Last updated: 28 June 2026
ShortFlow ("we", "us", or "our") operates the ShortFlow platform at short-flow.vercel.app. This Privacy Policy explains how we collect, use, and protect your information when you use our service. By using ShortFlow, you agree to the collection and use of information in accordance with this policy.
We collect the following information: • Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google. • Client data: Information you enter about your clients (names, niches, tone preferences, notes) is stored to provide the service. • YouTube data: When you connect a YouTube channel, we access channel statistics, video performance data (views, likes, comments), and the ability to upload videos. We access only the data necessary to provide ShortFlow's features. • Usage data: We may collect information on how you use the service to improve it.
ShortFlow's use of Google user data is limited to the following purposes: • Authentication: We use your Google account to verify your identity and provide secure access to your account. • YouTube channel analytics: We access your connected YouTube channel's video performance data (views, likes, comments) to display performance reports and help the AI generate better metadata packages. • YouTube video uploads: When you use the auto-posting feature, we upload videos to your connected YouTube channel on your behalf. We do not sell, share, or transfer your Google or YouTube data to third parties. We do not use your Google or YouTube data for advertising purposes. Data is used solely to provide and improve ShortFlow's features.
Your data is stored securely using industry-standard practices: • Authentication tokens (including YouTube access tokens) are stored encrypted in our database. • We use Vercel's infrastructure, which provides enterprise-grade security. • YouTube access tokens are used only when needed to perform actions you explicitly request (fetching stats or uploading videos) and are never shared with third parties. • We retain your data for as long as your account is active. You can request deletion at any time by contacting us.
ShortFlow uses the following third-party services: • Google OAuth and YouTube Data API v3: For authentication and YouTube channel access. • Anthropic Claude API: To generate metadata packages from transcripts. Transcripts you paste are sent to Anthropic's API for processing. • Stripe: For payment processing. We do not store your payment card details. • Vercel: For hosting and infrastructure. • Upstash (Redis): For secure token storage.
You have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your data. • Disconnect your YouTube channel at any time through the ShortFlow dashboard, which removes our access to your channel data. • Revoke ShortFlow's access to your Google account at any time through your Google Account settings at myaccount.google.com/permissions. To exercise any of these rights, contact us at the email below.
We retain your account data and client information for as long as your account is active. YouTube tokens are refreshed automatically and can be revoked at any time. If you delete your account or disconnect a YouTube channel, the associated tokens are permanently deleted from our systems.
ShortFlow is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of ShortFlow after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or our data practices, please contact us at: ShortFlow Email: azougho@gmail.com