EditorSYNC

Security

Last updated: October 19, 2026

EditorSYNC holds your notes, your team's conversations and your money records. Here is how we protect them, in plain English. Everything on this page is true today, and if something changes, this page changes with it.

Your videos stay yours

  • Your original files stay where you keep them: in your Google Drive, or the file you upload. To play a video in the review player we make a review copy. A Google Drive review copy is removed when the project is marked complete, and an uploaded video is deleted 30 days after the project is marked complete.
  • Your notes are never locked in: export them as markers to Final Cut Pro or Premiere Pro at any time.

Your team sees only what you share

  • Editors and other teammates see only the projects you add them to, unless you give them full access.
  • Budgets are visible only to you and the people you give budget or full access. An expense that isn't marked billable is visible only to the person who added it; people with budget access see it only inside the totals.
  • Income and the profit & loss are visible only to you and the people you give Revenue access.
  • Every read and write is checked by rules in the database itself, not just hidden in the app's screens.

Your accounts

  • YouTube connections are encrypted with AES-256-GCM before they're stored. The key is kept separately on our servers, and the connection never reaches your browser.
  • If you choose to connect YouTube revenue, we read only your channel's estimated revenue per day, show it only to you and the people you give Revenue access, never add it into Net, and delete it when you turn it off or disconnect YouTube.
  • Changing your password needs your current password, and passwords known from data breaches are refused.
  • Signing out on one device signs out only that device.
  • You can delete your account in Settings, and your personal data is deleted with it. A workspace you share with teammates passes to the next teammate instead, and invoices you have already sent stay with the people who received them.
  • If you delete your account, a workspace you share passes to the next teammate; its income records go with it only if that teammate already had Revenue access and you choose to keep them.

Connected AI assistants

  • If you connect an AI assistant such as Claude, it can read what your account can see, never payment links, and it can't change anything: the database itself refuses its changes.
  • We log each request it makes (which tool, whether it worked and how long it took), without what you asked or what it returned, and delete that log after 30 days. You can disconnect it anytime in Settings → Integrations → Connected apps.

Outside checks

An independent QA tester and outside reviews test the live app, alongside automated security scans, and what they find gets fixed, usually within days.

Questions

Email support@editorsync.com. You can also read our Privacy Policy.