Privacy Policy

Information You Provide Directly

• Account information
• Video content you upload to our service
• Video metadata
• Billing and payment information (processed by Stripe)
• Communications with our support team

Information Collected Automatically

• Usage analytics (if cookies are accepted)
• Server and error logs

Information from Social Media Platforms

• Authentication tokens and access credentials
• Basic profile information
• Account verification status and permissions
• Platform-specific creator information and capabilities

We use the information we collect for the following purposes:

• Service Delivery: To provide our core video distribution service across multiple social media platforms
• Account Management: To create and maintain your user account, authenticate access, and verify your identity
• Platform Authentication: To establish and maintain connections with your social media accounts for content publishing
• Content Processing: To upload, process, and distribute your video content according to your preferences
• Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance
• Service Improvement: To analyze usage patterns and improve our features, performance, and user experience
• Security: To detect and prevent fraud, abuse, and unauthorized access to our services
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Communication: To send you service-related notifications, updates, and promotional materials (with your consent)

We retain your information for different periods depending on the type of data:

• Account Information: Retained while your account is active and for a reasonable period after account deletion
• Video Content: Stored during the publishing process and deleted when no longer needed
• Authentication Tokens: Stored securely until you disconnect a platform or revoke access
• Usage Analytics: Aggregated and anonymized data may be retained as needed for service improvement purposes
• Server Logs: Retained for operational purposes and automatically purged on a regular basis
• Billing Information: Retained by Stripe according to their retention policies and legal requirements

You can optionally provide ShortSync with access to your social media accounts to automatically publish your video content across multiple platforms. We only access this data when you use our multi-platform publishing features.

Platform-Specific Data Handling

Instagram/Facebook

What Data We Collect:

• Instagram Business account information
• Authentication tokens
• Publishing permissions

How We Use Data:

• Authentication (via Instagram/Facebook Login) and account verification
• Publishing videos to your creator account
• Managing video captions and settings as you specify

Data Sharing and Disclosure:

• Instagram/Facebook data is never sold to third parties
• Data is not shared except when necessary to publish to your creator account
• We comply with Meta's Platform Terms and Instagram/Facebook API Terms of Use

Compliance and Security:

• OAuth tokens are stored securely in our database with access controls and row-level security policies
• All data transmitted to/from Instagram/Facebook APIs is encrypted using HTTPS/TLS
• Tokens are immediately deleted when you disconnect your Instagram/Facebook account
• You can revoke access at any time through your Instagram/Facebook Account settings

TikTok

What Data We Collect:

• TikTok creator account information
• Authentication tokens
• Video publishing permissions
• Privacy settings and content restrictions

How We Use Data:

• Authentication (via TikTok Login) and account verification
• Publishing videos to your TikTok account
• Managing video descriptions, privacy settings, and disclosures as you specify

Data Sharing and Disclosure:

• TikTok data is never sold to third parties
• Data is not shared except when necessary to publish to your TikTok account
• We comply with TikTok's Developer Terms of Service and API policies

Compliance and Security:

• OAuth tokens are stored securely in our database with access controls and row-level security policies
• All data transmitted to/from TikTok APIs is encrypted using HTTPS/TLS
• Tokens are immediately deleted when you disconnect your TikTok account
• You can revoke access at any time through your TikTok Account settings

YouTube (and Google Authentication)

What Data We Collect:

• Basic Google account information
• YouTube channel information
• Authentication tokens
• Video publishing permissions

How We Use Data:

• Authentication (via Google Login) and account creation
• Uploading videos to your YouTube channel
• Managing video metadata and upload settings as you specify

Data Sharing and Disclosure:

• Google data is never sold to third parties
• Data is not shared except when necessary to publish to your YouTube channel
• We do not transfer data for advertising or credit worthiness purposes

Compliance and Security:

• ShortSync's use of information received from Google APIs will adhere to Google API Services User Data Policy
• OAuth tokens are stored securely in our database with access controls and row-level security policies
• All data transmitted to/from Google/YouTube APIs is encrypted using HTTPS/TLS
• Tokens are immediately deleted when you disconnect your account
• You can revoke access to your Google/YouTube account at any time through your Google Account settings

The only way our Service accesses your social media data is after you explicitly accept our Privacy Policy and provide us with the right to connect to your accounts. We are fully compliant with each platform's API requirements and developer policies.

The use and transfer of information received from social media platform APIs will adhere to each platform's respective developer policies and data use requirements, including any limitations on data usage and sharing.

We use encryption and industry-standard safeguards to protect your data and we have security procedures in place to protect the confidentiality of your data.

While no system is 100% secure, we continuously improve our protections, conduct regular security reviews, and respond to issues promptly to ensure your information remains safe.

You have several rights regarding your personal data, including the right to request deletion of your information.

How to Request Data Deletion

To request deletion of your personal data, you can:

• Email us at contact.shortsync@gmail.com with the subject line "Data Deletion Request"
• Include your account email address and specify what data you want deleted
• We will respond to your request within 30 days
• For platform-specific data deletion, you may also need to revoke access through each social media platform's settings

What Data Can Be Deleted

• Your account information
• Video content you uploaded
• Connections to your social media accounts
• Usage analytics and activity logs associated with your account

Data We Cannot Delete

• Aggregated, anonymized usage statistics that don't identify you personally
• Transaction records required for tax and accounting purposes
• Data required to comply with legal obligations or resolve disputes
• Content already published to social media platforms (you must delete this directly on each platform)

Note: Deleting your ShortSync account will remove your access to the service and delete most associated data. However, content already posted to social media platforms will remain on those platforms until you delete it directly.

If you choose to use our paid services, payment processing is handled by Stripe. We do not store your credit card information on our servers. Please review Stripe's privacy policy for information on how they handle your payment data.

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us at contact.shortsync@gmail.com.

This policy is effective as of October 3, 2025.