Skip to main content
Legal

Privacy Policy

Last updated April 16, 2026. We take privacy seriously — this page explains, in plain English, what we collect and why.

1. Who we are

Shortlify SAS (“Shortlify”, “we”, “our”) is the entity responsible for processing your personal data when you use shortlify.art. We are headquartered at 16 rue Saint-Sabin, 75011 Paris, France.

2. What we collect

  • Account data: email, name, profile picture — obtained from Google when you sign in.
  • Usage data: the prompts you write, the videos you generate, queue and billing information.
  • Technical data: IP address, browser and device type, for abuse prevention and analytics.
  • Payment data: processed by Stripe. We never see or store your full card number.

3. What we do with it

We use your data to deliver and improve the service, render videos, process payments, send you product updates, and prevent abuse. We do not sell your data, and we do not use your prompts or storyboards to train public AI models.

4. Legal basis (GDPR)

Processing is based on: (a) the contract between you and Shortlify for the delivery of the service; (b) our legitimate interest in securing the service and improving the product; (c) your consent for optional communications such as the newsletter.

5. Who we share data with

  • Cloud infrastructure: Cloudflare (R2 storage, CDN)
  • Authentication: Google (OAuth)
  • Payments: Stripe
  • Email: Resend / Postmark for transactional emails

All sub-processors are bound by data-processing agreements compliant with GDPR.

6. How long we keep your data

Account and billing data: as long as your account exists, plus 10 years for legal obligations on invoices. Generated videos: stored in your library until you delete them, or up to 30 days after account closure.

7. Your rights

You have the right to access, correct, delete, port, or object to the processing of your data. You can exercise these rights at any time by emailing contact@shortlify.art.

8. International transfers

Some of our sub-processors operate outside the EU. Transfers are covered by Standard Contractual Clauses (SCCs) as approved by the European Commission.

9. Cookies & analytics

We use essential cookies for authentication (so you stay signed in between pages) and optional analytics cookies (Google Analytics 4) that help us understand aggregate usage of the site. Analytics cookies are loaded only after you grant consent via the banner on your first visit. You may refuse them, and you can revoke your choice at any time by clearing your browser storage for this site or contacting us.

When enabled, Google Analytics uses IP anonymization and receives no personal identifiers from Shortlify (we do not send your email or account details). The data is processed by Google LLC under the EU Standard Contractual Clauses. See our Cookie Policy for the full list of cookies and their purposes.

10. Changes to this policy

If we make material changes, we will notify you by email and at the top of this page. Minor typographic changes may happen without notice.

11. Contact

Questions or complaints? Email contact@shortlify.art. You also have the right to lodge a complaint with your local supervisory authority (CNIL in France).