Privacy Policy

1. Information We Collect

We collect information that you provide directly to us and information generated through your use of the platform:

• Account Information: When you create an account, we collect your name, email address, and authentication credentials.
• Uploaded Content: Videos, audio, and media files you upload for processing. These are used specifically to deliver our AI services and are not used to train our base AI models.
• Usage Data: We collect information about how you interact with the platform, including pages visited, features used, processing history, device information, and IP addresses.
• Payment Information: Billing details are collected and processed securely through our PCI-compliant payment provider. We do not store full credit card numbers on our servers.

2. How We Use Your Information (Legal Basis)

Under global data protection laws like the GDPR, we process your data under the following legal bases:

• Contractual Necessity: To provide and maintain our services, process videos, generate commentary, and fulfill your subscription.
• Legitimate Interests: To analyze usage patterns to improve our AI models, enhance performance, ensure security, and detect fraud.
• Consent: For sending marketing communications or utilizing non-essential cookies, which you may opt out of at any time.
• Legal Obligation: To comply with applicable laws, such as tax and financial reporting.

3. Data Sharing and Third-Party Sub-processors

ShortVox does not sell your personal data. We only share data with trusted third-party services essential for operating the platform:

• AI Providers: Services like ElevenLabs, OpenAI, or Google Gemini may process your scripts or audio to generate our deliverables. These partners are bound by strict confidentiality and do not retain your data for model training.
• Infrastructure: Cloud providers (e.g., Supabase, Vercel, AWS) host our databases and process data securely.
• Payment Gateways: For processing subscription fees.

4. European Privacy Rights (GDPR)

If you are a resident of the European Economic Area (EEA) or the UK, you have specific rights regarding your personal information:

• Right to Access: You can request a copy of the personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): You can request that we delete your account and associated personal data.
• Right to Rectification: You can request correction of inaccurate data.
• Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
• Right to Object: You can object to our processing of your data, particularly for direct marketing.

To exercise these rights, email us at privacy@shortvox.com.

5. California Privacy Rights (CCPA/CPRA)

If you reside in California, you are granted specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected over the past 12 months.
• Right to Delete: You can request the deletion of your personal information, subject to certain exceptions.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• Do Not Sell or Share My Personal Information: ShortVox does not sell your personal data. We only share it with necessary service providers.

6. Data Retention and Security

Your data is encrypted in transit (TLS) and at rest (AES-256). We retain your personal information only for as long as is necessary for the purposes set out in this policy. Video uploads and generated assets are retained while your account is active and will be purged upon account deletion or after a defined period of inactivity, in accordance with our data hygiene practices.

7. Children's Privacy

ShortVox is not intended for use by children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we discover we have inadvertently collected such data, we will delete it immediately.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at privacy@shortvox.com.