Privacy Policy

This Privacy Policy explains what personal data RevOps Labs s.r.o. ("Editbar", "we", "us") collects through the hosted Service at editbar.online, why, and what rights you have over it. It doesn't cover a self-hosted install of the open-source core, which runs entirely on infrastructure you control and never sends data to us.

1. Who is responsible for your data

RevOps Labs s.r.o., Hlaváčkova 1334/19, Košíře, 150 00 Praha 5, Czech Republic (Registered with the Municipal Court in Prague, Section C, Insert 405326 · Company ID (IČO) 21705534 · VAT ID CZ21705534), is the data controller for personal data processed through the Service. We're a small team and haven't appointed a separate data protection officer — reach us directly at hello@editbar.online for anything privacy-related.

2. What we collect

• Account data — the email address you sign in with. There's no password to store.
• Session data — IP address, browser/device user-agent, and approximate city/country (derived at our network edge, not from a separate lookup), so the Account page can show you every device signed into your account and let you sign the rest out.
• Site content — the text, links, and images you mark editable and publish through Editbar on your own site(s), including drafts, published versions, and who changed what and when. This is your content; see our Terms for how it's used.
• Billing data — our payment processor, Creem, handles and stores your payment details directly; we only receive and store your subscription status, plan, and a Creem customer reference, never your card number.
• Support correspondence — anything you send to hello@editbar.online.

We don't use advertising or analytics cookies or trackers on the Service — see our Cookies Policy for the one cookie we do set.

3. Why we process it (legal basis)

Account, session, site content, and billing data are processed to perform our contract with you (running the Service you signed up for). Security-related data (rate-limit and abuse-prevention records) is processed under our legitimate interest in keeping the Service reliable and safe. Where required, we rely on your consent (for example, an optional notification preference).

4. Who else sees it

We use a small number of sub-processors to run the Service, each bound by their own data processing terms:

• Cloudflare (Workers, D1 database, edge network) — hosts the Service and its database, and provides the network-edge geolocation used for the session list above.
• Resend — delivers transactional email (magic-link sign-in, invites, review notifications). We don't send marketing email.
• Creem — processes payments and stores your payment method as our payment processor / merchant of record.

We don't sell personal data, and we don't share it with anyone else for their own marketing purposes.

5. International transfers

Our sub-processors may process data outside the EU/EEA. Where that happens, it's on the basis of their own applicable safeguards (such as the EU Standard Contractual Clauses) as documented in each provider's own data processing terms.

6. How long we keep it

Account and site content data is kept for as long as your account exists. Expired sessions, used or expired magic links, and rate-limit records are deleted automatically once they're no longer valid. Audit log entries (Enterprise plan) are kept for 1 year. Deleting your account from the Account page permanently removes your sites, content, and account data, immediately.

7. Your rights

Under GDPR (and equivalent laws where you're located), you can request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and receive a copy of your data in a portable format. Two of these are already self-serve: the Account page's Export data action gives you a full JSON export of your account and site data, and Delete account erases it permanently. For anything else, email hello@editbar.online. If you're unsatisfied with our response, you can lodge a complaint with your local data protection authority — in the Czech Republic, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.cz).

8. Children

The Service isn't directed at, and we don't knowingly collect data from, children under 16.

9. Changes to this policy

We may update this policy from time to time; the "Last updated" date above reflects the current version. Material changes will be announced on this page or by email to account holders.

10. Contact

RevOps Labs s.r.o.
Hlaváčkova 1334/19, Košíře, 150 00 Praha 5, Czech Republic
Registered with the Municipal Court in Prague, Section C, Insert 405326 · Company ID (IČO) 21705534 · VAT ID CZ21705534
Email: hello@editbar.online