shotcast Privacy Policy

This Privacy Policy explains how shotcast ("the Service") collects, uses, and protects information when you use it to edit and publish short-form videos to third-party platforms, including Google / YouTube.

• Media you provide: images and videos you upload, and the videos the Service renders from them.
• Connected account data (including Google user data): when you connect YouTube (or another platform such as TikTok or Instagram), we receive OAuth access and refresh tokens and a basic account / channel identifier needed to publish on your behalf. For YouTube, this may include channel identity needed to display which channel will receive an upload.
• Operational data: project metadata, publish job status, and audit logs used to run the Service.

We use your information solely to provide or improve the Service's user-facing features: to render videos, to publish the content you explicitly request to your own connected accounts, and to show you the status of your projects. We do not sell your personal information or Google user data. We do not use Google user data for advertising, credit scoring, or training AI / ML models.

Security procedures are in place to protect the confidentiality of your data, including Google user data and OAuth credentials obtained through Google APIs.

• Encryption: We use encryption to protect your information. Data in transit is protected with TLS / HTTPS. OAuth tokens and other sensitive credentials are encrypted at rest (envelope encryption) before storage.
• Access control: Tokens are isolated per tenant. Access to credentials is restricted to the publishing component; rendering / video-processing workers have no access to OAuth tokens. We apply least-privilege access throughout the system.
• Operational safeguards: We limit storage of Google user data to what is needed to provide the publish features you request, and we remove platform tokens when you disconnect a connected account.

We share content with a third-party platform only when you choose to publish to it, and only the data required to complete that publish action. Each platform's handling of your data is governed by its own privacy policy.

You can delete your projects and disconnect any connected platform at any time. Disconnecting a platform removes its stored tokens. For full instructions and to request deletion of your data, see our Data Deletion Instructions or contact us at support@shotcast.app.

You may revoke the Service's access from within the Service or directly from the platform's account settings (for example, your Google, TikTok, or Meta account security pages).

We may update this Privacy Policy from time to time. Material changes will be reflected by the "Last updated" date above.

For privacy questions, contact us at support@shotcast.app.