Privacy Policy

2. What Data We Collect, For What Purposes, and On What Legal Bases

3. How We Collect Your Personal Data

• Register or sign in using Google OAuth or Single Sign-On (SSO)
• Connect your Google Drive or Microsoft OneDrive account
• Upload videos, slide decks, or other content to the platform
• Fill out any forms on our website or platform (e.g., demo request form)
• Communicate with our customer support team
• Contact us via our website or other means of communication
• Use our Services

• Authentication providers (e.g., Google) — when you choose to sign in using their service
• Cloud storage providers (e.g., Google Drive, Microsoft OneDrive) — when you connect your account to import or save content
• Business partners and service providers — where relevant to providing the Services

4. Google Drive & Microsoft OneDrive Integration

• Read and download videos and slide files you select for import or generation
• Create and save output files (translated videos, slides) in folders you choose
• Edit slide files stored in your Drive through the edON.ai interface
• Browse your folder structure so you can select a destination for saved outputs

• openid — to verify your identity with Google
• userinfo.email — to retrieve your Google email address
• userinfo.profile — to retrieve your name and profile picture

• https://www.googleapis.com/auth/drive.readonly — to read and download files and folders you select for import or generation
• https://www.googleapis.com/auth/drive.file — to create, edit, and save output files in folders you choose. This scope only grants access to files that you open or create through edON.ai — we cannot access any other files in your Drive

• Files.Read — to read and download files you select for import or generation
• Files.ReadWrite — to create, edit, and save output files in folders you choose
• offline_access — to obtain a refresh token that keeps your authorization active across sessions

5. Direct Marketing

6. How We Share Your Personal Data

• Public authorities and institutions — only upon request and only when required by applicable laws, or to defend the Company's legitimate interests
• Authentication providers (e.g., Google) — solely to verify your identity during login
• Cloud storage providers (e.g., Google, Microsoft) — to enable the Drive/OneDrive integration features you have authorized
• IT and infrastructure service providers — including hosting, cloud storage, and data center providers, who process your data only on our instructions
• Legal, financial, auditing, and accounting service providers — provided only with data necessary for their services
• Third parties in connection with a business transaction — if the Company intends to enter into a sale or merger transaction or conduct legal/financial due diligence
• Other persons — with your explicit consent

7. International Data Transfers

• Transfer to a country approved by the European Commission as having an adequate level of protection
• Use of Standard Contractual Clauses (SCC) adopted by the European Commission (see here)
• Special permission obtained from a supervisory authority
• Other appropriate safeguards as indicated in the GDPR

8. How Long We Keep Your Personal Data

• It is necessary to defend against existing or threatened legal claims
• There is a suspicion of illegal activity
• It is required by applicable laws

9. Your Rights

• The right to be informed — to receive clear and transparent information about how we process your personal data
• The right to access — to request a copy of your personal data held by us
• The right to rectification — to request correction of inaccurate or incomplete data
• The right to erasure ("right to be forgotten") — to request deletion of your data when there is no longer a valid reason for us to process it
• The right to restrict processing — to request that we limit how we use your data in certain situations
• The right to data portability — to receive your data in a machine-readable format or have it transferred to another controller, where the legal basis is consent or contract
• The right to object — to object to processing based on legitimate interests, including direct marketing
• The right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• The right to lodge a complaint — with the competent supervisory authority

10. How We Protect Your Personal Data

• HTTPS/TLS encryption for all data in transit
• Encrypted storage of uploaded files and OAuth tokens
• Role-based access controls limiting internal access to personal data
• Regular security reviews and audits

11. Cookies

12. Links to Other Websites

13. Changes to This Policy