This policy explains what information Coedit ("Coedit," "we," "us") collects through our website and app (together, the "Service"), how we use it, who we share it with, and the choices and rights you have. By using the Service, you agree to this policy.
Information we collect
- Account information. When you sign up, our authentication provider collects your name and email address, and, if you sign in with a third party, a basic identifier from that provider. You need an account to keep and edit a project; you do not need one to view or comment on a shared link, or to publish a temporary preview.
- Content you create. The pages you publish or upload, and the comments, suggestions, version history, and assets you add. We store this so we can host it, show it to the people you share with, and let you edit and roll it back.
- Temporary previews. If you publish a page from one of our articles without an account, we host that page so its link works, exactly as we would for any published project. The preview and its link stop working 24 hours after you publish, and the stored copy is removed by our next daily cleanup, unless you create an account and keep it, which turns it into an ordinary project. We do not link a preview to you unless you keep it.
- Collaboration information. Records of who edited a project through a share link (a display name and timestamps) and the share links you create, so the right people can find and reopen a project.
- Guest activity. If you view or comment on a shared link without an account, we process the comment you write and the display name you choose. You can comment anonymously.
- Technical and security data. Basic request information needed to run and protect the Service. To rate-limit and prevent abuse, we store a one-way salted hash of your IP address, never the raw address. We also scan published content for high-risk abuse (such as phishing pages) and keep abuse reports and moderation records.
- Usage analytics and diagnostics. Privacy-respecting counts, such as how many times a shared project has been viewed (aggregated per project per day, not tied to a personal profile) and whether help articles were rated helpful. We also use PostHog, a product analytics service, to understand how the Service is used and to find and fix problems: page views, product actions (for example creating a project or leaving a comment), interaction events such as clicks, errors that occur in your browser while using the app, and replays of how the app's screens are used. Replays are masked: everything you type is hidden, and the content of published projects is blocked from capture, so they show us where the app breaks, not what you wrote or made. Analytics is tied to your account when you are signed in and anonymous otherwise. We never use analytics for advertising, and our analytics honors your browser's Do Not Track setting.
- Communications. Messages you send us, for example by email.
We previously ran a waitlist and may still hold email addresses submitted to it; you can ask us to delete them at any time.
Cookies
We use cookies and similar technologies that are needed to sign you in and keep the Service secure, set by our authentication provider. Our analytics does not set cookies; it keeps a random identifier in your browser's local storage. We do not use advertising or cross-site tracking cookies.
How we use your information
- To provide the Service: host and serve your projects, sync edits, and manage comments, versions, and sharing.
- To authenticate you and keep your account secure.
- To protect the Service and other users: rate limiting, content scanning, moderation, and preventing abuse.
- To improve the Service and understand which features and help articles work.
- To communicate with you about the Service and, where you have asked or the law allows, product updates.
We do not sell your personal information.
Sharing and public content
Coedit is a sharing tool. When you create a share link, the project and its comments are visible to anyone with that link, according to the role you set. Treat shared projects as public unless you use a restricted link, and do not put confidential information into a project you share. Your edits and comments are visible to others who can access the project.
Who we share information with
We share information only with the service providers that help us run the Service, under their own data-protection terms, and only as needed to operate it. These include:
- Clerk, for account authentication.
- Neon, for our database.
- Vercel, for hosting the site and app.
- Cloudflare, for the real-time collaboration host and network services.
- PostHog, for product analytics, so we can understand how the Service is used and improve it.
- Anthropic, only if you use a Coedit-run AI feature, to generate the suggestion you asked for.
- Paddle, our payment provider and merchant of record, if you buy a paid plan, to process your payment and subscription, issue invoices and refunds, and handle applicable sales tax. Paddle receives the billing details you enter at checkout under its own privacy terms.
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the public. If Coedit is involved in a merger or acquisition, information may be transferred as part of that transaction.
AI features
If you use a Coedit-run AI feature, the content you submit for that action is sent to our AI provider to produce the result and is not used by us to train models. If you connect your own model or your own agent through our CLI or MCP tools, that content goes to the provider you chose, under their terms, not ours.
International transfers
We and our providers may process your information in countries other than where you live. Where required, we rely on appropriate safeguards for those transfers.
How long we keep it
We keep your account and content while your account is active or until you delete them. When you delete a project, we remove its associated comments, versions, snapshots, and share links; when you delete your account, we remove your account information. Abuse-prevention and moderation data are kept only as long as needed for that purpose, and routine backups age out in the ordinary course. Some information may be retained where the law requires it.
Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can delete your projects and your account at any time in the app, or email us and we will help. To exercise any of these rights, contact hello@coeditapp.com. You also have the right to complain to your local data-protection authority.
Security
We take reasonable measures to protect your information, including running user content in a sandboxed, cross-origin frame so it cannot reach your Coedit session. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Keep your own copies of anything important.
Children
The Service is not directed to children who are under the age required to consent to processing of their personal data where they live. If you believe a child has given us personal information, contact us and we will delete it.
Changes
We may update this policy as the product grows. When we make material changes, we will update the date above and, where appropriate, give notice.
Contact
Questions about privacy, or a request about your data? Email hello@coeditapp.com.