Privacy Policy

1 Overview

AutoShorts Pro ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website (autoshorts.shop) and mobile application.

We comply with applicable data protection laws, including the California Consumer Privacy Act (CCPA) and, where applicable, the EU General Data Protection Regulation (GDPR).

🔒 Our commitment: We never sell your personal data. We collect only what's necessary to provide the Service.

2 Data We Collect

Data Type	What We Collect	Why
Account Data	Name, email address, profile photo (from Google Sign-In)	Authentication & account management
Usage Data	Videos generated, topics, settings, feature usage	Service delivery & improvement
Video Content	Topics, scripts, generated videos, thumbnails	Core service functionality
Social Tokens	Encrypted OAuth access tokens for connected platforms	Publishing videos on your behalf
Payment Data	Billing details (processed by Stripe — we don't store card numbers)	Subscription management
Device & Log Data	IP address, device type, OS, app version, crash logs	Debugging & security
Voice Input	Voice commands transcribed to text (not stored as audio)	Voice AI assistant feature

3 How We Use Your Data

We use your data to:

Provide the Service — generate videos, publish to platforms, manage your account
Improve AI quality — aggregate, anonymized usage patterns help us improve our models (never individual videos)
Send notifications — job completion, approvals, and important account updates (opt-out available)
Billing — manage subscriptions and process payments via Stripe
Security — detect and prevent fraud, abuse, or unauthorized access
Legal compliance — respond to lawful requests and enforce our Terms

We do not use your data to train third-party AI models or sell it to advertisers.

4 Third-Party Services

AutoShorts Pro integrates with trusted third-party providers. Each has their own privacy policy:

Provider	Purpose	Data Shared
Google Firebase	Auth, database, hosting	Account data, usage logs
Google Gemini AI	Script writing, AI assistant	Topics, prompts (no PII)
ElevenLabs	Voice narration	Script text only
Kling AI / Google Veo	Video generation	Prompts (no PII)
Stripe	Payment processing	Billing info (PCI-compliant)
Pexels / Pixabay	Stock footage	Search queries only

5 TikTok & Platform OAuth Data

When you connect TikTok or other social media accounts, AutoShorts Pro:

Receives an OAuth access token from the platform (e.g., TikTok) after you authorize access
Stores your access token in AES-256 encrypted form in Google Cloud Firestore
Uses the token only to publish videos you explicitly trigger from the App
Never reads, makes copies of, or sells your TikTok content or followers data
Does not access TikTok account features beyond video publishing permissions

Revoking Access: You can disconnect any platform at any time from the Profile screen in the App. Disconnecting deletes the stored token immediately.

🔒 TikTok specifically: We access only the video.upload and video.list scopes. We do not access your inbox, followers, or personal profile data.

6 Data Storage & Security

All data is stored on Google Cloud infrastructure (us-central1 region). We implement the following security measures:

Encryption at rest — all Firestore data and Cloud Storage files are encrypted by Google
Encryption in transit — all connections use TLS 1.3
Token encryption — OAuth tokens are encrypted with AES-256 before storage
Secret management — API keys and sensitive config stored in Google Cloud Secret Manager
Access control — Firebase security rules restrict data access to account owners only
Audit logging — all administrative access is logged

7 Data Retention

Account data — retained while your account is active plus 30 days after deletion
Generated videos — retained in Cloud Storage for 90 days, then deleted (or as long as your account is active)
OAuth tokens — deleted immediately when you disconnect a platform
Payment records — retained 7 years for tax/legal compliance
Crash/error logs — retained 30 days

8 Your Rights

Depending on your location, you may have the following rights:

Access — request a copy of data we hold about you
Correction — request correction of inaccurate data
Deletion — request deletion of your account and associated data
Portability — request your data in a machine-readable format
Opt-out — opt out of marketing communications at any time
Restriction — request we limit processing of your data in certain circumstances

To exercise any right, email privacy@autoshorts.shop. We respond within 30 days.

9 Children's Privacy

AutoShorts Pro is not intended for children under 13 years of age (16 in the EU/UK). We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

10 Cookies & Tracking

Our website uses minimal cookies:

Essential cookies — authentication session tokens (required for login)
Analytics — Firebase Analytics (anonymized, aggregated — no cross-site tracking)

We do not use advertising cookies, third-party tracking pixels, or sell data to ad networks. You can disable cookies in your browser settings, though some features may not function correctly.

11 Policy Changes

We may update this Privacy Policy from time to time. When we make material changes, we will:

Update the "Last updated" date at the top of this page
Send an in-app notification or email to active users
Provide at least 14 days notice before significant changes take effect

Continued use of the Service after changes constitutes acceptance of the updated Policy.

Table of Contents