Privacy Policy

Last updated: May 2, 2026

1. Who We Are

VidShortsAI is an AI-powered short video generation platform operated by an individual data controller based in Turkey. Website: vidshortsai.com. Contact: support@vidshortsai.com

2. Data We Collect

Account data: email address, username, name, phone number, birth date, country
Usage data: video topics you generate, video history, credit usage
Payment data: processed by Polar.sh — we do not store card details
Technical data: IP address, browser type, device info, cookies
Consent data: record of your agreement to our Terms, Privacy Policy, and Refund Policy at registration

3. How We Use Your Data

To provide and operate the VidShortsAI service
To process payments and manage subscriptions
To send account-related emails (verification, receipts, alerts)
To improve our AI models and service quality
To comply with legal obligations under Turkish law (KVKK) and EU law (GDPR)

4. Legal Basis for Processing (GDPR)

Contract: processing necessary to provide the service you signed up for
Legitimate interest: service improvement, fraud prevention, security
Consent: marketing communications (you may opt out at any time)
Legal obligation: compliance with applicable laws

5. Third-Party Services

OpenAI — AI script generation (your video topics are sent to OpenAI)
ElevenLabs — premium voice synthesis (text sent for audio generation)
AssemblyAI — subtitle generation (audio sent for transcription)
Polar.sh — payment processing
Pexels / Wikimedia Commons — stock media (no personal data shared)
Modal — cloud GPU processing
Hetzner — server hosting (data stored in Germany, EU)

6. Data Retention

Account data: retained while your account is active + 2 years after deletion
Generated videos: stored for 30 days then automatically deleted from our servers
Payment records: retained for 10 years per Turkish tax law
Consent records: retained for the lifetime of your account

7. Your Rights (GDPR & KVKK)

You have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data ("right to be forgotten")
Object to processing
Data portability
Withdraw consent at any time

To exercise these rights, email us at support@vidshortsai.com. We will respond within 30 days.

8. Cookies

We use essential cookies for session management and authentication. We do not use tracking or advertising cookies.

9. Data Security

We implement industry-standard security measures including SSL/TLS encryption, CSRF protection, rate limiting, and secure password hashing. Our servers are hosted in Germany (Hetzner) with EU-level data protection standards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email.