Privacy policy

Controller

NewGenesis (EI), reachable at [email protected].

Data we process

Account: email, name and picture (Google), language, country inferred from your IP at visit time (not stored, used to pick the language).

Usage: imported videos, transcripts, clips, settings, posting history.

Connected social accounts: id, username, encrypted access tokens (Supabase Vault).

Payments: handled by Stripe; ShortCup never sees card numbers.

Analytics (PostHog, EU): only after consent.

Free-trial fraud prevention: a random id (sc_tid, stored in your browser), a technical device fingerprint and your IP address are turned into irreversible keyed hashes (HMAC) to limit the free trial to one per person. Hashes are kept 12 months, then deleted.

Purposes and legal bases

Contract (provide the service), legitimate interest (security, fraud prevention, Cloudflare Turnstile), consent (analytics, promotional emails), legal obligation (invoicing).

Processors

Supabase (database, EU), Cloudflare (hosting, security, storage), Stripe, Resend, ElevenLabs, PostHog EU, Google / TikTok / Meta (sign-in and posting at your request).

Retention

Account: until deletion. Source videos: 30 days after processing. Invoices: 10 years. Security logs: 12 months.

Your rights

Access, rectification, erasure, portability, objection, restriction: [email protected]. You may complain to your data protection authority (CNIL in France).