Privacy Policy
Last updated: September 13, 2026
What we collect
Account data: your email address and authentication credentials, managed by our auth provider (Supabase).
Billing data: payments are processed by Stripe. We never see or store your card number; we store your Stripe customer id, plan, and credit usage.
Your projects: the source links you submit and the scripts, images, audio and videos we generate for you, stored so your dashboard works.
Connected channels (optional): if you connect a YouTube, TikTok or Instagram account for auto-posting, we store the access tokens needed to publish on your behalf. We only use them to post the videos you schedule, and you can disconnect at any time.
Support: emails you send us, so we can help you. We do not run third-party ad trackers.
How we use it
To run the service: authenticate you, generate and store your videos, count credits, charge your plan, answer support, and send essential service emails (receipts, renewal and failure notices). We may use aggregated, non-identifying usage data to improve the product. We do not sell personal data.
Processors we rely on
Your data is handled by a short list of processors, each for one job: Supabase (database, authentication, file storage), Stripe (payments), our hosting provider (application servers), and the AI model providers that power generation (including Google, Anthropic, xAI and ElevenLabs), which process the transcripts and prompts derived from your submitted links in order to generate your videos. These providers process data under their own privacy and data-processing agreements.
Google user data
What we access.When you connect a YouTube channel, Google shares with us the channel's name and picture and lets us upload the videos you schedule to that channel. We never read your Gmail, contacts, calendar or any other Google data.
Sharing, transfer and disclosure. We do not sell, share, transfer or disclose Google user data to any third party. The only systems that touch it are the processors that run the service for us, Supabase (encrypted storage of your connection) and our hosting provider (application servers), strictly to publish the videos you schedule. It is never used for advertising, never shared with the AI model providers listed above, and never combined with data from other sources. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
YouTube API Services. shortpix uses YouTube API Services to connect your channel and publish the videos you schedule. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and the Google Privacy Policy applies to the data Google processes. You can revoke our access at any time from your Google security settings.
Protection. All Google data travels over encrypted connections (TLS). The refresh token that lets us publish is encrypted at rest with a key held only on our servers, is never written to logs, and is accessible only to the publishing service. Access is limited to the people who operate the service. Google data is deleted when you disconnect the channel (Channels page), when your account is deleted, or on request, and you can revoke our access at any time from your Google account permissions page.
Cookies
We use only the cookies needed to keep you signed in (session authentication). No advertising or cross-site tracking cookies.
Retention and deletion
Account data is kept while your account is active. Generated projects are kept for 90 days from their creation while your subscription is active; after a subscription ends we keep them for 30 days, then they are permanently deleted. You can request full deletion of your account and data at any time by emailing contact@shortpix.on.crisp.email; we complete deletion within 30 days, except records we must keep for legal or accounting reasons.
Your rights
Depending on where you live (including under the GDPR), you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Email contact@shortpix.on.crisp.email to exercise any of these rights; we respond within 30 days.
Changes and contact
If this policy changes materially, we notify you by email or in the app. Privacy questions: contact@shortpix.on.crisp.email.
