Privacy Policy

In short. We collect the minimum needed for the Service to work: your Google account, your billing details and the content you generate. We do not sell your data and we do not use your content to train AI models. Your prompts are sent to AI providers solely to produce what you asked for. You can exercise your rights by writing to privacy@agentshorts.app.

1. Data controller

SOFTWZI, S.A. de C.V. ("AgentShorts", "we", "us"), tax ID SOF200527QK2, with registered address at Celaya, Guanajuato, is responsible for the processing of your personal data and for how it is used.

This Privacy Policy describes what data we collect, what we use it for, who we share it with and how you can exercise your rights. It applies to https://agentshorts.app, to the application and to all associated services.

For any matter relating to personal data you can reach us at privacy@agentshorts.app.

2. Personal data we process

We do not collect more data than is necessary to provide the Service. Specifically:

We do not collect sensitive personal data — racial or ethnic origin, health status, genetic or biometric information, religious or philosophical beliefs, union membership, political opinions or sexual orientation — nor do we request it.

Do not upload sensitive data, third-party confidential information or personal data of people who have not consented to its processing. If you do, you do so at your own risk and acting as the controller of that data.

We never store your full card number or security code. That information is transmitted directly to the payment processor.

3. Purposes of processing

3.1 Primary purposes

These are necessary for the contractual relationship. Without them we cannot provide the Service:

1. Create, authenticate and administer your account.
2. Generate scripts, images, clips, voice-over, subtitles and videos according to your instructions.
3. Publish, schedule and measure your videos on the platforms you authorize.
4. Process payments, manage subscriptions and credits, issue receipts and meet tax obligations.
5. Provide technical support and respond to your requests.
6. Send operational communications: renewal notices, payment failures, credit expiry, generation completion and changes to the terms.
7. Prevent fraud, abuse and misuse; maintain the security and integrity of the platform.
8. Comply with legal obligations and respond to requests from competent authorities.

3.2 Secondary purposes

These are not necessary for the Service and you may object to them at any time without affecting your subscription:

1. Sending you commercial communications about news, features and promotions.
2. Producing aggregated, anonymized statistics to improve the product.
3. Inviting you to surveys, user research or beta programs.

To refuse consent for these purposes now, write to privacy@agentshorts.app with the subject "Secondary purposes". You can also unsubscribe from the link in any commercial email or from your account preferences. If you do not object, we will understand that you consent.

3.3 Legal bases

Depending on your jurisdiction, processing relies on: performance of the contract you enter into by accepting the Terms; your consent for the integrations you connect and for secondary purposes; compliance with legal obligations in tax and accounting matters; and our legitimate interest in security, fraud prevention and improving the Service, always balanced against your rights.

4. What we do not do with your data

• We do not sell your personal data, nor share it with third parties for behavioral advertising, in any market where we operate.
• We do not use your content, prompts or videos to train artificial intelligence models, whether our own or third parties'. We contract API service tiers with our providers that exclude the use of data for training.
• We do not routinely review your content. Human access to your content is limited to: (i) an explicit support request from you; (ii) a founded abuse or security investigation; or (iii) a legal requirement. Every access is logged.
• We do not make automated decisions producing legal effects on you. Anti-fraud and acceptable-use controls may flag an account for review, but permanent suspension always involves human assessment and a right of reply.

5. Sharing, processors and transfers

To operate the Service we share data with providers that process it on our behalf and under our instructions (processors), subject to contractual confidentiality and security obligations:

We keep this list current in this Policy. We may disclose data, without requiring your additional consent where the law permits, in the following cases: to competent authorities in compliance with the law; to our legal, accounting or audit advisors under a duty of confidentiality; and to an acquiring third party in a merger, acquisition or sale of assets, in which case we will notify you and this Policy will continue to apply until amended.

International transfers. Your data may be processed in countries other than yours, primarily the United States. Where applicable law requires it, we base these transfers on contractual data protection clauses with each provider, on the necessity of performing the contract you have entered into with us, or on your consent.

6. Cookies and similar technologies

We use only the cookies necessary for the Service to function:

We do not use advertising cookies, cross-site tracking or third-party profiling cookies. If that changes, we will update this Policy and request your prior consent through a dedicated mechanism. You can block cookies in your browser, though doing so may prevent sign-in.

7. Google and YouTube integrations

The Service uses YouTube API Services. When you connect your channel:

• We request only the permissions needed to upload videos to your channel, read basic channel information and retrieve metrics for your publications. We do not access your passwords, your Gmail or other Google services.
• Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• You are subject to the YouTube Terms of Service and to the processing described in the Google Privacy Policy.
• You can revoke our access at any time from your Google account permissions page or by disconnecting the account from the connections section of AgentShorts. On revocation we delete the stored tokens and can no longer publish or measure on your behalf; videos already published remain on your channel, under your control.
• Data obtained from the YouTube API is retained while the connection is active and deleted within 30 days of revocation, except aggregated metrics that no longer identify you.

8. Data retention

We keep each category only as long as necessary:

When you close your account we begin deletion within 30 calendar days, except for what we must retain by legal obligation, for the establishment or defense of claims, or in encrypted backups that are purged automatically within a maximum of 90 days.

9. Security

We apply administrative, technical and physical measures that are reasonable and proportionate to the risk: encryption in transit (TLS) and at rest, encryption of integration tokens, role-based access control and least privilege, authentication delegated to an identity provider, access logging, environment separation, regular backups and dependency review.

No system is infallible. If a security breach occurs that materially affects your rights, we will notify you without undue delay and inform the competent authority where the law requires, describing the scope, the data affected and the corrective measures taken.

10. Your rights

10.1 Access, rectification, cancellation and objection

You have the right to:

• Access your personal data and know the conditions of its processing.
• Rectify inaccurate or incomplete data.
• Cancel or delete your data when you consider it is not required for the stated purposes.
• Object to processing for specific purposes.
• Withdraw consent previously given.
• Request limitation of use or disclosure of your data.
• Request portability of your data in a structured, commonly used format, where applicable.

How to exercise them. Send your request to privacy@agentshorts.app stating: your full name and the email associated with the account; a document evidencing your identity or your authority to represent the data subject; a clear description of the data and the right you wish to exercise; and anything that helps us locate the data.

Timing. We will respond within a maximum of twenty (20) business days from receipt and, where the request is well-founded, give effect to it within the following fifteen (15) business days. Exercising these rights is free of charge; only shipping or reproduction costs on media you choose could be charged. If the request is incomplete, we will ask you for more information within 5 business days.

Cancellation or withdrawal may not be available where there is a legal retention obligation, an ongoing contractual relationship or an open dispute; in that case we will explain why.

10.2 United States residents

Depending on your state of residence (California, Colorado, Connecticut, Texas, Virginia, among others), you may have the right to: know what data we process and with whom we share it; access it and obtain a portable copy; correct it; request deletion; limit the use of sensitive information; and opt out of the sale or sharing of data for advertising purposes and of profiling with significant effects.

We do not sell or share personal information within the meaning of the California Consumer Privacy Act or equivalent state laws, and have not done so in the preceding twelve months. We also do not process data of people under 16.

We will not discriminate against you for exercising these rights: we will not deny you the Service, charge you different prices or provide a lower quality of service. You may exercise them by writing to privacy@agentshorts.app, or through an authorized agent who evidences their authority. We will verify your identity against the account email and respond within 45 days, extendable by a further 45 with notice. If we deny your request, you may ask for a review by replying to our email.

10.3 Latin America residents

If you reside in Argentina, Brazil, Chile, Colombia, Costa Rica, Ecuador, Peru, Uruguay or another country in the region, you have the rights of access, rectification, updating, deletion, objection, portability and withdrawal of consent provided under your local law — including LGPD in Brazil, Law 1581 of 2012 in Colombia, Law 21.719 in Chile, Law 25.326 in Argentina and Law 29733 in Peru — and you may lodge complaints with your country's supervisory authority. We handle these requests through the same channel and within the periods set by the applicable rule, or those in section 10.1 if more favorable.

10.4 Complaints

If you believe your data protection rights have been infringed, you may approach the competent authority in your country. In Mexico, the federal authority responsible for the protection of personal data held by private parties. We would appreciate hearing from you first at privacy@agentshorts.app: most issues are resolved within days.

11. Minors

The Service is intended for people aged 18 or older. We do not knowingly collect data from minors. If you become aware that a minor has provided us personal data, write to privacy@agentshorts.app and we will delete it.

12. Changes to this Policy

We may update this Privacy Policy to reflect legal, operational or technological changes. The current version is published at https://agentshorts.app/privacy with its update date.

If a change is material — new purposes, new data categories or new recipients — we will notify you by email and in-app at least thirty (30) calendar days in advance and, where the law requires it, we will seek your consent before applying it.

13. Contact

SOFTWZI, S.A. de C.V.
Tax ID SOF200527QK2
Celaya, Guanajuato
Privacy and data subject requests: privacy@agentshorts.app
Support: support@agentshorts.app