Privacy Policy

1. Who is responsible for your data

The Interactive Company of Dubai (“Shorty”, “we”, “us” or “our”), based in Dubai, United Arab Emirates, is responsible for the personal data described in this Policy. Contact us at marketing@shorty.ai.

2. Data we collect

Account and contact data

Your email address, authentication identifiers, account profile details, and messages you send to us.

Content and project data

Reference videos, footage, images, audio, music, prompts, notes, project settings, generated editing plans, rendered outputs, file metadata and related processing records. Content may contain personal data about you or other people.

Subscription and transaction data

Your plan, billing status, purchase amount, currency, transaction identifiers and limited payment-related details provided by our payment processor. We do not receive or store your full card number.

Usage, device and technical data

IP address, browser and device type, operating system, timestamps, requested pages, feature interactions, error and diagnostic records, security signals, and identifiers stored in cookies or local storage.

3. How we collect data

We collect data directly from you when you create an account, upload content, configure a project, subscribe, or contact us. We also collect technical data automatically when you use Shorty, and receive limited account, authentication and transaction information from service providers such as Supabase and Stripe.

4. How we use data

• provide accounts, authenticate users, store projects, analyse content, create edit plans, render outputs and deliver the service;
• process subscriptions, maintain transaction records and provide support;
• protect Shorty, prevent abuse, investigate incidents and enforce our Terms;
• monitor reliability, fix errors, understand feature performance and improve the service;
• send essential service, security, billing and policy notices;
• send marketing only where permitted and honour opt-out choices; and
• comply with legal obligations and establish, exercise or defend legal claims.

Depending on where you live, our legal grounds may include performing our contract with you, your consent, compliance with law, and our legitimate interests in operating, securing and improving Shorty. Where we rely on consent, you may withdraw it at any time without affecting earlier processing.

5. AI and media processing

Shorty uses automated systems to inspect uploaded media and instructions for characteristics such as scenes, motion, speech, captions, pacing, transitions and visual style. These systems use the results to prepare editing specifications and outputs you request.

When you choose to analyse a reference, Shorty sends that reference video and any optional note you provide to the Google Gemini API so Google can process them on our behalf and return a style analysis. We use that response only to provide the requested Shorty feature.

Do not upload sensitive personal data or media you are not authorised to use. You are responsible for informing people whose personal data appears in content you submit and for obtaining any consent required by law.

We do not use Your Content to train general-purpose AI models unless we first tell you and obtain any consent required by law.

6. Signing in with Google

Shorty offers “Continue with Google” as an optional way to create and access your account. If you use it, Google shares a limited set of profile information with us: your name, email address, profile picture and Google account identifier. We use that information only to create your Shorty account, authenticate you when you return, contact you about the service, and support you if you ask for help.

Shorty does not request access to Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos or any other Google service data. We request only the basic openid, email and profile scopes.

Shorty's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not transfer it to third parties except as needed to provide or improve the features you use or as required by law, do not use it for advertising, and do not allow humans to read it except with your explicit consent, for security or abuse investigations, to comply with law, or where the data has been aggregated and de-identified.

You can disconnect Shorty from your Google Account at any time at myaccount.google.com/permissions. To delete the Google profile data we hold, email marketing@shorty.ai and we will delete your account and associated data.

7. When we share data

We may share personal data with:

• service providers that support hosting, authentication, private storage, media processing, rendering, communications, security and customer support;
• payment providers, including Stripe, to process subscriptions and manage transactions;
• professional advisers and authorities where reasonably necessary to comply with law, protect rights and safety, or handle legal claims;
• a buyer or successor in connection with a merger, financing, reorganisation or sale of all or part of our business; and
• other parties at your direction or with your consent.

We do not sell your personal data.

8. International transfers

Shorty and its providers may process data in the United Arab Emirates and other countries. Where required, we use appropriate safeguards for cross-border transfers and require providers to protect data consistently with applicable law.

9. Data retention

We keep personal data only as long as reasonably needed for the purposes described above. Retention depends on the type of data, your plan and account status, project settings, legal requirements, dispute and fraud-prevention needs, and backup cycles.

We generally retain account and transaction records while your account is active and for a reasonable period afterward. Uploaded media, project data and outputs may remain available for the storage period associated with your plan or until you delete them, subject to queued deletion, backups and legal holds.

10. Security

We use technical and organisational safeguards designed to protect personal data, including access controls, private storage controls and encrypted transmission where appropriate. No system is completely secure, so we cannot guarantee absolute security. Keep your account access secure and contact us if you suspect unauthorised use.

11. Cookies and local storage

Shorty uses cookies, browser storage and similar technologies that are necessary for sign-in, session continuity, security, preferences and core service operation. Our payment and authentication providers may set their own essential technologies when you use their services.

You can control cookies through your browser. Blocking essential storage may prevent sign-in or other parts of Shorty from working. If we introduce non-essential analytics or advertising cookies, we will provide any notice and choices required by law.

12. Your privacy rights

Depending on your location and subject to legal exceptions, you may have the right to:

• ask whether we process your personal data and receive information or a copy;
• correct inaccurate or incomplete data;
• request deletion or restriction of processing;
• object to certain processing or withdraw consent;
• receive certain data in a portable format; and
• complain to the relevant data protection authority.

To make a request, email marketing@shorty.ai. We may need to verify your identity. You may also unsubscribe from marketing using the link in the message.

13. Children

Shorty is not intended for children under 18, and we do not knowingly collect their personal data. If you believe a child has provided personal data to us, contact us so we can investigate and take appropriate action.

14. Third-party links

Our service may link to websites or services that we do not control. Their privacy practices are governed by their own policies, and we encourage you to review them.

15. Changes to this Policy

We may update this Policy as Shorty, the law or our practices change. We will post the new version and update the effective date. If a change materially affects your rights, we will provide reasonable additional notice.

16. Contact

For privacy questions or requests, email marketing@shorty.ai.

The Interactive Company of Dubai
Dubai, United Arab Emirates