Privacy Policy

1. Introduction

ShortPurify (“we”, “us”, or “our”) operates the website shortpurify.com and the ShortPurify platform (the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your data.

By using our Service you agree to the collection and use of information as described in this policy. If you do not agree, please stop using the Service.

2. Information We Collect

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service including video processing and clip generation.
• Authenticate your identity and manage your account via Clerk.
• Publish content to connected social platforms when you request it.
• Process subscription payments and manage your billing plan through Creem.
• Enforce usage limits based on your subscription tier.
• Send transactional emails (account confirmation, billing receipts, processing notifications).
• Respond to support requests and troubleshoot issues.
• Detect fraud, abuse, or violations of our Terms of Service.
• Improve and develop new features by analyzing aggregated, anonymized usage patterns.
• Comply with legal obligations.

We do not use your uploaded videos or generated clips to train AI models, sell advertising, or share your content with third parties beyond what is necessary to operate the Service.

4. Third-Party Service Providers

We work with the following third-party processors who may handle your data on our behalf. Each is bound by their own privacy policy and data processing agreements.

Social platform APIs (TikTok, Instagram, X/Twitter, LinkedIn, Threads, Bluesky, Facebook, Snapchat) are accessed only when you explicitly connect an account, and only to publish content you authorize. OAuth tokens are encrypted and stored in Convex. You can revoke access at any time from your connected accounts settings.

5. Cookies & Tracking

We use the following types of cookies and similar technologies:

• Essential cookies: Required for authentication sessions (managed by Clerk) and core Service functionality. Cannot be disabled.
• Preference cookies: Remember your settings such as selected workspace or UI preferences.
• Analytics: Aggregated, anonymized data to understand how users interact with the Service. We do not use cross-site advertising trackers.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in or using the Service.

6. Data Retention

• Video files & clips: Original uploaded videos are deleted from storage once processing is complete (or within 30 days at the latest). Generated clips are retained for as long as your account is active or until you delete a project.
• Account data: Retained for the lifetime of your account and deleted within 30 days of account deletion.
• Social tokens: Deleted immediately when you disconnect a social account or delete your account.
• Billing records: Retained for up to 7 years as required by financial regulations, even after account deletion.
• Logs: Server and error logs retained for up to 90 days for debugging and security purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. To delete your account, you may also do so directly from your account settings.

8. International Data Transfers

ShortPurify is operated from the United Kingdom. Our third-party processors (Convex, Cloudflare, Clerk, Creem, Anthropic) may store and process data in the United States or other countries. Where data is transferred outside the EEA or UK, we rely on Standard Contractual Clauses or equivalent mechanisms to ensure adequate protection.

9. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in the EU). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete it promptly.

10. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive fields (OAuth tokens, API keys), access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities as required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or an in-app notice. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.