Privacy policy
Effective: 28 August 2026 (usage-session statistics disclosure)
1. Who we are
This policy applies to the AIMEDITOR software, the public website (aimeditor.com, aimeditor.co.kr), and the license service (license.aimeditor.com) operated by VisionSoft.
If you install or update the app from the Microsoft Store, Store account, billing, and download records are covered by Microsoft’s privacy statement. We do not receive your Store account.
2. What we collect and why
We do not create password accounts. We collect only what we need for licensing, campaigns, support, and product usage statistics.
Email address: OTPs for paid and campaign license activation, campaign notices, license-owner identification, and support. Free does not require an email.
One-time password (6-digit OTP): sent by email to verify you, then it expires. We do not keep OTP plaintext as a standing record.
4-digit PIN (chosen by you): used for campaign applications, paid/BETA activation, and refund requests. It is not a phone number. We do not collect full phone numbers or send SMS, and we do not put the PIN in notice emails.
Campaign referrer: used for campaign operations and abuse review. Not included in approval emails.
Machine ID: a hash of this PC’s hardware, used to manage paid seats (up to two machines), Move, and the usage-session statistics below. We do not store raw hardware serial numbers.
License operations data: SKU and status, activation/move/revoke times, and optional PC nicknames you set. Used for abuse prevention and support.
Usage sessions (app duration statistics): when the app starts and exits, it sends an anonymous session to our license server. Fields are Machine ID, session start and end times, current SKU (Free, Standard, Professional, BETA, etc.), and app version. Document contents, file paths, preview, terminal, and AI/MCP chat are not included. We use this for SKU duration and daily aggregates (intranet “today’s usage”), not for advertising or profiling. Sessions without an end signal are excluded from duration totals.
Website statistics: aggregated page views, country, referrer, and device/browser type. We do not use this to identify a person.
3. What stays on this PC
.aimbox documents, file preview, terminal contents, and work sent over a local AI/MCP connection stay on this computer. We do not upload them to our servers.
License cache (license-state.json), settings, and logs are stored in the Windows user folder (%AppData%\AIMEDITOR). Uninstalling the app may leave this folder.
Preview and the terminal use Microsoft Edge WebView2. Sites you open there follow those sites’ policies.
There is no advertising SDK or third-party ad tracker. The usage sessions in section 2 go only to our license server. Optional local diagnostic files are off by default.
4. Retention and deletion
License and campaign records are kept while the license is active and as needed for disputes or abuse prevention. We delete them on a valid request unless the law requires us to keep them.
OTPs expire after a short time.
Usage sessions and daily aggregates are kept as needed for product improvement and operations. On a valid Machine ID–based deletion request, and if the law does not require retention, we delete related sessions and aggregates.
Website statistics are kept as aggregated data for the period Cloudflare retains them.
Database backups are kept for up to 30 days, then overwritten or deleted.
When we delete electronic files, we do so so they are not meant to be recovered.
5. Sharing and processors
We do not sell personal data for marketing.
Email: transactional mail is sent through an email relay (currently Resend), which receives the address and message body. The 4-digit PIN and campaign referrer are not placed in those emails.
Website statistics: Cloudflare Web Analytics, cookie-less aggregation, not used for advertising profiles.
Walkthrough video: Home and Examples embed a small YouTube player. When it loads or plays, Google (YouTube) handles the request. YouTube account and cookie rules are Google’s.
When a domestic payment provider (PG) is connected, the minimum data needed to charge will go to that provider; we will name them here. The app does not take payment today.
6. International processing
The license service runs on a VPS we operate.
Email relay (Resend), website analytics (Cloudflare), the walkthrough video link (YouTube/Google), and Microsoft Store distribution may use infrastructure outside Korea. The purposes match section 5. If you do not want that processing, do not use email activation, the website, the video link, or Store install.
7. Cookies and similar
The public site does not set advertising or retargeting cookies. Cloudflare Web Analytics does not use cookies.
Loading the YouTube embed may let Google set its own cookies. Skip that section or leave the page if you do not want that.
The site may use this device’s localStorage to remember language. That is a functional setting, not advertising.
8. Your rights
You may email us to access, correct, delete, or stop processing your data. We may ask you to confirm the registered email.
Changing the license email or moving a seat follows in-app help and support. There is no self-serve account portal.
AIMEDITOR is not directed at children under 14. We do not knowingly collect their personal data.
9. Security
The license API uses HTTPS. We do not keep OTP plaintext in standing logs. Staff intranet uses separate sign-in and is not the public site.
No internet service is perfectly secure.
10. Changes
If what we collect or who processes it changes, we update this page and the effective date. For Microsoft Store we use https://aimeditor.com/en/privacy/ as the privacy policy URL.
11. Contact
Privacy questions and requests go to the email below. In Korea you may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118).