This policy explains how Edgebook LLC, a Wyoming limited liability company (“Edgebook,” “we,” “us”), collects, uses, and shares information when you use the Edgebook application and websites (the “Service”). Edgebook is a research workspace: the heart of the Service is content you choose to put in it, so this policy is specific about what happens to that content. It should be read together with our Terms of Service.
The short version: your research is yours. We use your data to run the product you signed up for — nothing else. We do not sell personal information, we do not run advertising or tracking cookies, and neither we nor our AI providers train models on your content.
1. Information we collect
Account information
- Name and email address, and a password (stored only as a secure hash by our authentication provider — we never see or store it in plain text).
- Workspace and edgebook names, team membership and roles, and preferences you set in the app.
- When you accept our Terms at signup, we record the version accepted and a timestamp.
Research content you provide
- Notes, theses, tags, workspaces, and everything you write in the app.
- Source material you submit for note generation: pasted text, links (we fetch the page content server-side), and uploaded files (PDF, Word, PowerPoint, Markdown, text, transcript files). Uploaded files are parsed in memory and are not retained — we keep only the text we extract and the note generated from it, never the file itself.
- Emails you forward to your private Edgebook address, including the sender, subject, body, and attachments (attachments are parsed in memory like uploads, not stored as files). We keep routing metadata (such as the message ID) to de-duplicate and audit ingestion.
- Notes you import from other tools (for example an Evernote or OneNote export) — processed the same way: text in, file discarded.
- To power search and question-answering, we compute and store vector embeddings (numeric representations) of your notes and theses in our database. They are deleted when the underlying content is deleted.
Billing information
Payments are processed by Stripe. Your card details go to Stripe, not to us — we store your plan, subscription status, Stripe customer and subscription identifiers, and a ledger of credits and top-ups.
Usage and technical information
- Records of AI actions (which feature ran, the model used, token counts, estimated cost, latency) tied to your account and workspace — this is how credit metering, fair use, and abuse prevention work.
- Logs of emails the Service sends for you (shares, invitations) and messages you send us (feedback, support, the public contact form — for which we store a hashed form of the sender’s IP address purely for rate limiting).
- Standard server logs and authentication events from our infrastructure providers.
- Cookies: we use only essential cookies — the session cookies that keep you signed in. No advertising or cross-site tracking cookies. We collect anonymous, cookie-free page performance metrics (Vercel Speed Insights) to keep the app fast.
2. How we use information
- To provide the Service: storing and organizing your research, generating notes and answers you request, syncing across your devices and teams, and sending transactional email (confirmation codes, invitations, notes you choose to share).
- To meter usage, bill subscriptions, and enforce plan limits and fair use.
- To secure the Service: authentication, tenant isolation, rate limiting, abuse and anomaly detection.
- To respond when you contact us for support or with feedback.
- To improve the Service using aggregate usage patterns (for example, which features are used and what they cost to serve) — not the substance of your research.
- To comply with law.
We do not sell or rent personal information, we do not share it for cross-context behavioral advertising, and we do not use your research content for marketing.
3. How AI processing works
- When you invoke an AI feature — generating a note from a source, asking a question, running a thesis check — the relevant content is sent to our AI providers to produce the result: OpenAI (text generation and analysis), Voyage AI (embeddings), and Anthropic (an alternative generation provider we can route to).
- These providers process your content as our service providers under their business/API terms: they do not use it to train their models, and we do not train models on it either.
- AI features run only on content you provide or request — your notes are not shared across customers, and answers are scoped to your own workspaces.
- While an AI generation job is queued, the source text is held by our job-queue provider and in our database; it is cleared once the note is produced.
4. When information is shared
- Your team: content in a shared edgebook is visible to that edgebook’s members according to their roles. Your personal edgebook is private to you.
- At your direction: for example, when you email a note to someone or send an invitation.
- Service providers (subprocessors): the companies listed in Section 5, each engaged under contract to process data only to provide their service to us.
- Legal: if required by law or legal process, or to protect the rights, safety, or security of Edgebook, our users, or the public — we will resist overbroad demands and, where lawful and practicable, tell you before disclosing your content.
- Business transfers: in a merger, acquisition, or asset sale, data may transfer as part of the transaction, subject to this policy (or one at least as protective, with notice of material changes).
5. Our service providers
| Provider | What it does | What it processes |
|---|---|---|
| Supabase (on AWS) | Database, authentication, realtime — United States | All account data and research content |
| Vercel | Application hosting, performance metrics — United States | Traffic to the app; anonymous performance data |
| OpenAI | AI text generation and analysis | Content involved in the AI features you invoke |
| Anthropic | Alternative AI generation provider | Content involved in the AI features you invoke |
| Voyage AI | Embeddings for search and retrieval | Text of notes and theses being indexed |
| Stripe | Payments and subscriptions | Payment details, billing contact, transaction history |
| Postmark (ActiveCampaign) | Transactional email, inbound email ingestion | Emails we send for you; emails you forward in |
| Upstash | Background job queue | Job payloads, including source text while a job is pending |
Public-data lookups (SEC EDGAR, earnings-transcript and security-identifier APIs) receive only the ticker or search term being looked up — never your research content. We will update this list as providers change; materially different sharing will come with an update to this policy.
6. Data retention
- Research content is kept until you delete it or your account is deleted. Deleting a note or thesis also deletes its embeddings.
- Uploaded and emailed files are never stored — only extracted text and the resulting notes. Pending-generation source text is cleared when the job completes.
- When your account is closed, we delete your content within 30 days of your deletion request (backups purge on a rolling basis thereafter).
- We retain billing records, usage/metering records, and email logs as needed for accounting, security, and legal compliance.
- Cached copies of public documents (for example SEC filings) are infrastructure caches of public data, not your content.
7. Security
Tenant isolation is enforced at the database layer (row-level security), data is encrypted in transit (TLS) and at rest by our infrastructure providers, access to production systems is restricted, and inbound email addresses use secret tokens you can rotate at any time. No system is perfectly secure — if you find a vulnerability, please report it to admin@edgebook.app. If a breach affects your data, we will notify you as required by law.
8. Your rights and choices
- You can view, edit, and delete your research content directly in the app, and update account details in Settings.
- You can request a full export of your content, account deletion, a copy of the personal data we hold about you, or a correction, by emailing support@edgebook.app. We respond within 30 days. (Max-plan edgebooks also have a self-serve full archive export in Settings.)
- Transactional email (confirmation codes, billing notices) is part of operating your account; we do not send marketing email lists you would need to opt out of.
If you are in the EEA, UK, or Switzerland
Edgebook LLC is the controller of your account data. We process personal data to perform our contract with you (providing the Service), for our legitimate interests (securing and improving the Service, preventing abuse), to comply with legal obligations, and with your consent where required. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to complain to your supervisory authority. Data is processed in the United States; where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy framework implemented by our providers.
If you are a California resident
We collect the categories described in Section 1 (identifiers, commercial information, internet activity, and the content you provide) for the purposes in Section 2. We do not sell personal information or share it for cross-context behavioral advertising, and we do not use sensitive personal information beyond providing the Service. You have rights to know, delete, correct, and not be discriminated against for exercising them — use the contact in this section and we will verify and honor your request, including if made through an authorized agent.
9. Other people’s data in your content
Research content often contains information about other people — the sender of a forwarded email, participants named in a transcript, authors of a report. That information enters Edgebook at your direction and is processed as part of your content. You are responsible for having the right to use it; we use it only to provide the Service to you.
10. Children
The Service is for professional use by adults. It is not directed to anyone under 18, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this policy
We will post any changes here and update the effective date. If a change is material, we will notify you by email or an in-app notice before it takes effect.
12. Contact
Edgebook LLC, a Wyoming limited liability company.
Mail: 7901 4th St N #34854, St. Petersburg, FL 33702
Privacy questions and requests: admin@edgebook.app · Support: support@edgebook.app