Privacy Policy

1. Information We Collect

• Account Information — name, email, and password
• Reference Photos — photos you upload to create your AI Clone
• Generated Content — AI images and videos we create for you
• Usage Data — features used and session information
• Payment Information — processed securely via Stripe; we never store your full card number
• Device Information — device type, OS, and identifiers

2. How We Use Your Information

• Generate AI images and videos from your uploaded reference photos
• Provide, maintain, and improve the Shotscript platform
• Process payments and manage your subscription
• Send transactional emails (confirmations, resets, receipts)
• Respond to support requests
• Monitor usage to enforce our Terms of Service

We do not sell your personal data or reference photos to third parties.

3. Your Photos & AI Content

• Photos are stored securely via Cloudflare Images and Vercel Blob Storage
• Photos are used exclusively to generate your personal AI content
• Your photos are never shared with other users or used to train shared models without consent
• You retain ownership of all AI-generated content you create
• You can delete your photos and content at any time from your account settings

4. Third-Party Services

• Stripe — payment processing
• Supabase — database and authentication
• Replicate & fal.ai — AI image generation
• Kling AI / Runway — AI video generation
• Cloudflare / Vercel — file storage and API hosting
• Resend — transactional email delivery

5. Data Retention

• Reference photos deleted within 30 days of account deletion
• Generated content deleted within 30 days of account deletion
• Billing records retained up to 90 days for compliance, then permanently deleted

6. Your Rights

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Withdraw consent for photo processing at any time
• Export your data in a portable format

7. Children's Privacy

Shotscript is not intended for users under 13. We do not knowingly collect data from children under 13 and will delete it immediately if discovered.

8. Security

We use HTTPS/TLS encryption, JWT-based authentication, and access-controlled cloud storage to protect your data. No system is completely risk-free, but we follow industry best practices.

9. Policy Changes

We may update this policy periodically. Significant changes will be communicated via email or in-app notification. Continued use of Shotscript constitutes acceptance.

10. Contact Us