Privacy policy

Last updated: October 10, 2026

This policy covers the Shopify app AutoShort AI Product Video Ads ("the app"), run by AutoShort (autoshort.org, "we"). It explains what the app reads from your Shopify store, why, who processes it and how it is deleted. The app is only used by merchants inside the Shopify admin; it does not add anything to your storefront.

1. Data the app reads from Shopify

• Store details: your store's myshopify.com domain, the access token Shopify issues when you install the app, whether the store is a development store, and the status of your app subscription.
• Product list: the title and main image of up to 20 active products, read each time you open the app so you can pick one. The list is not stored.
• The product you choose: when you click "Make video ad", the app reads that product's title, description, vendor, lowest price and up to 5 image URLs, and sends them to our video service to make the ad.

The app requests read access to products only. It does not read orders, customers or any data about your shoppers, and it does not read your staff accounts' personal details. Payments are handled by Shopify; we never see card or bank details.

2. Data we store

• Your store domain and the Shopify access token, so the app can read your products.
• For each video you make: the product ID and title, our video ID, its status, a link to the finished video file, and when it was made.
• Counters of how many free, trial and plan videos your store has used.
• In our video service, for each video: the product details sent to it (title, description, vendor, price, image URLs), the generated script, the scene descriptions and the rendered video file.
• Server logs (store domain, requested page, IP address, errors), kept for a few weeks to run and debug the service and then overwritten.

The app sets no tracking cookies and uses no analytics or advertising tools.

3. How we use it

• To make the video ads you ask for and show them back to you.
• To apply your plan's video allowance.
• To answer support requests and fix problems.
• To meet legal obligations.

We do not sell your data, use it for advertising, or use it to train AI models.

4. Who processes it

Product details are sent to AutoShort's video service (autoshort.org), which we run. To make a video it uses these providers:

• OpenAI, and Google Gemini as a fallback: to write the ad script from the product details and to check which product images are usable.
• ElevenLabs, or Google Cloud Text-to-Speech when ElevenLabs is unavailable: to turn the script into a voiceover.
• fal.ai (Flux), and Google Imagen as a fallback: to draw a background image for a scene that has no usable product photo. These receive a short scene description, not your product data as such.
• DigitalOcean (United States): hosting for the app, its database and the rendered videos.
• Bugsly, our own error-tracking service: error reports, which can include a product title.

Each provider receives only what its step needs. We are not established in the European Union; data is processed in the United States and in the countries where these providers operate.

5. Retention and deletion

• When you uninstall the app, we delete your store's access token straight away.
• 48 hours after uninstall, Shopify sends us a deletion request (shop/redact) and we delete everything we store about your store: video records, usage counters and any remaining session data.
• Our video service keeps each video's record (product details, script, scene descriptions) and the rendered file after uninstall. To have them deleted, email privacy@autoshort.org from the store's owner email; we delete them within 30 days.

6. Shopper data requests

The app holds no personal data about your customers. When Shopify forwards a customer data request or deletion request (customers/data_request, customers/redact), there is nothing to return or delete, and we acknowledge it.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export the data we hold about you, to object to or restrict its processing, and to complain to your data protection authority. Email privacy@autoshort.org and we will reply within 30 days.

8. Security

All traffic to the app uses HTTPS. Access tokens are stored on our servers and never sent to your browser. Access to production systems is limited to the people who run the service.

9. Changes

If this policy changes, we will update the date at the top of this page. Material changes will also be shown in the app.

10. Contact

Privacy: privacy@autoshort.org
Support: support@autoshort.org