally required to keep.
For data held by Paddle about your purchase, and by AssemblyAI about your transcription usage, those requests go to them.
9. Cookies and this website
This site sets no analytics cookies, embeds no tracking pixel, and loads nothing from a third party host. Fonts, styles, scripts and images are all served from this site. Nothing here follows you anywhere.
Paddle's checkout, which opens when you buy, is Paddle's own environment and follows Paddle's cookie and privacy notices.
10. Security
Data is encrypted in transit and at rest. Credentials are kept out of the desktop application, out of source code and out of logs. Logs use an allow list and do not record raw payloads, tokens, documents or phone numbers. Access follows least privilege and leaves an audit trail. Backups are encrypted and restoration is rehearsed.
11. Children
EVA is a professional tool and is not directed at children. We do not knowingly hold data about anyone under 16. If you believe we do, write to us and we will delete it.
12. Changes
If we change this policy in a material way, we will notify active customers by email before it takes effect. The version in force is the one published here, with its date.
13. Contact
JESSICA PAIS SOARES
Rua Aracaju, 58, Vila Terezinha, São José dos Campos, SP, 12209-695, Brazil
support@evaedit.com