Privacy Policy
Last updated: October 17, 2026
At AutoShort.org ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our AI video generation platform.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Name (if provided)
- Authentication credentials
- Profile information
- If you sign in with Google: the email address, name and profile picture Google shares with us
1.2 Content Data
When you use our service, we store:
- Video scripts and titles you create
- Generated videos and voiceovers
- Project settings and preferences
- Series and campaign configurations
1.3 Technical Data
To provide, secure, and improve our service, we collect technical and product usage data:
- Browser, device, and operating system information
- Page and screen views, feature interactions, and referral information
- Performance, diagnostic, and error data
- Session recordings used to understand and improve product experience
- Session data (to keep you logged in)
We use PostHog for product analytics. For signed-in users, analytics events may be associated with an internal account identifier so we can understand feature usage and troubleshoot problems.
1.4 Payment Information
Purchases are processed by third-party payment providers or merchants of record. Depending on the platform and transaction, these may include Polar or Stripe for web purchases and Apple or Google for in-app purchases. The provider responsible for your transaction is identified at checkout and on your receipt. We do not store full payment card details; the provider processes payment and billing information under its own terms and privacy policy.
2. How We Use Your Information
We use your information to:
- Provide and improve our AI video generation service
- Process your payments and manage subscriptions
- Send important service updates and notifications
- Provide customer support and respond to inquiries
- Analyze usage patterns to improve our platform
- Prevent fraud and ensure platform security
- Comply with legal obligations
3. Third-Party Services
We use the following third-party services:
- Payment providers and merchants of record - Polar or Stripe for applicable web purchases, and Apple or Google for applicable in-app purchases; the responsible provider is identified at checkout and on your receipt
- Whop - Checkout for applicable web purchases, and a pixel that measures visits and checkouts on our site
- PostHog - Product analytics, diagnostics, and session recording
- Google Analytics and Ahrefs Analytics - Website traffic and search-performance measurement
- Microsoft Clarity - Session diagnostics when this optional integration is enabled
- VPS Hosting - Infrastructure hosting
- VPS Storage - Video and asset storage
- ElevenLabs - AI voiceover generation
- OpenAI - Script generation and content moderation
- Pexels - Stock video content
- Creatomate - Video rendering for applicable generation workflows
- Google OAuth - Account authentication when you choose Google sign-in
- YouTube Data API - Video upload integration (if connected)
- TikTok Content Posting API - Video upload integration (if connected)
Each service has its own privacy policy governing their data collection and usage.
3.1 YouTube Data & Google API Limited Use
If you choose to connect a YouTube channel, AutoShort accesses Google user data only through these scopes, solely to provide features you request: the youtube.readonly scope to list your channel(s) and basic channel details so you can pick where to publish, and the youtube.upload scope to publish the videos you create, on your behalf, to the channel you choose.
Who we share this data with: We do not sell or rent your Google or YouTube user data, we do not use it for advertising, and we do not use it to train AI or ML models. The only parties that ever hold it are:
- Google / YouTube - the video you choose to publish is uploaded back to YouTube, under your own account.
- DigitalOcean - our hosting provider. Your connection record and access tokens are stored in our database on servers we operate there.
- Bugsly - our own error-tracking service, which we run ourselves. If a publish fails it may record the error and the channel id so we can fix it. It does not receive your access tokens or video content.
- upload-post.com - only if you choose "Connect for public auto-post". That option is a separate, clearly labelled connection that authorises upload-post.com to publish to your channel on your behalf; it is not used by the normal YouTube connection. If you never choose it, this provider receives nothing.
No one else receives it. We disclose it beyond the parties above only with your explicit consent or where the law requires it. You can disconnect the channel at any time, which deletes the stored tokens.
Limited Use: AutoShort's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access anytime in the app or at myaccount.google.com/permissions.
3.2 Facebook, Instagram and Threads (Meta) Data
AutoShort does not let you connect a Facebook Page, Instagram account or Threads account yet (Instagram shows as "Coming soon" in Settings), so today we receive no data about you from Meta.
When we add Facebook, Instagram or Threads publishing, connecting will be optional. It will give us only your Page or account ID, name, username and profile picture, and an access token for the publishing permissions you approve on Meta's consent screen. We will use them only to publish the videos you choose to the account you choose and show you the result. We will not sell this data, use it for advertising, or use it to train AI or ML models, and it will be stored only in our own database at our hosting provider. We will list the exact permissions here before the feature launches.
You can remove AutoShort from Facebook (Settings & privacy → Settings → Apps and Websites), Instagram (Settings and activity → Website permissions → Apps and websites) or Threads (Settings → Account → Website permissions) at any time. How to have any Meta data deleted is explained on our Data Deletion page.
3.3 AI Assistants You Connect (MCP)
You can connect AutoShort to an AI assistant such as ChatGPT, Claude or DeepSeek Harness through our MCP server (https://autoshort.org/api/mcp). Connecting is optional. You approve it on an AutoShort consent screen (OAuth) or by giving the assistant an API key you created. Either way, AutoShort creates or uses an API key on your account, which appears in Dashboard → API keys.
What the assistant can do: create videos on your account (this spends your credits, at the same prices as the web app), and read your videos and their status, your credit balance, your API usage and your plan.
What we receive: only what the assistant sends in its requests to us, such as a topic, a script or a product URL you asked it to use. We do not receive the rest of your conversation with the assistant. We process these requests the same way as requests you make in the AutoShort web app.
What the assistant receives: the results of the requests it makes, for example video titles, scripts, status, video URLs and your credit balance. The assistant's provider (for example OpenAI, Anthropic or DeepSeek) handles that data under its own privacy policy.
You can disconnect an assistant at any time by revoking its key in Dashboard → API keys. Requests using a revoked key are refused.
4. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encrypted data transmission (HTTPS/TLS)
- Secure database with access controls
- Regular security audits and updates
- Encrypted storage for sensitive information
- Limited employee access to personal data
Your data is stored on servers we rent from DigitalOcean in Singapore.
5. Your Rights
You have the right to:
- Access - Request a copy of your personal data
- Correction - Update or correct inaccurate information
- Deletion - Request deletion of your account and data
- Export - Download your videos and content
- Object - Opt-out of marketing communications
- Portability - Transfer your data to another service
To exercise these rights, contact us at privacy@autoshort.org. Step-by-step deletion instructions, including for data from connected platforms, are on our Data Deletion page.
6. Data Retention
We practice data minimization and only keep your data as long as necessary:
- Account data: Until you delete your account
- Generated videos: Until you delete them or close your account
- Payment records: Only as long as required by law
When you delete your account, your account data, videos and connected-account tokens are deleted as described on our Data Deletion page, which also lists the few records we must keep (such as transaction records required by law).
7. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain your session and keep you logged in
- Remember your preferences and settings
- Analyze platform usage and performance
- Prevent fraud and enhance security
You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.
8. Children's Privacy
AutoShort is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including Singapore, where our servers are, and the United States, where several of the providers listed above process data. We ensure appropriate safeguards are in place to protect your data in compliance with applicable laws.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Continued use of AutoShort after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this privacy policy or our data practices, please contact us:
Additional Rights for EU and California Residents
GDPR (EU Residents)
Under GDPR, you have additional rights including the right to lodge a complaint with your local data protection authority and the right to restrict processing of your data.
CCPA (California Residents)
California residents have the right to:
- Know what personal information is collected
- Know if personal information is sold or disclosed
- Opt-out of the sale of personal information (we do not sell your data)
- Request deletion of personal information
- Not be discriminated against for exercising these rights