1. Introduction
Welcome to FlowShorts ("we," "our," or "us"). We operate the website www.flowshorts.app and provide AI-powered video generation and social media auto-posting services.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the platform.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Name
- Profile picture (from Google OAuth)
- Google account ID (for authentication)
- Timezone
2.2 Social Media Account Data
When you connect your social media accounts (YouTube, TikTok, Instagram), we collect:
- Platform username and display name
- Profile image URL
- Account connection status
- OAuth tokens (securely stored via our third-party provider)
2.3 Video Generation Data
When you use our video generation service, we collect and process:
- Video topics and prompts you provide
- Generated scripts and content
- Video files and thumbnails
- Titles, descriptions, and tags
- Scheduling preferences
2.4 Billing Information
Payment processing is handled by our third-party payment processor, DodoPayments. We store:
- Transaction IDs and payment status
- Subscription plan and billing cycle
- Invoice history
We do not store your credit card numbers or bank account details. This information is processed directly by DodoPayments in accordance with their privacy policy.
2.5 Automatically Collected Information
When you access our platform, we automatically collect:
- Device information (browser type, operating system)
- IP address and approximate location
- Pages visited and features used
- Referral source and advertising identifiers (Facebook Click ID, Google Click ID)
- Session duration and interaction patterns
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our video generation services
- Generate AI-powered video content based on your topics and preferences
- Post videos to your connected social media accounts
- Process your subscription payments and manage your account
- Send you transactional emails (video completion, billing notifications)
- Provide customer support
- Analyze usage patterns to improve our services
- Measure advertising effectiveness and attribution
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Third-Party Services
We use third-party services to provide our platform. These services may have access to certain information as described below:
4.1 AI Content Generation
- OpenRouter/Google Gemini: Processes video topics to generate scripts
- ElevenLabs: Generates voice narration from scripts
- fal.ai: Generates images for video scenes
- Fireworks.ai: Processes audio for caption generation
These AI services process your content to generate videos. The content you submit may be processed on their servers. We recommend reviewing their respective privacy policies.
4.2 Social Media Posting
- PostForMe: Handles OAuth authentication and posting to YouTube, TikTok, and Instagram
4.3 Infrastructure & Storage
- Supabase: Database hosting for user accounts and data
- Cloudflare R2: Video and thumbnail file storage
- Vercel: Website hosting
4.4 Payments
- DodoPayments: Subscription billing and payment processing
4.5 Analytics & Tracking
- PostHog: Product analytics and feature usage tracking
- Meta (Facebook) Pixel: Advertising conversion tracking
- Google Analytics/Ads: Website analytics and conversion tracking
- Vercel Analytics: Performance monitoring
4.6 Customer Support
- Crisp: Live chat support widget
- Resend: Transactional email delivery
5. Data Storage and Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication via Google OAuth and JWT tokens
- Row-level security on database tables
- Secure webhook signature verification for payments
Your data is stored on servers located in the United States and may be transferred to and processed in countries where our service providers operate.
6. Data Retention
We retain your information for as long as your account is active or as needed to provide services:
- Account data: Retained until you delete your account
- Video files: Retained until you delete them or close your account
- Billing records: Retained for 7 years for legal and tax compliance
- Analytics data: Aggregated and anonymized after 24 months
After account deletion, we may retain certain information as required by law or for legitimate business purposes.
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request your data in a portable format
- Objection: Object to certain processing of your data
- Withdraw consent: Withdraw consent where processing is based on consent
To exercise these rights, please contact us at [email protected]
8. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Keep you logged in to your account
- Remember your preferences
- Analyze how you use our platform
- Measure advertising effectiveness
You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our platform.
9. Children's Privacy
Our platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at: