Shorz Logo

Privacy Policy

Last updated: October 2, 2026

1. Who we are

This Privacy Policy applies to the products and services ("Services") offered by Shorz, a video creation application and related websites (e.g. shorz.ai), operated by Shorz OÜ (registry code 17592849, Kooli 24-7, 50409 Tartu, Estonia) ("we", "us", "our"). We are the controller of the personal data described here. For questions, contact us at info@shorz.ai.

2. Information we collect

We may collect:

  • Contact and identity: name, email address
  • Billing and payment: payment-related information processed by Stripe (e.g. card brand, last four digits; we do not store full card numbers), and company billing details if you add them
  • Website usage: pages visited, links and buttons clicked, scrolling, referring site, device type, browser, approximate location derived from your IP address, and cookie or device identifiers, collected by the analytics and advertising tags described in section 5
  • Conversion events: whether you downloaded or installed Shorz, started a checkout, or completed a purchase (with the order value, currency and an order reference)
  • User-generated content: videos, files, and other content you upload or create when using our Services
  • Technical data: IP address, identifiers, and similar data necessary to operate the Services

3. How we use your information

We use the information above to provide, maintain, and improve the Services; process payments; communicate with you; comply with legal obligations; understand how visitors use our website; test different versions of our pages; measure which advertising brings people to Shorz; and show Shorz ads to people who have visited our website. We do not sell your personal information for money.

4. Your content and AI model training

We do not train AI models on your content. The videos, images, audio, prompts, and projects you create with Shorz are never used to train, fine-tune, or otherwise develop AI models, whether by us or on our behalf. We also do not sell or license your content to anyone for that purpose.

Shorz is a desktop application: your project files and media stay on your own computer. When you run an AI generation, only the input that generation requires (for example a prompt, a reference image, or an audio clip) is transmitted to the third-party AI provider that performs it, so that the result can be returned to you. Those providers process that input under their own terms; we use them through their business/API offerings and do not grant them permission to use your content for model training.

5. Cookies, analytics and advertising tags

Our website (shorz.ai) uses cookies, pixels and similar technologies. Some are set by us; others are set by the third parties listed below, which receive data directly from your browser when you visit. These tags are used on the website only, not inside the Shorz desktop application.

Visitors in the European Economic Area, the UK and Switzerland are asked first. Until you accept, only strictly necessary cookies are set, the advertising tags, Clarity and Endorsely do not load, Google's tags run in Consent Mode without cookies, and PostHog counts visits without cookies or local storage. Everywhere else the tags load by default. Wherever you are, you can accept or reject them at any time with Cookie settings at the bottom of every page.

Strictly necessary

  • Sign-in session (Supabase): keeps you signed in to your account.
  • Payments (Stripe): fraud prevention and checkout, set when you open a checkout.
  • Cookie choice (shorz_consent, kept for 180 days, and shorz_cr, deleted when you close your browser): remember your choice and whether we need to ask for it.

Analytics

  • Page version (shorz_ab, kept for 90 days): remembers which version of a page you were shown, so it stays the same on every visit while we test changes.
  • Google Analytics 4 (Google): visit and conversion statistics. Google privacy policy
  • PostHog (PostHog, Inc., data stored in the US): product analytics and conversion funnels. If you sign in, events are linked to your account ID and email address. Without your consent it runs without cookies, identifying visits only by a temporary hash made on PostHog's servers. PostHog respects your browser's Do Not Track setting. PostHog privacy policy
  • Microsoft Clarity (Microsoft): heatmaps and session recordings that show how visitors move through a page, including mouse movement, clicks and scrolling. Clarity masks text typed into form fields by default. Microsoft privacy statement

Advertising and attribution

These tags tell the ad platform that someone who saw or clicked a Shorz ad later visited our site, downloaded Shorz, started a checkout or made a purchase, and let us show Shorz ads to past visitors. They receive your IP address, browser and device information, the pages you visit, cookie identifiers, and the conversion events listed in section 2. We do not send your name, email address or payment details to any ad platform. The platforms may combine this data with what they already know about you if you have an account with them, and use it under their own privacy policies; for that part of the processing they act as independent controllers or, in some cases, jointly with us.

Your choices

  • You can accept or reject analytics and advertising cookies with Cookie settings at the bottom of any page. Rejecting removes the cookies these tags stored on our domain.
  • You can block or delete cookies in your browser settings, or use a content or tracker blocker. The site works without the analytics and advertising tags.
  • You can opt out of Google Analytics with Google's browser add-on.
  • You can limit ad personalisation in your Google, Meta, Reddit and X account settings.
  • You can ask us to stop processing your data for analytics or advertising at info@shorz.ai.

6. Legal basis and jurisdictions

We process account, payment and content data to perform our contract with you; strictly necessary cookies and security data on the basis of our legitimate interest in running a working, secure service; analytics and advertising cookies on the basis of your consent in the EEA, the UK and Switzerland, and elsewhere on our legitimate interest in understanding and promoting our product (which you can object to with Cookie settings); cookieless visit counts on our legitimate interest in knowing how many people use our website; and some data to meet legal obligations such as accounting and tax. We serve users in the United States and the European Union and aim to comply with applicable laws, including the EU GDPR, the ePrivacy rules on cookies, and US state privacy laws where relevant.

7. Service providers and international transfer

Besides the analytics and advertising providers in section 5 and the AI providers in section 4, we use service providers that process data on our behalf:

  • Stripe: payment processing and invoices (see Stripe's privacy policy)
  • Supabase: account sign-in and our database
  • Vercel: website hosting
  • Email delivery providers: sending sign-in codes, receipts and messages you ask for

Several of these providers, including Google, Meta, Reddit, X, Microsoft and PostHog, process data in the United States or other countries outside the European Economic Area. Where the law requires it, we rely on the EU-US Data Privacy Framework for certified providers or on the European Commission's Standard Contractual Clauses.

8. Your rights

Depending on where you live, you may have the right to:

  • Access, correct, or delete your personal data
  • Restrict or object to certain processing, including analytics and advertising
  • Data portability
  • Withdraw consent at any time, without affecting processing before you withdrew it
  • Opt out of "sharing" of personal data for cross-context behavioral advertising, which some US state laws treat our advertising tags as
  • Lodge a complaint with a supervisory authority (in Estonia, the Data Protection Inspectorate, or the authority where you live)

To exercise these rights, contact us at info@shorz.ai.

9. Data retention and security

We retain your information only as long as needed for the purposes described in this policy or as required by law; for example, accounting records are kept for the period Estonian law requires. Cookie lifetimes are set by each provider and are listed in their policies. We implement appropriate technical and organizational measures to protect your data.

10. Changes and contact

We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the Services after changes constitutes acceptance of the updated policy.

For any questions about this Privacy Policy or our practices, contact us at info@shorz.ai.

Terms of Service · Refund Policy