Legal
Privacy Policy
ShotFlick — operated by Comfort Earning Production
Effective date: 15 September 2026
Last updated: 24 October 2026
This policy describes how ShotFlick works today. Where some data is not yet deleted on a fixed schedule, we say so plainly.
1. Who we are
ShotFlick is an AI-assisted video editing service operated by Comfort Earning Production, a Sole Proprietorship registered in India.
- Address: Krishna Complex, Ateli Mandi, Ateli, Mahendragarh, Haryana 123021, India
- GSTIN: 06KXZPS5808G1ZH
- Contact: support@shotflick.com
For the purposes of India's Digital Personal Data Protection Act, 2023 (DPDP Act) we are the Data Fiduciary. For users in the EEA/UK, we act as the Data Controller under GDPR.
2. The short version
- We collect your Google sign-in details, what you upload and create, your payment records, and a detailed record of how you use the app, including your device details, your IP address and the country we work out from it. Section 3 lists everything.
- Your uploaded and finished videos are deleted automatically about 30 days after they are made, together with each Auto edit’s working files (its transcript, word timings and edit plan) (a few working copies on our editing server can stay a little longer). You can download your result any time during those 30 days.
- Most other data has a time limit too: the sound track and transcript from Trim and Captions, before-and-after sound clips and uploaded music are deleted after about 7 days, and the titles, notes, correction requests and feedback you type, and the words you tap in the editor, are removed from our records after about 7 days. Job and analysis records (numbers and settings) are kept up to 180 days, and activity and error logs 180 days. User content in our backups is removed within 30 days. On our team’s computer, study copies are not yet deleted automatically (they stay until our team removes them), and edit records (numbers and settings only) are deleted after 180 days. Section 9 shows how long each kind of data is kept.
- We do not sell your data.
- To edit your video, its sound, its transcript and some images are sent to AI service providers, most of them in the United States (section 5).
- Pictures you add to an Auto edit (screenshots, logos, your photos) are checked, re-saved without hidden details such as location, used only for that edit and deleted about 30 days later.
- Our team checks the quality of every finished Auto edit, with help from an AI service, whether or not you turned on “Help improve ShotFlick” (section 3.5).
- Optional: “Help improve ShotFlick” lets our team view sample frames and keep extra study material from your edits (section 3.4). It stays off until you say Yes.
- We do not use your videos, sound or words to train AI models. If we ever offer this, it will be a separate choice that stays off until you say Yes, and we will update this policy at least 7 days before it starts.
- Deleting your account removes your login and profile at once, but it does not delete everything (section 10).
3. What we collect
3.1 Information you give us
| Data | Why | Kept for |
|---|---|---|
| Email address, name and Google account ID (from Google sign-in) | Your account, sign-in, payments, support | While your account exists; a short record stays after deletion (section 10) |
| Profile details you add: display name, profile photo, channel or page name, niche, caption language, style settings | Running your account and personalising your edits | While your account exists |
| Themes you save as favourites | Showing your saved themes | While your account exists; removed when you delete your account |
| Mobile number (only accounts made with our earlier mobile-number sign-in) | Sign-in | While your account exists |
| Uploaded videos | To do the editing you asked for and let you download the result | About 30 days (section 9). The sound copy kept from Trim and Captions is covered in section 3.2 |
| Background music you upload | To use in your edits | About 7 days from upload, then deleted automatically. A copy used in an edit is deleted with that edit’s files, about 7 days after the edit. Removing a track, or deleting your account, takes it off your list at once |
| Pictures you add to an Auto edit (screenshots, logos, your photos) | To place them in that edit | About 30 days, then deleted automatically. The original file is not kept: we keep only a re-saved copy without hidden details (such as location or camera data) |
| Video titles, editing notes and correction requests | To produce your edit | About 7 days, then removed from our records (study copies: section 3.4) |
| In-app feedback and star ratings | To improve the service | Written feedback: about 7 days on our servers (the quality-review findings are described in section 3.5). Star ratings: up to 180 days |
| Your consent answers (time, choice, wording shown, where you answered, IP address and browser) | Proof of what you chose | Kept, including after you change your choice or delete your account |
| Your “I agree to the Terms of Service and Privacy Policy” tick when you create your account (time, your choice, the words shown and the Terms version) | Proof that you accepted them | Kept, including after you delete your account |
| Billing details asked once before your first payment: your state, and only if you choose to add them, your GSTIN and business name | To make the GST tax invoice for each payment (your state decides the tax) | Saved on your account until you change them or delete your account. Every invoice keeps a copy of them, together with your name and email, for at least 8 years (Indian tax law), including after you delete your account; invoices are never changed |
We do not ask for your country, street address or phone number for billing.
3.2 Information created by using the service
| Data | Why | Kept for |
|---|---|---|
| Finished videos, previews and thumbnails | To deliver your result | About 30 days from when each one is made (a corrected version counts its 30 days from when it was made); some working copies on our editing server can stay a few days longer |
| A written transcript of the speech in your video, and a low-quality mono copy of its sound (Trim and Captions) | To find the cuts and write captions | About 7 days |
| Job records: status, timings, settings, errors, costs and Tokens used | Billing, refunds, fixing problems, preventing misuse | Up to 180 days. Titles, notes, file names and correction requests are removed after about 7 days. A copy without titles, notes, correction requests, music names, error messages or web links is also kept on our team’s computer for up to 180 days (section 9) |
| An analysis record of each edit: settings, timings, costs, errors and a quality score | To measure and improve the editor | Up to 180 days. Titles and caption details are removed after about 7 days. A copy without titles is also kept on our team’s computer for up to 180 days (section 9) |
| Token ledger, payment records and GST invoices | Financial records | At least 8 years (Indian tax law) |
| Activity log: the screens you open, the buttons you tap (since 28 September 2026 the words from your video that you tap in the Trim editor are no longer recorded; older records can still include them), the requests you make, errors and timings, stored with your email, name, IP address, browser, device, screen size, language and app version | Fixing problems, security, preventing misuse | 180 days. Words you tap or type, video titles, file names and web-address details are removed after about 7 days (the quality-review copy is described in section 3.5). Copies in our cloud storage: about 7 days |
| Web server access logs: IP address, browser and pages requested | Running and protecting the website | Rotated automatically |
| Your country, worked out from your IP address by our network provider (we never ask for or read your phone’s location) | Security and preventing fraud: if a signed-in session suddenly appears from another country, we treat it as suspicious and ask you to sign in again before a payment or account deletion. The device list in your account shows the country of each signed-in device | With each signed-in session while it lasts, and in our activity and security logs for up to 180 days |
| A scrambled (hashed) code of the network you signed up from | To limit how many free accounts one network can create | No fixed deletion date yet |
| Review frames — a sheet of sample frames from a finished edit (only with “Help improve ShotFlick” on) | Quality review by our team | About 30 days, or at once when you turn the setting off or delete your account |
3.3 What we do not collect
- Card numbers, CVV, UPI PIN and bank login details are entered only in Razorpay's checkout and never reach our servers. Razorpay's confirmation may include the email, phone number, UPI ID or bank used, but we do not save those details. We keep only the order and payment reference, amount, status, payment method type (for example card or UPI), the account and email the order belongs to, and the billing details in section 3.1 for its GST invoice.
- ShotFlick does not access your contacts, your camera or your precise (GPS) location. The website only receives the video, photo or music files you choose.
- Microphone (phone apps only): the ShotFlick app uses your microphone only when you tap Record to record a voiceover for a Faceless video. Your phone asks your permission first. The recording is sent to us and used like a sound file you upload: it goes into that edit, and it is kept and deleted as section 9 says for uploaded sound. You can upload a voice file instead of recording.
- Photos and videos (phone apps): the app opens your videos and photos so you can pick one to edit and save your result. On Android it uses the phone’s own picker, so it sees only the files you pick. On iPhone it may ask for access to your photo library. Neither app uploads your library: only the files you choose for an edit are sent.
- Please avoid uploading videos that contain sensitive personal data if you can.
3.4 Help improve ShotFlick (optional)
- Your choice: it stays off until you say Yes, and you can turn it off any time in Profile → Help improve ShotFlick (the Team review switch). Your edits work the same either way.
- What it allows, for edits that finish after your Yes: our team may view a sheet of sample frames from your finished video. We may also keep the sound before and after your Trim and Captions jobs, and a study record of each edit: its settings, timings, costs and processing log, its title and, where available, its full transcript, the plan, the pictures made for it and sample frames.
- Who uses it: our team only, to improve the editor. It is never sold or published, and it is not used to train AI models.
- Turning it off stops this for new edits and deletes your review frames at once. Sound clips and study records that were already kept are not deleted by the switch.
- How long: study records and before-and-after sound clips are deleted from our cloud storage after about 7 days (pictures and working files in rare cases up to about 14 days). After that, only a copy without titles or words can be made again, while the edit’s record exists (up to 180 days). Our team’s computer keeps its own copy of study records. That copy has no automatic deletion today: it stays until our team removes it.
- If you use ShotFlick with a tester code, the sound before and after your Trim and Captions jobs may be kept for quality review even if Team review is off.
- There is currently no option to let us use your videos to train AI, and we do not keep any video for that purpose.
3.5 Quality review of finished Auto edits (all accounts)
- Every finished Auto edit is checked by our team's review system, whether or not “Help improve ShotFlick” is on.
- The system does not keep its own copy of the finished video. It reads the finished video from our cloud storage, where it is deleted about 30 days after it is made (section 9). To place the frame and the edit well, our system finds where faces are in the video you uploaded. It keeps only the position of each face (a box and a confidence number) in that video’s edit plan, which is deleted with the video. No face template, face print or other biometric identifier is made or stored, and nobody is recognised or identified. Temporary quality-check frames are deleted with the edit’s working files. Your uploaded video itself is kept like your other videos and deleted about 30 days after upload (section 9).
- Sample frames, the on-screen text and a one-line summary of what the video is about may be sent to an AI service provider to score the edit.
- The written findings (for example which quality rule failed and when, the on-screen text, your first name and any feedback you wrote) are deleted about 30 days after the edit, like the video. In this system your email is replaced by a code and your IP address is removed.
- The same system keeps a copy of Trim, Captions, Auto edit, payment and feedback activity (activity from before 28 September 2026 can include words you tapped in the Trim editor), with your email replaced by a code and your IP address removed, and deletes it after about 7 days (only daily totals, without any names or words, are kept up to 180 days).
- While your videos are stored, our team can also open your finished video, and the before-and-after sound where it was kept, to check quality, help with a problem you report, or look into misuse.
- This quality review is part of how we run the service and cannot be switched off in the app.
4. Why we process your data (legal basis)
| Purpose | Basis (DPDP) | Basis (GDPR) |
|---|---|---|
| Creating and running your account | Consent | Contract |
| Processing the videos you submit, including AI processing (section 5) | Consent | Contract |
| Taking payment and keeping financial records | Legal obligation | Contract / Legal obligation |
| Quality review of finished Auto edits (section 3.5) | Legitimate use — part of providing the editing service you asked for | Legitimate interests |
| Activity logs, security, and preventing fraud and misuse | Consent / legitimate use | Legitimate interests |
| “Help improve ShotFlick” (section 3.4, optional) | Consent — withdraw any time in Profile | Consent |
We do not use your videos, sound or words to train AI models. If we ever offer this, it will be a separate choice that stays off until you say Yes, and we will update this policy at least 7 days before it starts. To measure and improve the editor, we keep records about every edit linked to your account (section 3.2); with “Help improve ShotFlick” on, these can also include the material listed in section 3.4.
5. Third-party AI processing — please read
To edit your video, we send parts of it to AI service providers:
- Sound — to turn speech into words with timings. Most of this goes to providers in the United States. For Trim and Captions, the sound is also sent in short pieces to a second speech-recognition service based in India.
- Transcript and text written from it, and any note you write for your edit — to plan cuts, captions, edits and corrections, and to match news topics.
- Picture descriptions written from what you say — to create AI-generated pictures for your edit.
- Images such as generated photos, logos found online and news screenshots — to check them.
- Sample frames of your finished edit — in some cases, to check quality (see also section 3.5).
If you use Fix audio in the Studio editor, the sound of your clip is cleaned on a computer that our team operates in India. The sound you send is deleted after cleaning; the cleaned result and a record of the job stay on our server until a clean-up removes them, between 2 hours and about 1 day later.
Do these providers train AI on your content? We never do (section 3.4). For the providers, it depends on the kind of request:
- Planning your edit and checking pictures (reading the words of your video, choosing pictures, checking frames): sent with settings that stop the provider from using your content to train its models.
- Turning speech into text, making pictures, and the final quality review: sent under each provider’s standard terms. Depending on those terms, a provider may be allowed to use what we send to improve its own services. We have not yet switched these to no-training settings.
These providers work for us under our instructions; we remain responsible to you for how your data is handled.
We cannot control a provider’s own retention beyond what its terms state.
If you are not comfortable with this, please do not upload the content. The service cannot run without AI processing.
6. Who else we share data with
We share data only with the service providers we need to run ShotFlick. Each of them gets only what it needs for its task, and we use them only under terms that require them to protect your data. We expect every provider to protect it at least as well as this policy does; where a provider’s own terms apply (section 5), we say so.
| Provider | What they get | Purpose |
|---|---|---|
| Amazon Web Services (Mumbai, India) | Everything we store: account records, videos, sound, transcripts and logs | Servers, file storage and video rendering |
| AI service providers (section 5) | Sound, transcripts and text, images, sample frames | Editing and quality checks |
| Razorpay (India) | Your name, email, account ID, the plan and the amount | Payments |
| Your sign-in, if you sign in with Google; your IP address and browser when our pages load fonts and the sign-in button | Sign-in and fonts | |
| Cloudflare | All traffic between your device and ShotFlick, including the sound files you send for transcription. Cloudflare also tells us the country your IP address belongs to (section 3.2) | Network delivery and security |
| Telegram | Our team's internal alerts: your name or email (or phone number), your device and browser, the screen you were on and what failed; account-hold alerts with your email and the reason | Fixing problems quickly |
| Public websites (app stores, search engines, Wikipedia, Wikimedia Commons, news sites) | Brand names and topics mentioned in your video — search words only, not your account details or your video | Finding logos and news for Auto edits |
| jsDelivr (code library network) | Your IP address and browser when the Studio editor loads or you export a video | Loading editor code |
| Our Chartered Accountant | Invoice and payment records | Tax compliance |
We keep account records on our own servers. We do not currently use any separate email, SMS, error-monitoring or content-safety provider.
We do not sell, rent or trade your personal data with anyone, for any purpose.
We may disclose data if required by a valid legal order from an Indian authority or a court of competent jurisdiction, or to protect someone's safety. Where we are legally permitted to tell you, we will.
7. Checks on uploaded content
- We do not currently run an automated content-safety scan on uploaded videos. Uploads are checked only to confirm that they are a real video or sound file of an allowed type, size and length.
- While your video is stored, our team may look at it, including sample frames of a finished Auto edit, to check quality, help with a problem you report, or look into misuse.
- If we find content that breaks our Terms or the law, we may stop the job, suspend the account and report it to the authorities where Indian law requires.
8. International transfers
Our servers, file storage and video rendering are located in India (Amazon Web Services, Mumbai). Some processing happens outside India: most of our AI service providers process the sound and text of your video in the United States, Cloudflare carries traffic through its global network, and Google sign-in and our team's Telegram alerts are handled by services based outside India.
- Under the DPDP Act, we may transfer personal data outside India except to countries restricted by the Central Government.
- For EEA/UK users, transfers outside those regions rely on the safeguards each provider offers, such as the EU Standard Contractual Clauses.
9. How long we keep things
Videos are deleted automatically. Some other data is not yet covered by automatic deletion; this table shows how things stand today.
| Data | How long |
|---|---|
| Uploaded videos (cloud storage and working copies on our editing servers) | About 30 days; some temporary upload files sooner |
| Finished videos, previews and thumbnails, and each Auto edit’s working files (transcript, word timings, edit plan) | About 30 days from when each one is made; some working copies on our editing server can stay a few days longer |
| Working copies at our rendering service | Deleted when rendering ends; rendered files within 1 day |
| Quality review of finished Auto edits (section 3.5) | No separate copy of the video (the review reads the finished video, kept about 30 days); written findings about 30 days |
| Sound track and transcript from Trim and Captions | About 7 days |
| Before-and-after sound clips (section 3.4) | About 7 days |
| Background music you upload | About 7 days from upload; a copy used in an edit, about 7 days after that edit |
| Study records (section 3.4) | About 7 days in our cloud storage (in rare cases up to about 14 days); after that only a copy without titles or words, up to 180 days. The copy on our team’s computer: no automatic deletion yet; kept until our team removes it |
| Review frames (section 3.4) | About 30 days, or at once when you turn the setting off or delete your account |
| Fix audio results in the Studio editor | Between 2 hours and about 1 day |
| Saved themes | Until you delete your account |
| Account and profile | Until you delete your account; a short record stays after that (section 10) |
| Job records, analysis records and feedback | Up to 180 days. Titles, notes, file names, caption details and written feedback are removed after about 7 days. Our team’s computer also keeps a copy of each edit’s job and analysis record (titles, notes, correction requests, music names, error messages and web links removed) for up to 180 days |
| Activity logs and error logs | 180 days. Words you tap or type, video titles, file names and web-address details are removed after about 7 days; the quality-review findings (section 3.5) are deleted after about 30 days. Activity log copies in our cloud storage: about 7 days |
| Consent records | Kept as proof of your choice, including after account deletion |
| Payment records, GST invoices and Token ledger | At least 8 years (Indian tax law) |
| Daily backups of our servers | 7 days, so deleted data can remain in them for up to 7 more days |
| Files deleted from our cloud storage (videos, sound, pictures) | They stay up to 7 days in a protected backup, then are removed |
| Other backups and archives of our server data (in our cloud storage and on a backup drive held by us in India) | User content in backups (uploaded and edited videos, sound, transcripts and text you typed) is removed within 30 days. Account and payment records in them are kept as our financial record |
| Alerts sent to our team on Telegram | They stay in our team's Telegram chat |
Video deletion is done by automatic storage rules and scheduled clean-up jobs on our servers.
10. Your rights
| Right | How |
|---|---|
| See your data | Profile shows your details, and My videos lets you watch and download your finished videos while they are stored. The app does not have a “Download my data” button yet; to ask for a copy of anything else we hold about you, email support@shotflick.com |
| Correct your data | In Profile you can change your name, profile photo, channel or page name, niche and caption language. Your email address and sign-in method cannot be changed in the app; to correct anything else, email us |
| Delete your account | Profile → Delete account (what it removes is explained below) |
| Delete a single video | The app does not have a delete button for a single video yet. Videos are removed by the schedule in section 9, or email us to delete one sooner |
| Turn “Help improve ShotFlick” on or off | Profile → Help improve ShotFlick (Team review switch). The quality review in section 3.5 cannot be switched off |
| Withdraw consent | Turn the switch off, or delete your account; for anything else, email us |
| Get an answer to a grievance | Section 11 |
| Nominate someone (DPDP) | Email us to nominate a person to exercise your rights if you are unable to |
EEA/UK users additionally have the rights to restrict or object to processing, to data portability, and to lodge a complaint with their local supervisory authority.
What deleting your account does: Profile → Delete account removes your login and profile at once, signs you out on every device, closes your share links, deletes your review frames and removes your saved themes. Your uploaded and edited videos and other files are not deleted at that moment; they follow the schedule in section 9. We keep a short record of the deleted account (email, name, account ID, dates and remaining Token balance), together with your job records, activity and security logs, consent records and financial records, and the data listed in sections 3 and 9 as having no fixed deletion date yet. Unused Tokens are forfeited and are not refunded.
While ShotFlick is closed for maintenance, Profile changes, the Team review switch and Delete account are not available in the app; during that time, email support@shotflick.com to use any of your rights.
We respond to requests within 30 days. We may ask you to confirm your identity through your registered email first.
If you use ShotFlick from outside India
ShotFlick is run from India and our servers are in India (Mumbai); some AI service providers that process your edits are in other countries, mostly the United States (section 5). Wherever you live, you can ask us to show you, correct, delete or send you a copy of your personal data, or withdraw a consent you gave, by writing to grievance@shotflick.com; we reply within 30 days. If you live in the European Union or the United Kingdom, you can also complain to your local data protection authority. If you live in California: we do not sell your personal information and we do not share it for cross-context behavioural advertising.
11. Grievance Officer
As required by the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines) Rules, 2021:
- Name: Hawa Singh
- Designation: Grievance Officer
- Email: grievance@shotflick.com
- Address: Krishna Complex, Ateli Mandi, Ateli, Mahendragarh, Haryana 123021, India
- Phone: +91 89308 94347 (Monday to Saturday, 10:00 AM – 6:00 PM IST)
We acknowledge complaints within 24 hours and resolve them within 7 days. A request to remove intimate or sexual images of you shared without your consent, including fake ones, is acted on within 2 hours.
If you are not satisfied with our response, you can complain to the Data Protection Board of India, using the online complaint process the Board publishes on its official website.
12. Security
- All traffic between your device and ShotFlick, and between our own systems, is encrypted with HTTPS/TLS.
- Files and records in our cloud storage, and our main server’s disk, are encrypted at rest. Working copies on our editing servers are temporary and are deleted automatically, usually within about 30 days (section 9).
- Links to your videos are signed and stop working within a few hours; share links you create work for 7 days. While a video is being rendered, a working copy without its sound and the pictures for the edit are held at our rendering service at addresses that anyone with the exact link could open; they are deleted within one day.
- API keys and credentials are kept on our servers and are never in our website or app.
- Administrative changes to our production servers require multi-factor authentication.
No system is perfectly secure. If a personal data breach occurs, we will notify the Data Protection Board of India and every affected user without undue delay, as required by the DPDP Act.
13. Children
ShotFlick is not intended for anyone under 18. When you create an account, you confirm that you are 18 or older. We do not knowingly collect data from children. Under the DPDP Act, processing a child's data requires verifiable parental consent, which our service is not designed to obtain. If we learn that a user is under 18, we will close the account.
14. Cookies and tracking
- One essential cookie keeps you signed in, for up to 14 days. Your browser's local storage keeps small preferences such as the colour theme.
- Our own activity tracking: the screens you open, the buttons you tap (since 28 September 2026 not the words you tap in the Trim editor), the requests you make and the errors you hit are recorded against your account with your name, email and device details. Our team can view this per person.
- How people find us: when you open our site, it notes only the name of the website you came from (for example google.com or instagram.com) and any campaign tag in the link (utm_source / utm_medium / utm_campaign). It is counted without your name, email, account or IP address, only to see which channels bring visitors. Browsers that send Do Not Track or Global Privacy Control are skipped.
- We do not use advertising cookies, ad networks or cross-site tracking pixels.
- The Google sign-in button and fonts load from Google, and our site runs through Cloudflare. Google and Cloudflare may set their own cookies under their own policies.
15. Changes to this policy
When this policy changes, we update the “Last updated” date above. For changes that materially affect your rights, we will tell you in the app or by email before they take effect.
16. Contact
Comfort Earning Production
Krishna Complex, Ateli Mandi, Ateli, Mahendragarh, Haryana 123021, India
GSTIN: 06KXZPS5808G1ZH
General: support@shotflick.com
Privacy & grievances: support@shotflick.com