Privacy Policy

Last updated: August 22, 2026

1. Overview

ShyShorts ("ShyShorts," "we," "us," or "our") provides faceless short-video creation tools, including prompt-based scripts, AI-assisted media generation, voice and caption settings, video rendering, video credits, billing, downloads, and optional publishing to connected social platforms. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access our websites, apps, and related services.

This Privacy Policy applies to ShyShorts services accessed through any ShyShorts-owned domain or subdomain, including shyshorts.com and app surfaces operated by ShyShorts. By using or accessing ShyShorts on any such domain or subdomain, you acknowledge that this policy applies, and it is your responsibility to review the current version of this policy before continuing to use the service.

2. Information We Collect

We may collect the following categories of data:

  • Account data, including your name, email address, profile image, user ID, authentication status, plan, settings, and support communications.
  • Connected-service data, including social profile information, account identifiers, posting permissions, privacy settings, publishing status, platform responses, and other data you grant through an integration.
  • Prompt and workflow data, including video ideas, scripts, drafts, gameplay clips, uploaded media, generated images, generated videos, voice choices, caption settings, publishing settings, moderation results, provider settings, saved references, and project records.
  • Billing data needed to process plans, subscriptions, invoices, video credit grants, credit reservations, credit releases, customer portal access, payment events, refunds, and billing support. Payment details are handled by Dodo Payments or its payment infrastructure, and we do not intentionally store full card numbers.
  • Usage and device data, including IP address, browser type, operating system, access times, viewed pages, feature activity, app interactions, error states, logs, and approximate location derived from network information.
  • Feedback, support requests, billing-error reports, and other information you send to us.

3. How We Use Information

We use information to:

  • Create, authenticate, secure, and manage your account.
  • Provide account, billing, dashboard, video creation, download, publishing, analytics, and connected-service features.
  • Process subscriptions, credits, billing events, and support requests.
  • Reserve, consume, release, reconcile, and audit video credits.
  • Generate, render, store, display, moderate, publish, and deliver the content and outputs you request.
  • Detect, prevent, and respond to fraud, abuse, unsafe content, security incidents, and policy violations.
  • Improve our workflows, product experience, reliability, customer support, and business operations.
  • Comply with law, enforce our terms, and protect rights.

4. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar privacy laws apply, we process personal information only when we have a lawful basis to do so. Depending on the feature and context, our lawful bases may include:

  • Contract performance, when processing is needed to create your account, provide requested features, process subscriptions, deliver support, or operate the service you asked to use.
  • Legitimate interests, when processing is needed to secure the service, prevent abuse, improve product reliability, understand usage, troubleshoot errors, protect rights, support business operations, or communicate about service-related matters, provided those interests are not overridden by your rights and freedoms.
  • Consent, when we ask for permission for optional cookies, certain marketing communications, or other processing that requires consent. You may withdraw consent at any time, and withdrawal will not affect processing that occurred before withdrawal.
  • Legal obligation, when processing is needed to comply with tax, accounting, payment, consumer protection, sanctions, law enforcement, regulatory, or other legal requirements.

ShyShorts is the controller for personal information we process to provide and operate our service, unless we clearly state otherwise. Third-party services you connect, such as payment providers or integration providers, may act as independent controllers under their own privacy terms.

5. AI Processing, Moderation, and Providers

ShyShorts may use third-party service providers for authentication, billing, cloud hosting, storage, AI model processing, voice generation, video rendering, moderation, analytics, publishing integrations, infrastructure, email, and customer support. Your prompts, records, connected-account context, uploaded media, generated intermediate assets, and final outputs may be sent to these providers when needed to provide the service, enforce safety rules, troubleshoot failures, complete generation, or publish content you request.

We require service providers to process information only for permitted operational purposes, but provider terms, data locations, retention settings, and processing behavior may vary by provider and product configuration.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, secure sessions, remember preferences, remember cookie choices, measure usage, troubleshoot issues, and improve the service. You can instruct your browser to refuse cookies, but some account, billing, and product features may not work correctly without them.

7. Storage and Retention

Account data, connected-account data, workflow data, uploaded media, generated content, billing metadata, credit metadata, logs, and support records may be stored using cloud infrastructure and linked to account, video, project, usage, billing, moderation, publishing, and support records.

We retain information for as long as needed to provide the service, maintain records, resolve disputes, enforce our terms, comply with legal obligations, and support legitimate business purposes. If you request account deletion, we will delete or de-identify personal information within a reasonable period where possible, except where retention is required or permitted for legal, security, billing, abuse-prevention, backup, or dispute-resolution purposes.

8. International Transfers

ShyShorts may process and store information in countries other than the country where you live, including countries that may not provide the same level of data protection as your home jurisdiction. Our service providers may also process information in multiple countries.

Where GDPR, UK GDPR, or similar transfer rules apply, we rely on appropriate safeguards for international transfers where required, such as contractual protections, Standard Contractual Clauses, provider transfer mechanisms, adequacy decisions, or other lawful transfer bases.

9. Disclosure of Information

We may disclose information:

  • To service providers working on our behalf.
  • To connected third-party services when you direct ShyShorts to use those integrations.
  • To comply with law, legal process, lawful requests, or regulatory obligations.
  • To protect ShyShorts, users, third parties, property, safety, security, and rights.
  • In connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transfer.
  • With your direction or consent.

We do not sell personal information for money. We also do not knowingly share personal information for cross-context behavioral advertising unless we provide any legally required notice and choice.

10. GDPR, EEA, and UK Privacy Rights

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy rights, you may have the right to request access to your personal information, correction of inaccurate information, deletion of information, restriction of processing, objection to processing, portability of information, and withdrawal of consent where processing is based on consent.

You may also have the right to object to direct marketing and to object to processing based on legitimate interests on grounds relating to your particular situation. If you object, we will assess the request under applicable law and may continue processing where we have compelling legitimate grounds or where processing is needed for legal claims.

You may lodge a complaint with your local data protection authority, supervisory authority, or the UK Information Commissioner's Office if you believe our processing violates applicable privacy law. We encourage you to contact us first so we can try to resolve the issue.

To make a privacy request, contact support@shyshorts.com. We may need to verify your identity, account ownership, jurisdiction, and request scope before responding. Some requests may be limited where information is needed for security, billing, legal compliance, fraud prevention, backups, dispute resolution, or the rights of others.

11. Sensitive Data

ShyShorts is not designed for processing sensitive personal information such as government IDs, health data, biometric data, precise financial credentials, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, sexual orientation, or criminal offense data. Do not upload, prompt, store, or submit sensitive personal information unless we have expressly asked for it and provided a lawful basis and additional safeguards.

12. Automated Decision-Making

ShyShorts uses automated systems, AI providers, moderation tools, security checks, and usage controls to operate the service. These systems may recommend content, classify content, detect abuse, enforce usage limits, reject prompts, or help protect the service.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects for you without meaningful human review where required by applicable law. If you believe an automated system has affected your account or access in a way that requires review, contact support@shyshorts.com.

13. Security

We use administrative, technical, and organizational safeguards designed to protect information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login methods, devices, and connected accounts secure.

14. Children's Privacy

The service is not intended for anyone under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information, contact us so we can take appropriate action.

15. Governing Law and Changes

This Privacy Policy is governed by the laws of India, unless applicable law requires otherwise. We may update this policy from time to time by changing this page and its "Last updated" date. Your continued use of ShyShorts after an update means you accept the updated policy.

16. Contact Us

For privacy or billing questions, contact support@shyshorts.com.