1. Introduction
ShortOpus places great importance on protecting your personal data. This privacy policy informs you about how we collect, use, share, and protect your data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.
2. Data Controller
The data controller for your personal data is:
- ShortOpus : ShortOpus
- Email : contact@shortopus.com
3. Data Collected
We collect the following data:
Identification Data
- First and last name
- Email address
- Password (encrypted)
Navigation Data
- IP address
- Browser type
- Pages visited and visit duration
- Cookies and trackers
Content Data
- Scripts and texts used to create your videos
- Generated videos
- Customization settings (voice, style, subtitles, background music)
Payment Data
- Billing information (processed by our payment processor LemonSqueezy)
- Transaction history
4. Processing Purposes
Your data is collected for the following purposes:
- Managing your user account
- Providing video creation services
- Processing payments and billing
5. Legal Basis for Processing
The processing of your data is based on:
- Contract performance: provision of ShortOpus services :
- Your consent: non-essential cookies, newsletter :
- Our legitimate interest: service improvement, security :
- Legal obligations: billing, accounting :
6. YouTube API Services & Google Data
ShortOpus uses the YouTube API Services to allow you to publish videos directly to your YouTube channel. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.
YouTube Data We Collect
When you connect your YouTube account via Google OAuth, we collect and store:
- YouTube channel information: channel name, channel ID, and channel thumbnail image
- OAuth tokens: access token and refresh token (encrypted), used solely to upload videos on your behalf
How We Use YouTube Data
- Display your connected YouTube channel name and thumbnail in your account settings
- Upload videos you create with ShortOpus to your YouTube channel at your chosen scheduled date
- Refresh access tokens to maintain your connection
We do not access your existing YouTube videos, playlists, comments, or analytics. We only use the youtube.upload and youtube.readonly scopes.
YouTube Data Retention & Deletion
- Your YouTube connection data is retained as long as your account is active and your YouTube channel is connected
- When you disconnect YouTube from your account settings, all associated tokens and channel data are immediately deleted from our servers
- When you delete your ShortOpus account, all YouTube connection data is automatically deleted
Revoking YouTube Access
You can revoke ShortOpus's access to your YouTube account at any time by:
- Clicking "Disconnect" in your ShortOpus account settings
- Visiting your Google Account Permissions page and removing ShortOpus Google Account Permissions
7. Data Recipients
Your data may be shared with:
- OpenAI: AI script generation and image processing (openai.com) :
- ElevenLabs: AI voice synthesis (elevenlabs.io) :
- Replicate: AI image and video generation (replicate.com) :
8. Retention Period
Your data is retained for the following periods:
- Active account: throughout the duration of service use :
- Closed account: 30 days after closure (except legal obligations) :
- Billing data: as long as legally required :
- Analytics cookies: 13 months maximum :
- Connection logs: 12 months :
9. Your Rights
In accordance with GDPR, you have the following rights:
Right of access
You can request a copy of all data concerning you.
Right to rectification
You can request correction of inaccurate or incomplete data.
Right to erasure
You can request deletion of your data (under certain conditions).
Right to restriction
You can request restriction of processing of your data.
Right to portability
You can receive your data in a structured and commonly used format.
Right to object
You can object to the processing of your data for reasons relating to your particular situation.
Right to withdraw consent
You can withdraw your consent at any time for processing based on it.
To exercise your rights, contact us at contact@shortopus.com. We will respond within one month.
10. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of sensitive data (SSL/TLS)
- Secure authentication
- Strict data access control
- Incident monitoring and detection
- Regular backups
- Security audits
11. International Transfers
Some of our service providers may be located in countries with different data protection laws. We ensure appropriate safeguards are in place to protect your data in accordance with applicable regulations.
12. Cookies
We use cookies to improve your experience. For more information on our use of cookies, see our Cookie Policy.
13. Minors
Our services are not intended for persons under 16 years of age. If you are aware that a minor has provided us with personal data, please contact us immediately.
14. Modifications
We may modify this privacy policy at any time. Significant changes will be notified to you by email or via a notification on the platform. The last update date is indicated at the top of this page.
15. Contact
For any questions regarding this privacy policy or to exercise your rights:
contact@shortopus.com