Privacy and account data
The Editor Harness account service uses WorkOS for identity, Stripe for payments, Convex for account and licence records, Cloudflare for hosting and encrypted account backups, and GitHub to host the Mac app and its updates. Account records include your email, subscription state and device activation information.
Your source media and editing projects remain on your Mac. The account backup service does not back them up. Convex account records are currently hosted in the United States.
If you emailed us before launch to join the Editor Harness alpha, we keep that email in our iCloud mailbox and use it only for the product updates you asked for. Reply to [email protected] to stop them. For access or deletion requests, contact [email protected].
Your footage and your assistant
Your footage and projects stay on your Mac. Editor Harness makes no cloud AI calls of its own: the models it uses are included in the app and run on your Mac. When you connect an assistant such as Claude Code, Codex, Cursor, Gemini CLI, VS Code or the Claude app, what that assistant reads through Editor Harness, such as frames, transcripts, readings and the details of your project it asks for, goes to that assistant's provider under your own account with them, and their privacy terms apply. You choose what assistants may do in Settings ▸ Assistants, the same for every assistant, and you can turn each one off there at any time, except the Claude app's extension, which you remove in Claude's Settings, under Extensions.
Feedback and analytics
Help ▸ Send Feedback… sends what you write, the category you choose, your email if you ask for a reply, the app's full version number, the macOS version and your Mac model. A screenshot and the titles of the assistant's last 10 actions go only if you turn them on. A screenshot can show your picture. Anonymous usage analytics are off unless you turn them on in Settings ▸ Privacy, where you can also delete what has been collected. When they're on, the app sends them to www.editorharness.com under a random analytics ID: each event says what kind of thing happened and when, with a few codes and counts, such as the app version or which tool your assistant used and how long it took. An event never carries file or folder names, links, addresses or anything you typed.
Downloads and updates
The Mac app and its updates are downloaded from GitHub, which receives your IP address and basic request details when you download. GitHub’s own privacy statement covers that data. To check for updates, the app asks www.editorharness.com for the latest version. These requests carry the app version and your IP address, never your account, footage or projects.
Retention and deletion
We retain active account and licence records while your account is open. A verified deletion request blocks access immediately. Thirty days after confirmed subscription cancellation, the account email is removed. Pseudonymous account and provider identifiers remain linked to necessary reconciliation, security and accounting records. Support verifies requests to complete provider erasure and reviews which records must be retained; this automated step is not complete erasure. Legal holds or unresolved payments may require limited records to be kept longer.
| Record | Retention policy |
|---|---|
| Temporary device challenges | Expire after two minutes; expired records are removed in bounded cleanup jobs. |
| Processed payment or identity events | 30 days after receipt once processed. Unresolved failures stay available for investigation; terminal failed records are reviewed after 90 days. |
| Security audit records | Up to one year, unless a record is needed for an active investigation or legal obligation. |
| Invoices and required accounting records | Six years from the end of the financial year they relate to, or longer where law requires. This does not retain your local media. |
| Encrypted account backups | Launch policy: 35 daily and 12 monthly recovery copies. The existing shorter retention remains until the replacement is qualified. Deleted records may remain in protected backups until those copies expire; deletion requests must be reapplied before restored data becomes accessible. |
You can request deletion from your account page or email support. Request a copy of your account data at [email protected]. We verify your identity before releasing data or completing deletion. Never send passwords or private footage.
Addresses from the pre-launch mailing list are used only for the updates people asked for; reply to leave the list. The list is reviewed annually. Provider records are also subject to the providers' policies and applicable legal obligations.