Privacy Policy
The short version
- We collect what we need to sign you in, make your films and take payment.
- AI providers process what you type and upload, so they can make your films.
- We don't sell your data, show ads, or use tracking cookies.
- You can see, download or delete your data. Just email us.
1. Who we are
ShortEasy is run by Find Tutor LLC, Winston-Salem, North Carolina, USA. Find Tutor LLC is responsible for your personal data (the "controller"). Questions about your data: support@shorteasy.app.
2. What we collect
- Your Google account details when you sign in: your name, email address, profile picture and Google's ID for your account. We never get your Google password.
- What you make: the ideas you type; your choices and changes (scripts, hooks, captions, music, shots); pictures you upload to make a world of your own; and the films, voices, pictures and other files ShortEasy makes for you. With each film we keep a record of the requests ShortEasy sent to the AI models and what came back, so we can fix problems.
- Billing details. Stripe saves your card, directly or through a supported wallet, and your billing address on its own page. We receive and keep your Stripe customer ID, your plan with its status and dates, and your card's brand, last four digits and a payment "fingerprint" from Stripe. We use the fingerprint to help prevent repeat free trials; for wallets, it may identify a device's card token rather than the physical card. We never see your full card number.
- Free-trial protection: we keep a record of your trial claim, a random browser identifier stored in an essential security cookie, and a keyed hash of your network address. The trial checks do not store your raw IP address or build a device fingerprint. These signals help limit repeat claims across accounts.
- How you use ShortEasy: the films you make and what each cost us to make, when you joined and last visited, and changes to your account, such as when you joined, which version of our terms you agreed to, or when your plan changed.
- Messages you send us by email.
We keep first-party sign-up health counts: public page loads, Google sign-ins started, new registrations, returning sign-ins and unsuccessful attempts. A temporary anonymous reference links a sign-in attempt to its result. These records contain no email addresses, account IDs, IP addresses, full URLs, user agents or Google credentials. Page counts include repeat visits and are not a count of unique people. We don't use third-party analytics or advertising trackers.
3. How we use it, and why
For people in the EU and UK, the legal reason for each use is in italics.
- To run ShortEasy for you: sign you in, make and keep your films, and show your plan and films left. Needed to provide the service you signed up for (our contract with you).
- To take payment, provide your free film, and prevent repeat free trials. Our contract with you, and our legitimate interest in preventing abuse of the free film.
- To keep ShortEasy secure and working, fix problems and make it better. Our legitimate interests.
- To answer your messages. Our legitimate interests, or our contract with you.
- To keep tax and accounting records. A legal obligation.
We don't sell your personal information, share it for advertising, or use your content to train AI models.
4. Who we share it with
Public examples are your choice. Films are private by default. If you choose Publish in Examples, anyone can watch a separate copy of that video with the public title and category you select. We do not publish your account name, email, prompts or editing history. Anything visible or spoken in the video remains visible. Later edits stay private until you update the example. Stop sharing, removing the film or permanently deleting it disables its public link and removes it from the gallery. This cannot recall copies someone already saved.
We share your data only with the companies that run ShortEasy for us, and only what each one needs:
- Google: signing you in.
- Stripe: payments, invoices and the billing page. Stripe also uses payment data to prevent fraud, and is responsible for that use itself.
- netcup (Germany): hosts our server, where your account and films are stored.
- OpenRouter (USA): passes your ideas, the research, scripts, pictures and generated narration to the AI models that research, write, plan, make and check your film. Generated narration is also transcribed to time its captions. The pictures are frames of your film, and any picture you upload to make a world of your own. Those models come from companies such as Google, ElevenLabs, HeyGen, Moonshot AI, Z.ai and Aion Labs. OpenRouter also uses Exa for web searches.
- fal (USA): runs AI models for narration in older films (ElevenLabs), moving pictures (Creatify's Boreal), and pictures for a world of your own (such as Meta's Muse, ByteDance's Seedream, FLUX and Google's image model). Those last models also receive the picture you upload for that world.
These companies process your content to make your film, under their own terms and privacy policies. ShortEasy's team, meaning the people we let into the studio to help run it, can see the films there, to help you and to keep ShortEasy working. We may also share data if the law requires it, or to protect people's rights and safety. If ShortEasy is ever sold or merged, your data may pass to the new owner, and we'll tell you first.
5. Data sent outside the EU and UK
Some of these companies are in the USA or other countries outside the EU and UK. When your data leaves the EU or UK, it is protected by safeguards those companies provide, such as the EU's Standard Contractual Clauses or the EU–US Data Privacy Framework.
6. How long we keep it
- Your account, films and their records: while your account is open. Removing a film takes it off your shelves, and you can put it back. Manage storage lets you permanently delete a project and its saved versions. This removes its live files and frees your account storage; it cannot be undone. Billing and credit records are retained, and backups are replaced within 30 days.
- When you delete your account: we delete your data within 30 days, and our backups are replaced within another 30 days. We keep only the billing records the law requires, usually for up to 7 years. Stripe keeps its own records under its own policy.
- Trial checks: network hashes are used for up to 30 days and browser hashes for up to one year, then cleared during maintenance. We retain the account’s trial-usage record while the account is open so deleting a film does not reset the offer.
- Sign-ins: a sign-in lasts up to 30 days. An unfinished sign-in is dropped after 10 minutes.
- Sign-up health counts and anonymous attempt records: retained for 90 days, with older records cleared during daily activity or maintenance.
7. Your rights
- You can download any of your films from its page at any time.
- To get a copy of the data we hold about you, correct it, or delete your account and everything in it, email support@shorteasy.app from the address you sign in with. We reply within 30 days.
- In the EU and UK, you can also object to how we use your data or ask us to restrict it. You can also complain to the data protection authority where you live.
- We don't sell personal information or use it for targeted advertising, and we won't treat you differently for using your rights.
8. Cookies and storage on your device
| Name | What it does | How long |
|---|---|---|
__Host-fk_session | Keeps you signed in. Needed for ShortEasy to work. | Up to 30 days |
__Host-fk_login | Protects your sign-in with Google. Needed for ShortEasy to work. | 10 minutes |
__Host-fk_trial | A random identifier that helps prevent repeated free-trial claims. Used for security, not advertising or analytics. | Up to one year |
| Your browser's storage | Remembers two studio choices on your device: who picks the script, and the world you last used. While you add a card on Stripe's page, it also holds the idea you typed for a moment, so it's still there when you come back. | Until you clear it |
Stripe's payment pages use Stripe's own cookies, for example to prevent fraud. We use no analytics, advertising or tracking cookies, so we don't need a cookie banner.
9. Security
Everything travels over HTTPS. We store sign-ins only in a scrambled form that can't be turned back into your sign-in, Stripe handles all card details, and only the people who run ShortEasy can get into our server. No system is perfectly secure. If a breach affects your data, we'll tell you without undue delay.
10. Children
ShortEasy is not for anyone under 18, and we don't knowingly collect children's data. If you think a child has used ShortEasy, tell us and we'll delete their data.
11. Changes to this policy
If we change this policy, we'll update the date at the top. If the change matters, we'll also tell you by email or in the studio.
12. Contact
Email support@shorteasy.app.
ShortEasy is run by Find Tutor LLC, Winston-Salem, North Carolina, USA. Questions: support@shorteasy.app