Privacy policy

We collect only the data needed to run the service.

• Account data: email address, password stored as a secure hash, name if you add one, workspace and role.
• Content: videos you upload or link, transcripts, clips, captions, titles, brand kit files and comments.
• Connected channels: channel identifiers, public channel details and the access tokens needed to read videos and publish clips you schedule.
• Billing data: plan, billing period, invoice details and payment status. Card details are entered with our payment processor and we do not store full card numbers.
• Usage and technical data: pages and features used, source minutes processed, IP address, browser type, device type, sign-in times and error logs.
• Communication: emails you send to support and our replies.
• Demo submissions: the video link or file you submit in the demo and an IP based counter that limits the demo to one video per 24 hours.

• To provide the service you signed up for (account, transcription, moment ranking, clips, scheduling, publishing): performance of a contract.
• To run the demo before you create an account: our legitimate interest in showing how the product works, and the steps you request.
• To bill subscriptions and issue invoices: performance of a contract and legal obligations under tax and accounting law.
• To secure the service, prevent abuse and enforce limits: our legitimate interest and legal obligations.
• To send account emails such as sign-in codes, security notices and billing messages: performance of a contract.
• To answer support requests: performance of a contract or our legitimate interest in replying.
• To improve the service using aggregated usage statistics: our legitimate interest. Your videos, transcripts and clips are not used to train AI models.

If you are in the European Economic Area, the United Kingdom or Switzerland, these legal bases apply under the GDPR and its UK equivalent. If you live in a US state with a consumer privacy law, such as California under the CCPA, you have the rights described below. We do not sell personal information and we do not share it for cross-context behavioral advertising.

We share personal data only with service providers that process it on our behalf and on our instructions, under written agreements.

• Hosting provider, for servers, storage and backups in the EU or US
• Payment processor, for subscriptions and card payments
• Email delivery provider, for sign-in codes and account emails
• Speech recognition and language model providers, for transcripts and moment ranking, without training on your content
• Video platforms you connect, when you schedule or publish a clip to them

We may disclose data when the law requires it or to protect the rights and safety of users and the service. Data may be processed outside your country. Transfers out of the European Economic Area or the United Kingdom rely on standard contractual clauses or another lawful transfer mechanism.

ShortsCreator uses YouTube API Services to read videos from a channel you connect and to publish Shorts you schedule. By connecting a channel you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and the Google Privacy Policy (https://policies.google.com/privacy) applies to data handled by Google.

We access only the data needed for these functions, and we store channel tokens encrypted. You can revoke our access at any time by disconnecting the channel in your workspace settings or through the Google security settings page (https://myaccount.google.com/permissions). When you revoke access or disconnect a channel, we delete the stored tokens and stop reading data from that channel.

We use only cookies that are essential to run the site: a session cookie that keeps you signed in, a security token that protects forms, and a cookie that remembers basic preferences. We do not use advertising pixels or tracking cookies for advertising, so there is no cookie banner. Any usage statistics we collect are measured without advertising cookies.

• Account and workspace data: while your account is active, and deleted after you close it.
• Content: until you delete it, the workspace or the account, or until the retention period you set on Enterprise ends.
• Demo submissions without an account: up to 30 days.
• Invoices and billing records: as long as tax and accounting law requires.
• Security and access logs: up to 12 months.
• Support emails: up to 3 years after the last message.

Deleted data is removed from active systems and then from backups within the backup cycle.

Depending on where you live, you have the right to access your data, receive a copy, correct it, delete it, restrict or object to processing, and receive data you provided in a portable format. Where processing is based on consent, you can withdraw it at any time. US state laws such as the CCPA also give you the right to know what we collect and to opt out of sale or sharing, which we do not do. We will not treat you differently for using your rights.

To use any right, write to [email protected] from the email address of your account. We may ask you to confirm your identity. If you are in the EEA or the UK, you can also lodge a complaint with your local data protection authority.

The service is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe a child gave us personal data, write to us and we will delete it.

We protect data with encryption in transit and at rest, access controls by role and logging of access. Read more on our security page.

We may update this policy when the service or the law changes. The date of the latest version appears at the top of this page. For significant changes we also inform account owners by email before they take effect.

Last updated October 19, 2026.