EDITDUO / DATA HANDLING
How your images are handled
Updated and effective October 17, 2026. Covers the current studio and the planned Pancake subscription data flow.
What runs locally
Opening media, selection, notes, layout previews, color sampling, frame capture, OCR and export run in your browser. OCR initially downloads code and language data from this site without uploading the image. Source video files are not uploaded.
Shared screen capture
When you choose Capture screen, select a source and confirm browser and system permission. EditDuo opens the current view as an image, then ends sharing when capture finishes, is cancelled or fails. The screenshot follows your local project storage settings. AI actions send it only as described below.
What AI actions send
Public AI is not open. The following describes the isolated local-preview flow, not a currently available public model call: only an explicit AI brief or edit request sends the current image or selected video frame, annotation reference and instructions to the selected model service. Candidate models are listed below. Opening files, creating regions or auto-saving does not call these generation models. Kie image-edit previews first upload the source image to Kie’s temporary file service. The computer running the preview also caches task media and results for a 24-hour recovery window. An administrator must clear these caches; clearing browser data does not remove them. Providers process requests and files under their policies. Before public AI opens, model and data-recipient disclosures will be updated against production configuration.
AI availability and model disclosure
As of October 17, 2026, public AI briefs, image generation and paid delivery are not open. No image-generation model is currently offered as a public service. Free annotation, OCR, color picking and export run locally in the browser without these generation models. The Pro / AI description is a planned offering, not an available model call or checkout.
The isolated local preview has two image-edit candidates supplied through Kie: Seedream 5 Flash (seedream/5-flash-image-to-image) and a GPT image-edit option (gpt-image-2-5-sunburst-image-to-image). Brief previews use Intern’s DeepSeek vision model (default deepseek-v4-flash-vision), with a Kie DeepSeek V4.1 Flash alternative (deepseek-v4-1-flash). These are local-preview options, not a list of models currently serving the public production site.
Before opening public AI, we will disclose every enabled image model, its service provider and the data sent, based on the actual production configuration, here, on pricing and at the generation controls. Input and output safety checks must also be verified. EditDuo operates independently and does not represent or imply endorsement by model providers.
Local project storage and deletion
The browser's IndexedDB stores up to 10 recent projects, including source images, saved video frames and notes. Disable auto-save in the studio or delete individual projects from the home page. This device also retains up to 20 recent original images, 10 regions and any screenshot style you choose to remember. Clearing this site's browser data removes these histories, preferences and projects. Downloaded JSON files remain under your control.
Local agent reviews
When the local companion starts a review, media enters the browser through a loopback connection. Only Finish writes feedback to your specified new file. Cancel and timeout do not deliver it. The temporary connection credential stays in this session’s local entry file and tab sessionStorage, then clears when the session ends. Agent reviews do not send site analytics. The tool consuming the feedback controls any subsequent AI submission.
Accounts and sign-in
Supabase Authentication handles email registration, sign-in, verification and account recovery. It manages passwords for email/password sign-in; EditDuo does not store plaintext passwords. Server-readable cookies maintain login sessions. Signing in does not upload local projects. Account, authentication callback and payment pages do not send site analytics.
Waffo Pancake payment data
Live subscriptions are not open. New subscriptions are planned to use Waffo Pancake hosted checkout as Merchant of Record for payment, taxes, records, refunds and fraud prevention. EditDuo sends an internal account identifier, product and checkout-request information to bind verified payment to the correct account. Starting checkout does not send source images, video, annotations or editing prompts to Pancake. In this arrangement, Pancake handles payment rather than image generation or prompt moderation.
Pancake and its payment providers process the email, billing country/region, tax and payment details you supply at hosted checkout. Checkout may also process device and network information needed for payment and fraud prevention. EditDuo does not receive or store full card numbers or security codes. Payment notifications send necessary order/subscription identifiers, payment or refund status, amount, currency and billing periods to EditDuo for allowance, renewal, cancellation and billing support. Checkout and payment records identify the transaction's legal seller.
Cloud records and result retention
We retain the email, internal account identifier, subscription state, allowance and usage records, request IDs and timestamps needed for account and subscription services. Canceling renewal does not automatically delete an account. Account data remains while account services are provided and is handled after a verified deletion request. Billing, refund and dispute records are retained as needed for legal obligations or transaction reconciliation and may not be erased immediately with an account.
Paid AI delivery is not open. The existing recovery design uses private storage with a 24-hour window for successful outputs. A recovery deadline is not a verified automatic-deletion deadline. An administrator clears local-preview media and result caches; clearing browser data does not remove server caches. Download important results; downloaded files remain under your control.
Your data rights and service providers
Contact the email below to request access, correction, export or deletion of account-related data, or withdraw optional analytics consent. We verify requests and handle them under applicable law. Withdrawing analytics consent does not affect local annotation; cancellation does not erase necessary billing records. We do not sell your personal information or acquire ownership of your content through this policy. Account, hosting, payment and AI providers may process data outside your location. Their policies and actual contracts govern their responsibilities, retention and international processing; we do not claim unverified certifications or safeguards.
Accounts, subscriptions and AI services are intended for adults aged 18 or over and are not directed at children. Contact support if a child has provided account data. We address data-security incidents and provide notices as required by applicable law. Material policy changes are communicated through the website or account email.
Supabase privacy policy · Cloudflare privacy policy
Site analytics and feedback
Cloudflare hosts the website; account data remains in Supabase. Google Analytics 4 loads only after your explicit consent to measure public page visits; there is no Google analytics connection before consent. Google may receive basic device, network and visit data and use first-party analytics cookies lasting up to 30 days. Consent grants stay on this device for up to 180 days; a rejection is retained until you change it or clear browser data. Use Analytics privacy settings at the bottom of public pages to reject or withdraw; withdrawal clears this site’s GA cookies and reloads the page to unload the library. GA receives only allowlisted public paths, a fixed title and only allowlisted public search/social referrer origins, without referring-page paths, query strings, fragments, images, notes, OCR text, form content or account identifiers. Enhanced Measurement, ad personalization and Google signals are disabled. Account, authentication, administration, API, payment and Agent/companion/browser-capture sessions do not load GA. After analytics is enabled, cross-page navigation reloads the document. The current configuration accepts only page-view events, without recording images, notes, OCR text or custom usage events. Do Not Track or Global Privacy Control disables analytics, as do internal-test parameters. Choose what to include when contacting us by email.