Privacy Policy

1. Information We Collect

We do not intentionally collect sensitive personal data (e.g., race, health, or biometric identifiers).

2. How We Use Information

We use the information we collect to:

1. Provide the Service – run render jobs, store your files, deliver downloads.
2. Operate and Improve – monitor performance, fix bugs, train or fine‑tune internal models, and develop new features.
3. Communicate – send transactional messages (e.g., account notices, receipts). We may occasionally send product updates; you can opt out at any time.
4. Protect – detect and prevent fraud, abuse, or security incidents.
5. Comply with Law – respond to lawful requests, court orders, and legal processes.

We do not sell or rent your personal information.

3. How We Share Information

We share information only when necessary to run the Service or when required by law:

• Service Providers. Infrastructure (Amazon Web Services), job orchestration (Trigger.dev), payment processing (Stripe), email delivery, and optional product‑analytics vendors — all bound by confidentiality obligations.
• Legal & Safety. Government authorities or third parties if we believe disclosure is reasonably necessary to comply with a law, regulation, or legal process, or to protect the rights, property, or safety of ShortShop or others.
• Business Transfers. In connection with a merger, acquisition, or sale of all or a portion of our assets. You will be notified of any change in ownership or use of your personal information.

4. Cookies & Tracking Technologies

We use a small number of essential cookies and local‑storage items to:

• maintain your logged‑in session;
• prevent cross‑site‑request‑forgery (CSRF);
• remember basic site preferences.

We may use a first‑party analytics cookie to understand feature adoption. You can disable cookies in your browser, but the Service may not function correctly.

5. Data Retention

• Indefinite Storage. User Content and rendered files are stored indefinitely by default.
• Deletion Requests. You may email support@short.shop to request deletion of specific files or your entire account. We will make good‑faith efforts to fulfil verified requests, subject to legal or technical constraints.
• Back‑ups. Deleted data may remain in encrypted back‑ups for up to ninety (90) days.

6. Security

We protect data using industry‑standard technical and organisational measures, including:

• Transport‑layer encryption (TLS) for all traffic over public networks;
• Least‑privilege access controls and audit logging in our cloud environment;
• Server‑side access restrictions to production data.

No security measure is perfect; we cannot guarantee absolute security.

7. Your Choices & Rights

• Access / Update. You can view and update basic account details in your dashboard or by contacting us.
• Delete. Email support@short.shop to request account or asset deletion.
• Marketing Opt‑out. Any marketing email we send includes an unsubscribe link.
• California Residents. If you reside in California, you may request access to or deletion of your personal information by emailing us. We will not discriminate against you for exercising these rights.

8. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn we have done so, we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the revised policy and update the "Last updated" date. Your continued use of the Service after the effective date constitutes your acceptance.

10. Contact Us

For questions about this Privacy Policy or your personal information, please contact: