Scope of This Policy
This Privacy Policy explains how Brainrot Shorts ("Brainrot Shorts," "we," "us," or "our") collects, uses, discloses, and stores personal information when you use our website, applications, and related services (collectively, the "Service").
This Policy does not apply to third-party websites, services, or platforms that may be linked from or integrated with the Service. Those third parties have their own privacy practices and terms.
Information We Collect
We collect information you provide directly, information collected automatically when you use the Service, and information from service providers and integrations you choose to connect.
- Account and profile information, such as your name, email address, login credentials, and authentication provider identifiers.
- Billing and transaction information, such as subscription plan, billing status, invoices, and payment-related metadata (payment card details are typically processed by third-party payment processors, not stored by us in full).
- User Content, including scripts, uploaded media, captions, generation settings, prompts, and rendered outputs.
- Usage and log data, such as IP address, browser type, device details, pages visited, actions taken, timestamps, and crash/error logs.
- Cookie and local storage data used for session management, preferences, analytics, security, and feature functionality.
- Communications, including messages you send to support, feedback submissions, and survey responses.
How We Use Information
We use personal information to operate, secure, maintain, and improve the Service and to communicate with you.
- Provide the Service, including account creation, authentication, rendering videos, storing projects, and delivering outputs.
- Process subscriptions, payments, renewals, invoices, fraud checks, and account-related notices.
- Monitor performance, troubleshoot issues, prevent abuse, enforce our terms, and protect the Service and users.
- Improve product features, user experience, reliability, and safety, including analytics and internal testing.
- Respond to support requests, feedback, and legal inquiries.
- Comply with legal obligations and enforce our rights.
Legal Bases (EEA/UK Users)
If you are in the EEA or UK, we typically process personal information under one or more of the following legal bases: performance of a contract (to provide the Service), legitimate interests (such as securing and improving the Service), compliance with legal obligations, and consent where required.
Where processing is based on consent, you may withdraw consent at any time, but this will not affect processing already completed.
AI Processing and Model Training
We do not use your documents, prompts, uploaded media, scripts, or generated videos to train, fine-tune, or otherwise build AI models, and we do not permit our service providers to do so on our behalf.
To generate scripts, narration, images, and videos, we send the relevant parts of your content to third-party AI providers under their API terms, which are the terms that apply to business customers rather than to consumer products. We process your content this way only to deliver the feature you requested.
Sales, Advertising, and Tracking Disclosures
We do not currently sell personal information for monetary compensation. We may use service providers for analytics and operational performance monitoring.
If our data practices change in a way that triggers additional notice or opt-out rights under applicable privacy laws, we will update this Policy and provide any legally required disclosures or controls.
Data Retention
We retain personal information for as long as reasonably necessary to provide the Service, maintain business and financial records, comply with legal obligations, resolve disputes, and enforce our agreements.
- User Content (projects, uploaded files, and generated videos) is kept for as long as your account is active so you can return to it.
- Temporary working copies created on our rendering servers are removed when a render finishes, and at the latest within fourteen days.
- API request logs are kept for 90 days. Other usage and security logs are kept for as long as needed to operate and protect the Service.
- Billing records (customer, subscription, and order records) are kept for as long as accounting and tax law requires, even after an account is deleted.
- When we delete an account, we remove the account, its User Content, and the stored files behind it, and confirm completion in writing.
Security
We use commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information. All traffic between you and the Service, and between the Service and its providers, is encrypted in transit (TLS). Stored files and database records are encrypted at rest by our storage providers.
Uploaded documents, uploaded media and generated videos are delivered from a content domain under unguessable addresses that are issued only to your account; there is no public listing.
Access to customer content on our side is limited to the operator of the Service, through an access-restricted admin workspace, for support, abuse handling, and payment disputes. We do not use contractors or third-party staff with access to customer content.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your account credentials and using secure passwords and devices.
International Data Transfers
We and our service providers process and store information in the United States and the European Union. Data protection laws in those countries may differ from those in your jurisdiction.
Where required, we will use appropriate safeguards for cross-border data transfers.
Your Privacy Rights and Choices
Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, delete, or receive a copy of your information, and the right to object to or restrict certain processing.
You may also have rights to appeal a denied request or opt out of certain processing activities, subject to legal exceptions. We may need to verify your identity before processing a request.
- Account information can often be updated directly in your account settings.
- You may request deletion of your account and associated personal information by emailing us from the address on the account. We perform the deletion ourselves, including the stored files behind your projects, within 30 days of verifying the request, and confirm completion in writing. Billing records are kept as described under Data Retention.
- Marketing emails can be unsubscribed from using the link in the email; transactional messages may still be sent when necessary.
- To exercise privacy rights, contact us at contact@brainrotshorts.com.
Children's Privacy
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact us so we can review and take appropriate action.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Service. When we do, we will post the updated version and revise the effective date above. Material changes may be communicated through the Service or by other reasonable means.
Contact Us
If you have questions about this Privacy Policy or want to submit a privacy request, contact us at contact@brainrotshorts.com.