Privacy Policy

Who we are

Shortic is operated by Reshaped, an auto-entrepreneur registered in France. We are the data controller for the personal data described in this policy.

For any question about this policy, or to exercise any of the rights below, write to [email protected].

What we collect

• Account information. Your name and email address. If you sign in through another provider, we receive your name, email address and profile picture from that provider.
• Content you upload. The videos and other files you add to a project, and the material we produce for you from them.
• Billing information. Your plan and your purchase history. Card details are handled by our payment processor and never reach our systems.
• Usage information. How you use the service, and technical information such as your IP address, browser and device.

Why we use it, and on what legal basis

We do not sell your personal data, we do not use your content to train artificial intelligence models of our own, and we do not make decisions about you by automated means that produce legal effects or similarly significant effects.

Your content is yours

You keep all rights in the content you upload and in what you create with it. We use it only to provide the service to you, and we do not publish it, share it beyond the service providers described below, or use it to promote Shortic.

Who we share it with

We use a small number of service providers who process personal data on our behalf and only on our instructions. They fall into these categories:

• Cloud hosting and storage providers, who store your content and run our infrastructure.
• AI service providers, who process content you submit in order to produce the results you asked for.
• Payment providers, who take payment and handle card details.
• Analytics providers, who help us understand how the service is used.

We may also disclose personal data where the law requires it, or to establish or defend legal claims. If our business is transferred to another owner, personal data may transfer with it, and we will tell you before that happens.

You are entitled to know which providers we use. Ask us at [email protected] and we will send you the current list.

International transfers

Some of our providers are established outside the European Economic Area, mainly in the United States. Where personal data is transferred outside the EEA, we rely on the European Commission’s standard contractual clauses, on an adequacy decision, or on another safeguard permitted by the GDPR. You can ask us for details of the safeguard that applies.

How long we keep it

• Your content - until you delete it or close your account. Deleting a project deletes the files behind it, not just the entry in your list.
• Your account information - until you close your account.
• Accounting records - for as long as French law requires us to keep them, currently ten years. This is the one category we cannot delete on request.
• Usage and analytics information - for a limited period, and no longer than fourteen months.

Cookies

Essential cookies keep you signed in and keep the service secure. They are necessary for the service to work, so they do not require your consent.

We do not set analytics cookies. Our analytics providers are configured to store nothing on your device - no cookies, no identifiers - so what we receive is aggregate traffic and event counts rather than a record of an individual. That is why you are not asked to accept anything.

We do not use advertising cookies and we do not permit tracking of you across other websites.

Your rights

Under the GDPR you have the following rights over your personal data. Exercising them is free, and we will respond within one month.

• Access - to know what we hold about you, and receive a copy.
• Rectification - to have inaccurate data corrected.
• Erasure - to have your data deleted. You can do most of this yourself from within the service.
• Portability - to receive your data in a structured, machine-readable format, or have it sent to another provider.
• Restriction - to have processing paused while a question about it is resolved.
• Objection - to object to processing we carry out on the basis of our legitimate interests.
• Withdrawal of consent - at any time, without affecting processing carried out before you withdrew it.

Write to [email protected] and tell us which right you wish to exercise. You also have the right to lodge a complaint with the CNIL, the French supervisory authority, at cnil.fr.

Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss and misuse. No service can be completely secure, and we ask you to keep your account credentials to yourself.

Children

Shortic is not intended for people under 15, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy. If a change is significant we will update the date above and notify you before it takes effect.