At Shortcast, your privacy matters. We only collect and process the information needed to provide and secure the reposting service. We do not sell your personal information.

1. Information We Collect

When you use Shortcast, we collect:

• Account data – such as your email address and subscription status.
• Social account data – such as your username, channel or account ID, and OAuth access and refresh tokens from platforms you connect.
• Video and repost information – such as video IDs, titles, URLs, thumbnails, upload status, and platform responses needed to manage your reposts.
• Usage data – limited technical data like page visits or interactions (via Cloudflare Analytics) to improve our product.

2. How We Use Your Data

We use your data to:

• Connect your social media accounts securely.
• Upload and repost your videos to the platforms you choose.
• Keep your connections working by refreshing OAuth tokens where the platform supports it.
• Maintain and improve the Shortcast service.

We only use this data to provide, secure, and improve the Shortcast features you use.

3. YouTube API Services

Shortcast uses YouTube API Services to connect the YouTube account you authorize and to upload videos to that account at your request. Our use of information received from Google APIs is also subject to the Google Privacy Policy.

Shortcast does not use the YouTube API Services to download videos from YouTube.

4. Data Sharing and Disclosure

Shortcast does not sell your Google or social media data. We transfer data to the platforms you choose when needed to perform an upload, and trusted service providers such as Supabase and Cloudflare process limited data on our behalf to host, secure, and operate Shortcast. We may also disclose information when required by law or necessary to protect the rights and safety of our users.

5. Data Retention, Revocation, and Deletion

OAuth tokens are retained while the relevant social account remains connected so Shortcast can perform the actions you authorize. For connected YouTube accounts, Shortcast validates the authorization at least once every 30 days. If the authorization is revoked or can no longer be refreshed, we delete the associated stored YouTube API data. Operational repost records are retained while your Shortcast account is active unless you request deletion or we need to keep limited information for security, fraud prevention, or legal obligations.

• You can disconnect YouTube from the Channels page in Shortcast. Shortcast then programmatically revokes the Google authorization and immediately deletes the associated locally stored YouTube API data, including OAuth tokens and stored YouTube identifiers and links.
• You can revoke Shortcast’s access to your Google account from Google Account permissions.
• You can request deletion of your Shortcast account and associated data at any time by emailing [email protected] from the connected email address. We process verified deletion requests as soon as possible and within 7 days.

Disconnecting or deleting data from Shortcast does not delete videos or other data held by YouTube. You can manage that data directly in YouTube.

6. Data Protection and Security

We take data security seriously.

• All communication between you and Shortcast is protected with HTTPS encryption.
• We regularly review our systems to ensure your data remains protected.

7. Cookies

We use cookies to remember your login state for a better user experience. You can disable cookies in your browser, but some features may stop working properly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are significant, we’ll notify you by email or through our app. The latest version will always be available at shortcast.io/privacy-policy.

9. Contact Us

If you have questions or want to delete your data, contact us at [email protected]