Controller and contact
The controller is CodeMagician Ltd (company number 17363646), registered in England and Wales, with its registered office at C/O SAFS Ltd, 9 Freeman Way, Ashington, Northumberland, NE63 0YB, which also determines how and why Long Edition customer information is used. For privacy questions or to exercise a data-protection right, email privacy@longedition.com. CodeMagician Ltd's ICO registration reference will be published after registration. You can also complain to the Information Commissioner's Office at ico.org.uk.
Who the service is for
The initial public service is for people aged 18 or over in the UK and is not designed for children. Do not use a commission prompt to disclose another person's private, special-category or criminal-offence information unless you have a lawful and compelling reason to do so.
Information you give us
This includes your email address, password in protected hashed form, legal and age confirmations, commission prompts, voice and edition choices, support messages, correction requests and account-deletion requests. Stripe handles full card details; Long Edition does not store them.
Information created by the service
We create account and session identifiers, programme titles, scripts, sources, claims, review results, audio, artwork, listening position, entitlement and payment references, provider usage and cost records, production progress, security events and limited operational logs. Stripe may return payment status, billing-country and transaction information, but Long Edition does not receive full card details. We also produce administrator-only aggregate service totals from these records without creating a separate person-level analytics history.
Public research and people mentioned in a commission
A prompt may ask about an identifiable person. The service may then collect factual or alleged information from public sources and record citations, claim assessments and a private programme about that subject. Do not use Long Edition to expose private information, target a private person or make an unsupported allegation. A person who believes a programme materially misstates information about them can contact privacy@longedition.com or support@longedition.com for correction, restriction or withdrawal review.
Why we use information
We use account, commission and programme information to take requested steps and perform our contract with you. We use transaction, tax, legal-acceptance and compliance records to meet legal obligations. Security, fraud prevention, service reliability, source integrity, corrections and proportionate support records serve our legitimate interests in operating a safe and accountable service. Optional product news uses consent and can be switched off. We do not sell personal information or use it for unrelated advertising.
Aggregate service measurement
To understand general interest in Long Edition, our own server increments daily totals for a small, fixed list of public page types. These counter records contain only the UTC date, an approved page name and a count. They do not contain an IP address, referrer, user agent, account identifier, prompt, topic or page query. Account, purchase and production outcomes are reported to an authorised administrator only as aggregate totals calculated from the service records already described above. We do not use these measures to build visitor profiles or follow people between websites.
AI and other service providers
The minimum stage-specific content needed to research, write, check, illustrate or narrate a commission is sent to contracted AI and speech providers. Hosting, database, backup, email, payment, monitoring and support suppliers process limited information for their service. Current core providers include DigitalOcean, OpenAI, ElevenLabs, SendGrid and Stripe. OpenAI states that API content is not used to train its models unless the customer opts in, although standard abuse-monitoring retention can apply. Other providers process content under their business terms, data-processing terms and available account controls. We do not deliberately opt customer commissions into provider model training.
International transfers
Some providers may process information outside the UK. Where UK adequacy regulations do not apply, we rely on an appropriate transfer mechanism and contractual safeguards. Contact privacy@longedition.com for current information about relevant safeguards.
How long information is kept
Account and completed programme material is kept until you delete the programme or close the account, subject to legal restrictions and rolling encrypted backups. Deleting a programme removes live access immediately; its programme records and private media are permanently purged after a 30-day recovery period. A minimal content-free deletion receipt prevents an older backup from restoring it. Failed partial provider output is removed after safe diagnostic extraction. General application logs target 30 days. Email body retention is minimised after delivery, while necessary transaction, fraud, entitlement and accounting records may be retained for the legally required period. Backup copies expire under the published rolling schedule rather than being edited in place.
Security
We use access controls, password hashing, encrypted transport, private per-account media checks, restricted service credentials, rate limits, patching, independently encrypted backups and tested restore procedures. No online service can promise absolute security. Tell privacy@longedition.com promptly if you believe your account or a private link has been compromised.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing and to receive portable information. You may withdraw consent where consent is the basis. Some rights are qualified, for example where records must be kept by law or are needed to establish legal claims. Contact privacy@longedition.com; you do not need special wording.
Automated processing
AI systems help create the product you request, but we do not use solely automated processing to make legal or similarly significant decisions about you. Automated security and spending controls may pause activity for review; support can investigate an affected account.
Cookies and local storage
Long Edition uses strictly necessary sign-in, security, anti-forgery and PWA storage. Our aggregate page counters do not set or read an analytics cookie, local-storage identifier, tracking pixel or browser fingerprint, and no third-party analytics script is used. If that changes, the service will provide appropriate information and controls before using them.
Changes to this notice
The version and effective date are shown above. We review this notice as providers, law and the service change. A material new use of personal information will be explained before it begins, and current acceptance or acknowledgement is recorded where appropriate.