Privacy Policy
- Effective date:
- September 9, 2026
- Last reviewed against:
- Information Technology Act, 2000 (IT Act) and IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; Digital Personal Data Protection Act, 2023 (DPDP Act) and Digital Personal Data Protection Rules, 2025 (notified Nov 13, 2025, in phased enforcement)
EditMax (“EditMax,” “we,” “us,” or “our”) operates www.editmax.app and its related tools (the “Service”). This Privacy Policy explains how we collect, use, and protect your personal data under Indian law, including the DPDP Act, 2023.
1. Who This Applies To
This policy applies to all “Data Principals” (individuals whose data we process) who use the Service, wherever located, in accordance with the DPDP Act’s applicability to any processing of personal data of individuals in India, and to our own processing activities as a “Data Fiduciary” based in India.
2. Information We Collect
- Account information: name, email address, and login credentials.
- Payment information: your name, email address, billing address and payment details are collected and processed by Dodo Payments, the merchant of record for our orders, under its own Privacy Policy. We receive only what we need to run your plan (for example, the plan, amount, currency and payment status). We do not receive or store full card numbers or UPI details.
- Content you upload: video, audio, images, scripts, and files used with our tools (Video Editor, Auto Captions, Script Writer, AI Voiceover).
- Usage data: device/browser type, IP address, pages visited, and interactions, via cookies and analytics.
- Communications: messages sent to support or contact channels.
- Referral information: if you join through a referral link or enter a referral code, we record which account referred you and whether you subscribed. The person who referred you can see a masked form of your email address (for example, j•••@gmail.com), when you joined, and whether you subscribed. They cannot see your name, your full email address, or anything else about your account.
3. Legal Basis and Consent
Under the DPDP Act, we process your personal data primarily on the basis of your consent, given freely, specifically, and after being informed of the purpose. Where required, we will present a clear consent notice, in plain language, before collecting personal data, and you may withdraw consent at any time (see Section 8). Some processing (e.g., fraud prevention, legal compliance) may be carried out under “certain legitimate uses” permitted by the DPDP Act without separate consent, as applicable.
4. How We Use Your Information
- Provide, operate, and maintain the Service, including generating captions, voiceovers, scripts, and edits
- Process payments and manage subscriptions/credits
- Run the referral program, including crediting referral rewards and preventing abuse
- Improve, troubleshoot, and secure the Service
- Send transactional emails (billing, account, support)
- Send optional marketing (opt-out available anytime)
- Comply with legal obligations under Indian law
5. Processing of Your Content
To deliver its features - AI-generated captions, transcription, scripts, and voiceovers, and video export - EditMax sends the content you upload or submit to our servers and/or trusted third-party AI processing providers. We do not use your uploaded content to train third-party foundation models beyond what is necessary to deliver your requested output, and we do not sell your content.
6. Sharing and Cross-Border Transfer of Information
We do not sell your personal information. We may share data with:
- Service providers/Data Processors: hosting, analytics, and AI/API providers, bound by contract to process data only per our instructions
- Dodo Payments: the merchant of record that sells our plans and processes payments. To complete a purchase we share your name and email address with it, and it handles payment data under its own Privacy Policy.
- Legal authorities: where required by law, court order, or to protect rights and safety
- Business transfers: in a merger, acquisition, or asset sale, with notice to you
Some service providers may be located outside India. The DPDP Act permits transfer of personal data outside India except to countries specifically restricted by the Central Government; we will comply with any such restrictions as notified.
7. Data Retention
We retain personal data only as long as necessary for the purpose it was collected, or as required by law. Uploaded content is retained only as long as needed to provide the Service or as you choose to keep it, after which it is deleted or anonymized, subject to backup and legal retention requirements. We will erase personal data upon withdrawal of consent or when the purpose is no longer being served, unless retention is required by law.
8. Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access a summary of your personal data being processed
- Correct and update inaccurate or incomplete personal data
- Erase personal data that is no longer necessary for the purpose collected
- Withdraw consent at any time, as easily as it was given (withdrawal does not affect processing carried out before withdrawal)
- Grievance redressal - raise a complaint with us before approaching the Data Protection Board of India
- Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
To exercise these rights, contact us at contact@editmax.app. We will respond within a reasonable time, and in any case within the timelines prescribed under the DPDP Rules.
9. Data Security
We implement reasonable security safeguards as required under the IT Rules, 2011 and DPDP Rules, 2025, including encryption, access controls, access logging, and monitoring, to protect personal data against unauthorised access, use, or disclosure. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals as required under the DPDP Rules. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Cookies
We use cookies and similar technologies for authentication, preferences, and analytics. If you open a referral link, we set a cookie that remembers the referral code for 30 days, so the referral can be credited when you sign up. You can control cookies via your browser settings; disabling some may affect functionality.
11. Children’s Data
The Service is not directed to individuals under 18. Where we knowingly process a child’s personal data, we will obtain verifiable consent from a parent or lawful guardian, as required under the DPDP Act, and will not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified via the Service or email. Continued use after changes constitutes acceptance.
13. Governing Law
This Privacy Policy is governed by the laws of India, including the Information Technology Act, 2000, the IT Rules, 2011, and the Digital Personal Data Protection Act, 2023, along with rules notified thereunder.
14. Contact Us / Grievances
For privacy questions, data rights requests, or grievances:
- Email: contact@editmax.app
- Website: www.editmax.app
If your grievance is not resolved satisfactorily, you may approach the Data Protection Board of India under the DPDP Act, 2023.
Questions about this page?
Write to contact@editmax.app. The other documents are Terms, Privacy and Refunds.