Privacy Policy

1. Data Controller

The data controller is the publisher of Shorzy (https://shorzy.app), an individual entrepreneur established in France.

Contact: contact@shorzy.app

2. Data We Collect

• Account data: email address, account creation date
• Usage data: submitted YouTube URLs, generated scripts, history
• Billing data: payment history via Stripe (no card data stored on our servers)
• Technical data: IP address, browser type, access logs

3. Purposes & Legal Basis

• Service delivery — contract performance (GDPR art. 6.1.b)
• Payment processing — contract + legal obligation (GDPR art. 6.1.b & 6.1.c)
• Service improvement & security — legitimate interest (GDPR art. 6.1.f)

4. Retention Periods

• Account data: duration of account + 3 years after last activity
• Billing data: 10 years (statutory accounting requirement)
• Technical logs: 12 months

5. Sub-processors

• Supabase — authentication & database, GDPR-compliant
• Stripe — payments, PCI DSS & GDPR-compliant
• Vercel — hosting, transfers covered by Standard Contractual Clauses
• Anthropic — AI generation, no data retention per their API terms
• Supadata — YouTube transcript extraction

6. Your Rights (GDPR)

You have the right to access, rectify, erase, restrict, port, and object to the processing of your data. To exercise these rights, contact us at contact@shorzy.app. If your complaint is unresolved, you may contact the CNIL(France's data protection authority) at www.cnil.fr.

7. Cookies

Shorzy uses only strictly necessary cookies for service operation (Supabase authentication, Stripe payment security). No third-party advertising or tracking cookies are used.