Last updated: March 8, 2026

Information We Collect

When you use Short Cut Creator, we may collect the following information:

• Account information: email address and password (if you create an account)
• Payment information: processed securely by Stripe. We never see, store, or have access to your full card number.
• Usage data: videos you process, shorts you create, feature usage, and interactions with the service
• Device information: browser type, IP address, and device identifiers for security and abuse prevention
• Platform connections: when you connect third-party accounts (YouTube, TikTok, Google Drive, Dropbox, etc.) for publishing, we store encrypted authentication tokens that allow the service to upload on your behalf. These tokens are encrypted at rest using industry-standard AES-256 symmetric encryption and are never stored in plaintext. You can disconnect any platform at any time, which immediately revokes and deletes the stored token.

How We Use Your Information

• To provide and operate the Short Cut Creator service
• To process payments and manage subscriptions
• To prevent abuse, fraud, and unauthorized access
• To improve the service and fix issues
• To communicate important service updates

Payment Processing

All payment processing is handled by Stripe. When you subscribe to a paid plan, your payment information is collected and processed directly by Stripe. We receive only a confirmation of payment and your subscription status. We do not store credit card numbers or financial account details on our servers.

Data Storage and Security

Your data is stored on encrypted servers with AES-256 encryption at rest. We use SSL/TLS encryption for all data in transit. Video content is processed on secure cloud GPU infrastructure that handles only the rendering task — workers do not retain your content after processing is complete. All database connections require SSL. Platform authentication tokens are encrypted with a dedicated encryption key separate from other application secrets. Your project files and rendered videos are accessible only to your account.

Data Retention

Account data is retained as long as your account is active. If you cancel your subscription and your account becomes inactive, associated project data may be deleted after a period of inactivity. Free tier sessions and their data are subject to cleanup after a period of inactivity. Video content on cloud processing workers is temporary and is automatically deleted after rendering is complete.

Third-Party Services

We use the following third-party services to operate Short Cut Creator:

• Stripe — payment processing. Your payment details are handled entirely by Stripe and never touch our servers. See Stripe's Privacy Policy.
• YouTube API — video retrieval and upload on your behalf when you connect your YouTube account. Subject to YouTube Terms of Service and Google Privacy Policy.
• Google Drive API — file storage when you connect your Google Drive account. Subject to Google Privacy Policy.
• TikTok API — video upload when you connect your TikTok account. Subject to TikTok Terms of Service and TikTok Privacy Policy.
• Dropbox API — file storage when you connect your Dropbox account. Subject to Dropbox Privacy Policy.
• AI language model providers — we send video transcripts (text only, not video or audio) to AI services to identify clips, generate captions, and create metadata such as titles and descriptions. No personally identifiable information is included in these requests.
• Cloud infrastructure providers — video rendering and transcription are performed on secure, ephemeral cloud GPU workers. These workers process your content temporarily and do not retain it after the task is complete.
• Amazon Web Services (AWS) — encrypted database hosting and secure file transfer between processing stages.

When you connect a third-party platform, we request only the minimum permissions necessary to upload content on your behalf. We do not access your followers, messages, analytics, or other account data beyond what is required for publishing. You can review and revoke these connections at any time from the Publish page.

Google User Data

Short Cut Creator's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect your YouTube or Google Drive account, we access only the data necessary to upload content on your behalf. Specifically:

• YouTube API: we use your authorization to upload videos to your channel. We access your channel name for display purposes only.
• Google Drive API: we use your authorization to save files to your Drive when you choose to export.

We do not share, transfer, or disclose your Google user data to any third parties. Your Google authentication tokens are stored encrypted (AES-256) on our servers and are used solely to perform actions you explicitly request (uploading videos, saving files). We do not use Google user data for advertising, analytics, or any purpose other than providing the Short Cut Creator service to you. You can revoke access at any time through your Google Account permissions or from within Short Cut Creator.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at the email address below. If you delete your account, we will remove your personal data and project files from our systems. To request deletion of data associated with your Instagram or Facebook account, please contact us and we will process your request within 30 days.

Cookies

We use essential cookies to maintain your session and authentication state. We do not use advertising or third-party tracking cookies.

Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via the service.

Contact

For privacy-related questions, contact us at contact@shortcutcreator.com.