Privacy Policy

1. Introduction

Birthday Short ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI-powered birthday video generation service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address and authentication data through our secure authentication provider (Clerk). We do not store passwords directly.

2.2 Uploaded Images

Photos are temporarily processed solely for the purpose of generating your birthday video. Once the video is created, the original image is immediately and irreversibly deleted from our servers.

2.3 Generated Videos

Generated videos are stored temporarily to allow you to download them. Videos may be automatically deleted after 30 days of inactivity.

2.4 Payment Information

Payment processing is handled entirely by Stripe. We never receive, store, or have access to your credit card numbers or banking details. We only receive confirmation of successful transactions.

3. How We Use Your Information

• To provide and maintain our video generation service
• To process your transactions and manage your credits
• To communicate with you about your account or transactions
• To improve our service and develop new features
• To comply with legal obligations

4. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share limited data with:

• AI Processing Provider: For AI video generation processing. Images are processed transiently and not retained.
• Stripe: For secure payment processing.
• Clerk: For secure user authentication.
• Vercel: For hosting and content delivery.

All third-party providers are bound by strict data protection agreements and comply with applicable privacy regulations.

5. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data in transit
• Encrypted storage for any retained data
• Regular security audits and updates
• Access controls and authentication requirements

6. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a structured format
• Right to Object: Object to certain processing of your data

To exercise these rights, please contact us at privacy@birthdayshot.app

7. Cookies

We use essential cookies only for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

8. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Data Retention

• Uploaded images: Deleted immediately after video generation
• Generated videos: Retained for up to 30 days
• Account information: Retained until account deletion
• Transaction records: Retained as required by law (typically 7 years)

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@birthdayshot.app