Last updated: 16 March 2026
Shortformly ("we", "us", "our") operates the Shortformly platform at app.shortformly.com. This policy describes how we collect, use, and protect your personal information.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and password (stored in hashed form). If you sign up via a third-party provider (Google, etc.), we receive the profile information you authorise.
Usage Data
We collect information about how you use the platform, including pages visited, features used, video configurations created, and rendering activity. This data helps us improve the service.
Content You Create
We store the video configurations, scripts, media assets, and rendered videos you create using the platform. This content belongs to you.
Payment Information
Payment processing is handled by Stripe. We do not store your full credit card number. Stripe provides us with a tokenised reference and basic billing details (last four digits, expiry, billing address).
Technical Data
We collect IP addresses, browser type, device information, and cookies to maintain security and improve performance.
2. How We Use Your Information
- To provide, maintain, and improve the Shortformly platform
- To process your transactions and manage your account
- To communicate with you about your account, updates, and support requests
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
3. Data Sharing
We do not sell your personal information. We share data only with:
- Service providers who help us operate the platform (cloud hosting, email delivery, payment processing, analytics)
- AI providers (for AI-powered features) — content you submit for AI processing is sent to third-party AI services. We do not send your personal account information to AI providers.
- Legal authorities when required by law or to protect our rights
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal or compliance reasons.
Rendered videos and media assets are retained for 90 days after account deletion to allow for recovery, then permanently deleted.
5. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Withdraw consent for optional processing
To exercise these rights, contact us at [email protected].
6. Cookies
We use essential cookies for authentication and session management. We use analytics cookies (which you can opt out of) to understand how the platform is used. We do not use advertising cookies.
7. Security
We protect your data using encryption in transit (TLS) and at rest, access controls, regular security audits, and secure cloud infrastructure. No system is 100% secure, but we take reasonable measures to protect your information.
8. International Transfers
Our servers are located in Australia (Sydney). If you access the platform from outside Australia or New Zealand, your data may be transferred to and processed in Australia.
9. Children
Shortformly is not intended for children under 16. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or through the platform. The "last updated" date at the top indicates when the policy was last revised.
11. Contact
For privacy-related enquiries, contact us at [email protected].