Privacy Policy

Last updated: July 8, 2026

Shortmaker (“Shortmaker”, “we”, “us”) provides a web-based studio for creating short-form videos — ranked compilations, split-screen reactions, commentary voiceovers, downloading, and transcription — and for publishing finished videos to YouTube. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to shortmaker.app and related services (the “Service”).

1. Information we collect

Account information

When you sign in with Google, we receive your name, email address, profile picture, and Google account identifier. We use this to create and secure your account.

Content you provide

Video links you paste, files you upload, transcripts, titles, captions, and other project data you create with the Service. Media and render output are processed to produce your videos.

Billing information

Subscriptions are handled by our third-party payment provider, which acts as the merchant of record and processes your payment details on its own systems; we do not receive or store your full card number. We store your subscription status and the email associated with your purchase.

Technical data

Standard log and device data (IP address, browser type, timestamps) needed to operate, secure, and debug the Service.

2. Google user data and YouTube

Signing in with Google also lets you publish finished videos to your YouTube channel. To do this we request the following scopes, and only these:

openid, email, profile — to sign you in and identify your account.
https://www.googleapis.com/auth/youtube.upload — to upload videos you create with Shortmaker to your own YouTube channel, only when you choose to publish.

With your consent, Google returns an access token and a refresh token. We store the refresh token securely on our servers so we can upload on your behalf after a render completes; it is never exposed to the browser and is used solely for the upload feature you request. We do not read, download, or analyze your existing YouTube videos, comments, subscribers, or analytics.

Limited Use disclosure

Shortmaker’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we:

only use Google user data to provide and improve the features you request;
do not transfer or sell Google user data to third parties except as needed to provide the Service, for security, or to comply with law;
do not use Google user data for advertising; and
do not allow humans to read your Google user data unless you give explicit consent, it is necessary for security or to comply with law, or the data has been aggregated and anonymized.

You can revoke Shortmaker’s access at any time from your Google account permissions. When you do, we delete the stored refresh token.

3. How we use your information

To provide the Service — process media, render videos, and publish to YouTube when you ask.
To authenticate you and keep your account secure.
To manage your subscription and entitlements.
To operate, maintain, debug, and improve the Service.
To communicate with you about your account or important changes.

4. How we share information

We do not sell your personal data. We share it only with service providers who help us run the Service:

Supabase — authentication and database hosting.
Payment provider — subscription billing (merchant of record).
Google / YouTube — to upload videos you choose to publish.
OpenAI — audio you transcribe is sent to OpenAI’s Whisper API to generate transcripts and captions.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

5. Data retention and deletion

We keep your account data while your account is active. Uploaded media and render output are temporary working files and are removed after processing. You can request deletion of your account and associated data by emailing hello@shortmaker.app; we will delete your data within 30 days, except where we must retain it to comply with legal obligations.

6. Security

We use industry-standard measures to protect your data, including encryption in transit, access controls, and server-side isolation of sensitive tokens. No method of transmission or storage is completely secure, but we work to protect your information and limit access to it.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise these rights, contact hello@shortmaker.app.

8. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

9. International users

Your data may be processed in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the “Last updated” date above. Material changes will be communicated where appropriate.

11. Contact

Questions about this policy or your data? Email hello@shortmaker.app.