Privacy Policy

Last updated: November 2, 2026

Who we are

Aedita is operated by Wu Zitong, an individual based in China, trading as Aedita (“we”, “us”). Wu Zitong is the data controller responsible for the personal data we handle under this policy. For privacy questions or requests, email hello@aedita.com.

This policy covers aedita.com, user accounts, connected plugins, generation usage and support correspondence. The payment section applies when you buy Aedita through Paddle. Account registration does not upload your editing projects.

What we collect

Account: your email address, display name, verification status and registration time. If you use Google, we receive your Google account identifier and basic profile information, including your name and profile image. We do not request access to your Gmail messages, contacts or Drive files.
Connected plugins: when you approve a plugin connection, we store its device label, account association and connection expiry. The plugin receives a separate revocable credential; it does not receive your Google credentials. This connection does not upload your editing media.
Sign-in and security: sessions, IP addresses, browser information and rate-limit records used to protect accounts. Email codes are stored as keyed hashes, expire after 10 minutes and are single-use.
Sign-up context: the button you used, the current and first landing pages, the referring site, campaign tags (UTM), browser language and country supplied by Cloudflare. We do not store your IP address in the sign-up database.
Correspondence: your contact details and information you choose to include when you ask for help.
Technical information: our hosting provider processes connection data, such as IP address and browser information, to serve pages and protect the website.

Our website code keeps referral information in your browser’s session storage until you submit the form. It does not send us the contents of fields while you are typing. Please do not send sensitive personal information or material you are not entitled to share.

Payments through Paddle

For purchases made through Paddle, Paddle acts as reseller and Merchant of Record. Paddle collects and processes the checkout information needed to complete a purchase, such as your name, email, billing address, payment information and tax details. We do not receive or store your full card number or card security code.

Paddle may share order details with us, including your email, transaction reference, purchased plan and payment or subscription status, so we can provide access and support. Paddle is independently responsible for the personal data it processes for payments, tax, fraud prevention and billing. SeePaddle’s Privacy Policy. For a request concerning Paddle’s records, use the contact options in that policy; for Aedita’s records, contact us.

Why we use it

To create your account, authenticate you and send requested sign-in codes: performing our agreement or taking steps at your request.
To connect your editor, track generation usage and enforce plan limits: performing our agreement.
To send Aedita updates you have requested: your consent, which you can withdraw at any time.
To answer support requests and, where applicable, provide purchased access: performing our agreement or responding to your request.
To understand sign-up sources, maintain the website and prevent abuse: our legitimate interests, where that basis is available under applicable law.
To keep records required by law and respond to lawful requests: our legal obligations.

We don’t sell or rent your personal data, and we don’t share it with advertisers.

Cookies and browser storage

Our website code does not set advertising cookies or run advertising pixels or session recording. It uses session storage for the referral information described above. Sign-in uses necessary, secure cookies to keep you signed in for up to 30 days after activity and to protect the Google sign-in flow. You can end your session by signing out. Cloudflare security services and, when opened, Paddle checkout may use cookies or similar technologies for their own security and operational purposes, as explained in their privacy notices.

If we introduce optional analytics or advertising that requires consent, we will update this policy and request that consent before enabling it.

Service providers and international processing

Cloudflare hosts the website and sign-up database, provides security and routes contact email. See Cloudflare’s Privacy Policy.
Resend delivers requested sign-in codes and processes recipient addresses and delivery records. See Resend's Privacy Policy.
Google provides optional Google sign-in and the email mailbox used to handle correspondence. See Google’s Privacy Policy.
Paddle handles purchases as described above under its own privacy policy.

The operator is based in China, and our providers operate internationally. Your data may be stored or accessed outside your country, including in China, Europe and the United States, where data protection laws may differ. The providers’ notices explain their international processing and safeguards. You can contact us for information about the locations and transfer safeguards applicable to your data.

We may also disclose information where required by law or where necessary to protect legal rights. Access to personal data is limited to the purposes described in this policy.

How long we keep it

We keep account records while your account is active or until you request deletion, subject to legal and security requirements. Expired security records are periodically removed. Historical registration records are retained only as long as needed for their original purpose or applicable legal requirements. We keep support correspondence for as long as necessary to handle the request and any related dispute. Where purchases are involved, some transaction records must be retained to meet legal obligations. We delete or anonymize information when it is no longer needed. Paddle and our other providers apply their own retention rules to data they independently control.

Your rights

Depending on the law that applies to you, you may ask to access, correct, delete or obtain a copy of your data, restrict or object to its use, and withdraw consent. To make a request or stop Aedita updates, emailhello@aedita.com, preferably from the address you used to sign up. We may need to verify your identity before acting. Withdrawing consent does not affect processing already carried out lawfully. You may also complain to your local data protection authority.

California residents: we do not sell personal information or share it for cross-context behavioral advertising.

Children

Aedita is a business tool and isn’t meant for anyone under 16. We don’t knowingly collect their data.

Changes

We will update this page and its date when our practices change. Where required, we will notify you of material changes and ask for any additional consent. See also our Terms of Service andRefund Policy.