Short App

short-team (also known as “Short App”) (“we”, “our”, “the Service”, “the App”) is an automated content pipeline that generates and publishes short-form video content to social media platforms on behalf of its operators.

This Privacy Policy explains what data we collect, how we use it, how we protect it, and your rights as a user. It applies to all interactions with the Service, including OAuth authorizations for YouTube, TikTok, Instagram, and Google services.

We collect only the minimum data necessary to operate the Service:

Data collected is used exclusively to:

• Authenticate API requests to connected platforms on your behalf
• Upload generated video files to YouTube, TikTok, or Instagram
• Store videos in Google Drive for review and archival
• Track publication status and basic performance metrics (views, likes)
• Display a dashboard for reviewing and managing published content

We do not use your data for advertising, profiling, or any purpose beyond operating the Service as described.

The Service integrates with the following third-party APIs. Each integration accesses only the data scopes listed:

All platform tokens are stored as environment variables on the server and are never committed to version control or exposed to the client. Video metadata is stored in MongoDB Atlas with access restricted to the application server.

Video files are stored temporarily on the server filesystem during processing and then uploaded to Google Drive. Local files are removed after a successful upload.

We implement reasonable technical measures to protect stored data, including server-side access controls and encrypted connections (TLS) to all external APIs.

Video metadata in MongoDB is retained indefinitely unless manually deleted by the operator. OAuth tokens are retained until revoked by the user or rotated by the Service’s token refresh mechanism.

You may request deletion of your data at any time by contacting us at contact@short-app.dev.

We do not sell, rent, or share your personal data with any third parties, except as required to operate the Service (i.e., transmitting content and tokens to YouTube, TikTok, Instagram, and Google Drive APIs as described above) or as required by law.

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the data we hold about you
• Rectification — request correction of inaccurate data
• Erasure— request deletion of your data (“right to be forgotten”)
• Portability — receive your data in a machine-readable format
• Objection — object to processing of your data
• Revoke OAuth consent — disconnect any platform at any time via platform settings (see Section 4)

To exercise any of these rights, contact us at contact@short-app.dev.

short-team (Short App) does not use cookies, web beacons, or any client-side tracking technologies. No analytics SDKs (Google Analytics, Mixpanel, etc.) are embedded in the Service.

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us at contact@short-app.dev and we will promptly delete it.

We may update this Privacy Policy from time to time. We will update the “Last updated” date at the top of this page. Continued use of the Service after changes constitutes acceptance of the updated policy.

For questions, requests, or concerns about this Privacy Policy: contact@short-app.dev