Last updated: August 2026 — Editoria, operated by Function Labs
The short version: We store your manuscript content in your account to provide your workspace, and we send relevant text to approved AI-processing providers solely to produce your requested editorial output. We never sell your data or use it for model training. You own your work completely.
Editoria is operated by Function Labs. For GDPR purposes, Function Labs is the Data Controller for personal data collected through this Service.
Account data: Your name and email address, collected when you create an account.
Manuscript content: The text you submit for editing, chapters uploaded to projects, and the resulting edited output. This is stored in your account so you can access your Documents library and Book projects.
Book Bible data: Characters, locations, timelines, relationships, and lore entries extracted from your manuscript (either automatically via AI analysis or manually created by you) are stored as part of your Book project for continuity checking and project reference.
Book preferences: We may store project-level preferences you provide, such as target reader market, preferred English style, genre, and book voice/setting, so that Editoria can apply consistent editorial guidance across your manuscript.
Submission Toolkit data: Query letters, synopses, author bios, and submission records that you create or generate are stored in your account for project management and tracking.
Usage data: Basic information about how you use the Service (e.g. number of edits, editing modes used, features accessed) — used only for improving the Service and never sold.
Payment data: Payment is handled entirely by Stripe. We do not store or have access to your card details. We receive only confirmation of payment and your email address.
Your manuscript is not used to train AI models where supported by the configured provider terms. It is sent to approved AI-processing providers solely to produce your edited output, Book Bible entries, and publishing materials. It is not manually reviewed by Function Labs staff unless you voluntarily share it in a support request.
When you submit text for editing or Book Bible analysis, it is sent to configured AI-processing providers to produce the requested output. We configure and use providers on terms intended to prevent customer manuscript content being used for model training; provider handling remains subject to the applicable service and data-processing terms.
The resulting files (original and edited text, generated Book Bible entries, synopses, query letters) are stored in your account behind access controls. They are not publicly indexed or made available to other Editoria users. Service providers may process or store data where necessary to operate the Service.
We do not employ humans to review manuscript content. No one at Function Labs reads your work.
Under UK GDPR and EU GDPR, we process your data on the following legal bases:
Contract performance: Processing your manuscript and managing your account are necessary to deliver the Service you have contracted for.
Legitimate interests: Basic usage analytics to maintain and improve the Service.
Legal obligation: Retaining transaction records as required by applicable law.
We retain your account and document data for as long as your account is active. If you delete your account, we permanently delete all your personal data, manuscript content and entity records. Uploaded files in storage are flagged for manual deletion where the platform does not support automated file deletion; this is typically completed within 30 days. Transaction records and anonymised support records may be retained for up to 7 years as required by UK tax law and for dispute resolution purposes.
If you are located in the UK or EU, you have the following rights:
Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct inaccurate data.
Right to erasure: You can ask us to delete your data ("right to be forgotten"). Submit an account-deletion request through Settings/Support or email support@functionlabs.co.uk.
Right to restrict processing: You can ask us to pause processing your data in certain circumstances.
Right to data portability: You can ask for your data in a portable format.
Right to object: You can object to processing based on legitimate interests.
To exercise any of these rights, email support@functionlabs.co.uk. We will respond within 30 days.
Stripe: Payment processing. Stripe is PCI-DSS compliant. See stripe.com/privacy.
AI processing and infrastructure providers: Your text is processed by configured service providers where necessary to deliver requested editing and publishing features. We select and configure providers with privacy and data-protection requirements in mind and rely on the applicable provider terms and safeguards for that processing.
We do not sell your data to third parties. Ever.
All data is transmitted over HTTPS. Documents are stored with access controls that ensure only you can access your files. We follow industry-standard security practices and conduct regular reviews of our data handling processes.
Your data may be processed on servers outside the UK or EU as part of AI processing. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or equivalent mechanisms) as required by UK GDPR.
We use only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.
We will notify you of material changes to this Privacy Policy via email. The date at the top of this page reflects the most recent update.
For any privacy concerns, email us at support@functionlabs.co.uk. If you are unsatisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.