The method used by top agencies, SaaS companies, and tech firms.

Privacy Policy

Last updated: 13 October 2026

This policy explains what personal data Editly collects, why, and what rights you have. It applies to editly.pro and to our sales and production exchanges. It complies with the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

Frédéric Thomas EI, trading as Editly, SIREN 938 336 047, 19 rue Saint-Louis, 31500 Toulouse, France — contact@editly.pro.

2. Data we collect and why

Booking a discovery call

  • Data: name, work email, company, website, answers to the booking form

  • Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR)

  • Retention: 3 years after the last contact if no contract is signed

Running the sales call

  • Data: call notes; a recording only if you agree at the start of the call

  • Legal basis: our legitimate interest in qualifying your project; your consent for recordings

  • Retention: notes, 3 years; recordings, 6 months

Performing the contract

  • Data: contact details, brief, scripts, and the assets and files you send

  • Legal basis: performance of the contract (Article 6(1)(b) GDPR)

  • Retention: duration of the contract plus 5 years (statutory limitation period)

Invoicing and accounting

  • Data: billing name, address, VAT number, payment records

  • Legal basis: legal obligation (Article 6(1)(c) GDPR)

  • Retention: 10 years (Article L123-22 of the French Commercial Code)

Replying to emails

  • Data: name, email address, message content

  • Legal basis: our legitimate interest in answering you

  • Retention: 3 years after the last contact

Website analytics

  • Data: pages visited, device type, approximate location, referring site

  • Legal basis: your consent where cookies are used; otherwise our legitimate interest

  • Retention: 13 months maximum

We do not sell your data and do not use it for automated decision-making.

When a client sends us materials containing personal data about other people (footage, names, testimonials, data visible on product screens), Editly processes that data as a processor on the client's behalf, only to produce the video, under Article 14 of our Terms and Conditions. The client remains the controller of that data.

3. Who receives your data

Your data is accessed only by Editly and the following service providers, each acting on our instructions:

  • Framer B.V. (Netherlands) — website hosting, forms and analytics

  • Google Ireland Ltd — email, video calls, calendar booking and file storage (Google Workspace: Gmail, Meet, Calendar, Drive, Docs)

  • Notion Labs, Inc. (USA) — project management and client feedback

  • Stripe Payments Europe Ltd (Ireland) — online payments. Stripe also processes some payment data as an independent controller, for fraud prevention and legal compliance, under its own privacy policy

  • Indy (France) — invoicing and accounting

  • Independent contractors working on your project or on sales calls, bound by confidentiality

4. Transfers outside the European Economic Area

Some recipients are located outside the European Economic Area, notably Notion (USA) and contractors working from abroad, and some providers may access data from their group companies outside the EEA. These transfers rely on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for certified US companies, or on the Commission's Standard Contractual Clauses. You can request a copy of these safeguards at contact@editly.pro.

5. Cookies

The website uses only the cookies needed for it to work, plus [analytics / third-party embeds such as video players or the booking widget], which are set only after your consent through the cookie banner. You can withdraw consent at any time from the banner or your browser settings.

6. Your rights

You can access, correct, delete or port your data, restrict or object to its processing, and withdraw consent at any time. Email contact@editly.pro; we reply within one month. You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or the authority in your country.

7. Security

Access to client data is limited to the people working on your project, protected by individual accounts and two-factor authentication.

8. Changes

We may update this policy. The date at the top shows the latest version.