Privacy Policy

1. Information Collection

ShortGrab ("we", "us", or "our") collects various types of information from our users to operate our SaaS platform and offer high-quality viral content services. The information collected falls into the following categories:

a) Personal Information Provided by You

When you register, purchase credit packages, subscribe to our service, or communicate with us, we collect standard identifiers:

• Name: To personalize your account dashboard and communicate with you.
• Email Address: To send account credentials, credit transaction receipts, security updates, and marketing news.
• Payment Information: When you purchase credits, transaction details are collected. All payments are securely processed through Stripe. We do not store your credit card details or billing credentials on our servers.

b) Automatically Collected Information

When you visit or interact with our platform, we automatically collect data about your device and network activity:

• IP Address: To detect location, prevent fraud, run platform security checks, and comply with location-based regulatory policies.
• Device & Usage Details: Browser type, operating system, pages visited, and interaction timestamps.
• Cookies: Standard text files saved on your device to retain your session state and remember user preferences.

2. Use of Information

We process and use your information based on legal grounds, contract performance, and legitimate business interests:

• To Process Orders: We use your billing info and email to activate and manage your credit subscriptions and issue certificates of exclusive rights.
• To Send Marketing Communications: We use your email to share newsletter updates, viral market opportunities, and product announcements. You can easily opt out of these emails at any time using the "Unsubscribe" link at the bottom of any email.
• To Improve User Experience: Analyzing navigation paths, popular features, and user metrics helps us refine our AI models and retransformation engines.
• To Prevent Abuse: Monitoring system logs and IP addresses allows us to block malicious activities, scraping bots, and duplicate logins.

3. Sharing with Third Parties

We do not sell, rent, or trade your personal information. We share data only with verified third-party service providers that assist in running our platform. These providers are bound by strict data protection terms:

• Stripe: Our payment processing partner. They collect, decrypt, and process your card details in compliance with PCI-DSS guidelines.
• Amazon Web Services (AWS): Our secure cloud hosting provider. All personal data, databases, and assets are hosted in secure AWS data centers.
• Google Analytics: We use Google Analytics to analyze platform traffic patterns and usage metrics. Google Analytics does not collect personally identifiable identifiers such as your password or billing details.
• Google APIs: We use various Google APIs to optimize authentication flows and media delivery systems.

4. Cookies & Tracking

Cookies are small text files placed on your computer or mobile device when you access our site. We use cookies to:

• Maintain your login session and verify your active state across pages.
• Remember preferences (e.g. your category filter choice on the board).
• Collect aggregate analytical statistics via Google Analytics.

You can modify your browser settings to reject cookies or warn you when cookies are being sent. Note that if you choose to disable cookies, some sections of the ShortGrab platform may not load or function correctly.

5. Data Security

We prioritize the security of your personal data. We implement standard physical, technical, and administrative controls:

• All data transmissions are encrypted using Secure Socket Layer (SSL/TLS) technology.
• Our backend databases on AWS are configured with restricted access policies and encryption at rest.
• All credit card numbers are handled in Stripe's isolated environment.

While we apply strict measures to safeguard your information, please note that no security system is completely impenetrable. We cannot guarantee 100% security of data transmitted over the internet.

6. User Rights

Depending on your location, you may have specific rights regarding your personal information. As an Indian business operating globally, we align with the Digital Personal Data Protection Act (DPDPA), 2023 in India, as well as global standards (GDPR/CCPA) for international users:

• Right to Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal records.
• Right to Erasure (Right to be Forgotten): You can request that we delete your account and remove all personal information from our databases, subject to any legal compliance retention obligations.
• Right to Withdraw Consent: You have the right to withdraw your consent to data processing (e.g., unsubscribing from newsletters) at any time.
• Right to Grievance Redressal: In accordance with India's DPDPA, you can file a query or grievance regarding how we handle your personal data. Please direct these requests to [email protected]. We will respond within the statutory timeframe.

7. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise your data protection rights, please reach out to our team: