Privacy Policy

Cherry Edits ("we," "us," "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website at cherryedits.ai and our AI-powered manuscript editing services (collectively, the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Name
Email address
Password (stored as a one-way cryptographic hash; we never store plaintext passwords)
Google account identifier (if you sign in via Google OAuth)

1.2 Manuscript Content

When you use the Service, you upload manuscripts and related content. This content is processed to provide editing services and is stored on our servers to enable the Service features (viewing results, re-running edits, etc.).

1.3 API Keys

If you provide your own API key (e.g., Anthropic, OpenRouter), it is encrypted at rest using industry-standard encryption before storage. We do not store API keys in plaintext.

1.4 Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or full payment details on our servers. We may store your Stripe customer ID and subscription status to manage your account.

1.5 Usage Data

We automatically collect certain information when you use the Service, including:

IP address (for rate limiting and abuse prevention)
Pages visited and features used
Editing pipeline activity (stages run, processing times, costs)
Session timestamps

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process your manuscripts through AI editing pipelines
Manage your account, billing, and subscriptions
Communicate with you about your account, service updates, or support requests
Enforce our Terms of Service and protect against abuse
Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

3.1 Third-Party AI Providers

Your manuscript content is sent to third-party AI providers (e.g., Anthropic, OpenRouter) for processing. This is necessary to provide the editing service. These providers have their own privacy policies and data handling practices. We encourage you to review:

Anthropic's Privacy Policy and Usage Policy
OpenRouter's Privacy Policy (if applicable to your plan)

We do not control how these third-party providers handle data sent through their APIs. Under most commercial API terms, providers do not use API inputs to train their models, but you should verify this independently.

3.2 Payment Processor

Billing information is shared with Stripe for payment processing. Stripe's privacy policy governs their handling of your payment data.

3.3 Legal Requirements

We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. Data Storage and Security

We implement reasonable administrative, technical, and physical safeguards to protect your information, including:

Encryption of API keys at rest
Cryptographic password hashing (bcrypt)
HTTPS encryption for all data in transit
CSRF protection and secure session management
Rate limiting on sensitive endpoints
Access controls and ownership verification on all resources

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and API keys.

5. Data Retention

We retain your account information and manuscript data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us. Upon account deletion:

Your account information will be deleted
Your uploaded manuscripts and project data will be deleted
Some data may be retained as required by law or for legitimate business purposes (e.g., billing records, abuse prevention)

We recommend maintaining your own copies of all manuscripts uploaded to the Service.

6. Your Manuscripts

We do not use your manuscripts to train AI models. Your content is processed solely to provide the Service to you. We do not read, review, or access your manuscripts except as technically necessary to operate the Service or as required by law.

You should be aware that manuscripts are sent to third-party AI providers for processing. While commercial API agreements typically prohibit providers from training on API data, we cannot guarantee the practices of third-party providers. See Section 3.1.

7. Cookies and Session Data

We use a session cookie to maintain your authenticated state. This cookie is:

HTTP-only (not accessible to JavaScript)
Secure (transmitted only over HTTPS)
SameSite strict (not sent with cross-origin requests)

We do not use third-party tracking cookies, advertising cookies, or analytics services that track you across other websites.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

9. International Data Transfers

Your information may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to these locations, which may have different data protection laws than your jurisdiction.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your information
Object to or restrict certain processing of your information
Request a portable copy of your information

To exercise any of these rights, please contact us at support@cherryedits.ai. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, please contact us at support@cherryedits.ai.