Privacy Policy

Last updated: 7 July 2026

This policy explains what personal data ShortsStudio ("we") collects, why, and your rights. We keep data collection to the minimum needed to run the Service.

1. Data we collect

Account: your email address and a securely hashed password (we never store your password in plain text).
Usage: your plan, run counters, jobs you submit, and basic logs (timestamps, error messages) needed to operate and debug the Service.
Support & payments: messages you send to support and the plan/amount you request; we do not store card numbers — payments are made externally.
YouTube (optional): if you connect a channel, we store OAuth tokens to upload on your behalf. You can disconnect anytime, which removes the tokens.

2. How we use it

To provide the Service (process your videos, enforce plan limits, publish clips you request).
To verify your email and secure your account.
To send transactional emails (verification, password reset, plan activation) and, occasionally, product updates you can opt out of.
To prevent abuse and comply with law.

3. Cookies

We use a single first-party session cookie to keep you logged in. It is essential for the Service to function; we do not use third-party advertising or tracking cookies.

4. Third parties

YouTube / Google — when you connect a channel and when we download videos (subject to Google's Privacy Policy).
Email provider — to deliver transactional emails.
Hosting — our server provider stores the data needed to run the Service.

We do not sell your personal data.

5. Data retention

We keep account data while your account exists. Processed videos and generated clips are temporary working files and are cleaned periodically. When you delete your account, your account record and channel tokens are removed.

6. Your rights

You can access your basic data in the app, change your password, and delete your account (which erases your account data) at any time. For any other request — including a copy or correction of your data — contact us. Depending on your country (e.g. EU/UK GDPR) you may have additional rights.

7. Security

Passwords are hashed, sessions are HTTP-only, and the API sends security headers. No system is perfectly secure, but we take reasonable measures to protect your data.

8. Children

The Service is not intended for anyone under 16. We do not knowingly collect data from children.

9. Contact

Privacy questions or data requests: shortsstudioadmin@gmail.com, or the in-app 💬 Support button.