DRAFT — for review, not legal advice. Finalize with counsel before relying on this.
Privacy Policy
Summit Editing — Operated by Northern Spruce Media Inc. — summitediting.co
Effective Date: [Effective date — set on publish]
Last Updated: [Effective date — set on publish]
1. Who We Are
Summit Editing ("Summit Editing," "we," "us," or "our") is a credit-based video editing service operated by Northern Spruce Media Inc., a company registered in [Jurisdiction — confirm] at [Registered address — confirm]. This Privacy Policy explains how we collect, use, store, and share your information when you use our website and services at summitediting.co.
If you have questions about this policy, contact us at info@summitediting.co.
2. Information We Collect
2.1 Account Information
When you create an account, we collect: your email address; your display name; an optional profile avatar; your account credentials (passwords are hashed; we do not store them in plaintext).
2.2 Order Information
When you submit an edit request, we collect: links to your footage or uploaded media files; edit instructions, notes, and preferences you provide for each order; your order history, including package type, add-ons selected, revision requests, and delivery status.
2.3 Payment Information
Payments are processed by Stripe, Inc. We do not receive or store your full payment card details. We retain payment metadata from Stripe, which may include the last four digits of your card, card brand, billing country, and transaction identifiers, for purposes of billing records and customer support.
2.4 Usage and Technical Data
We may collect standard technical data when you use the service, including IP address, browser type, device type, pages visited, and timestamps. This data is used to operate and maintain the service.
2.5 Waitlist Information
If you submitted your email address via the waitlist form at summitediting.co/waitlist (hosted through Fillout), that information is held by Fillout and is used only to notify you when your invitation is ready. See Section 5 for details on sub-processors.
3. How We Use Your Information
We use the information we collect to:
- create and manage your account;
- process your edit orders and deliver finished videos;
- communicate with you about your orders, account, and the service (via email from info@summitediting.co);
- process payments through Stripe;
- improve and debug the service;
- comply with legal obligations.
We do not sell your personal information. We do not use your submitted footage or edit instructions for any purpose other than delivering your requested edit.
4. Your Submitted Media
Footage you upload or link and the edited videos we deliver are stored on Supabase Storage. This media is used solely to fulfill your edit orders. We do not use your footage for any other purpose, including training AI models, without your explicit consent.
5. Sub-Processors and Third Parties
We share your data with the following third-party service providers (current sub-processors, subject to change) in order to operate the service:
- Stripe, Inc. — Payment processing — United States
- Supabase — Database, authentication, and file storage — United States
- Google / Gmail — Transactional email (from info@summitediting.co) — United States
- [Lovable / Cloudflare — confirm] — Application hosting and delivery — [Confirm]
- Fillout — Waitlist form at /waitlist — United States
Each sub-processor is bound by its own privacy policy and, where applicable, data processing agreements. We do not share your personal information with third parties for advertising or marketing purposes.
6. Cookies and Analytics
[Confirm what cookies and analytics tools Summit Editing uses — e.g., first-party session cookies only, or a specific analytics tool — and disclose them here. If no third-party analytics are in use, state that plainly.]
At minimum, Summit Editing uses session cookies necessary for authentication and core site functionality. You can disable cookies in your browser settings, but doing so may prevent you from logging in or using the service.
7. Data Retention
[Confirm your data retention policy before publishing — recommended minimums below as a starting point.]
We retain your account information and order history for as long as your account is active. If you request deletion of your account, we will delete your personal data within [confirm: e.g., 30 days] of your request, except where we are required by law to retain it (such as financial transaction records).
Submitted footage and delivered edit files are retained for [confirm: e.g., 90 days after delivery] to allow for revision rounds and re-delivery, then deleted.
8. Data Security
Your data is stored on Supabase, which provides industry-standard security including encryption at rest and in transit, row-level security, and role-based access controls. Payments are handled by Stripe, which is PCI-DSS compliant. We take reasonable technical and organizational measures to protect your data, but no system is completely secure, and we cannot guarantee absolute security.
9. International Data Transfers
Summit Editing is operated by Northern Spruce Media Inc., registered in [Jurisdiction — confirm]. Our sub-processors, including Stripe and Supabase, are based in or route data through the United States. By using the service, you acknowledge that your data may be transferred to and processed in countries outside your country of residence, including the United States, which may have different data protection laws than your jurisdiction.
10. Children
Summit Editing is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has created an account or submitted information to us, please contact us at info@summitediting.co and we will promptly delete the relevant information.
11. Your Rights
You have the right to:
- access the personal information we hold about you;
- correct inaccurate information;
- request deletion of your personal data (subject to our legal obligations to retain certain records);
- withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at info@summitediting.co. We will respond within a reasonable time. [If you serve users in the EU/UK or specific Canadian provinces, additional rights may apply — confirm with counsel.]
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of the service after changes are posted constitutes acceptance of the updated policy.
13. Contact
Northern Spruce Media Inc. — [Registered address — confirm] — info@summitediting.co