Privacy policy

Data controller

The data controller is Leonardo Fabio Oteca, an individual based in Colombia who operates SnipShorts (snipshorts.com). He handles data questions and complaints at leonardo@snipshorts.com.

This policy follows Colombian Law 1581 of 2012 and Decree 1377 of 2013 (habeas data).

What data we use

Account data: your email and the name you give us. If you sign in with Google, also the name, email, and profile photo Google shares.

Sign-up and onboarding questionnaire: when you create your account we store your approximate sign-up country (2-letter code from the hosting server header, without storing your IP address), your sign-up language, and, if you arrived via a campaign link, the first-visit campaign parameters (utm_source, utm_campaign, or gclid). We also store your answers to the initial onboarding questions about your role, main goal, where you publish, and how you heard about us.

Videos: the YouTube URL you paste, public video details (title and length), the downloaded video, its audio, the transcript, and the generated clips.

Payments: your subscription status, plan, and amount. Never your full card number, which Whop handles.

Site usage: aggregate visits and, if you accept, measurement and advertising cookies (see below).

What we use your data for

1. Create and keep your account and sign you in.

2. Download, transcribe, and analyze the videos you choose to make your clips, titles, and viral score.

3. Store your clips so you can preview, edit, and download them.

4. Charge your plan, track your credits, and handle refunds.

5. Send sign-in emails, notices when videos are done, and notices about your account or changes to these policies.

6. Improve the product based on user profiles and needs (onboarding answers) and measure where users come from (approximate country, language, and sign-up source).

7. Measure site usage and, only if you accept, measure how well our ads work.

8. Prevent abuse, follow the law, and answer your requests.

How we ask for your authorization

When you create your account we show that you accept the Terms and this Policy, and we save the date and the version you accepted. For measurement and advertising cookies we ask separately in the cookie notice, and we save your choice in your browser. That lets us prove your authorization if you ask.

Videos, audio, and clips: how long we keep them

Temporary files on the processing servers are deleted at the end of each step, and the audio extracted for transcription is deleted after transcription. The proxy we use to download from YouTube only passes traffic through. We keep no copies there.

The source video, transcript, and clips stay in your account while it is active, so you can come back to them. If you ask us to delete your account, we delete these files from our storage (Vercel Blob and Bunny.net) and your data. Today we do that deletion by hand when you ask.

Providers that process data

We use these providers (processors), each only for its part of the service:

Vercel: hosts the site, processing workflows, and video storage (Vercel Blob), and measures aggregate visits with Vercel Analytics. When needed, we send audio through Vercel AI Gateway to an OpenAI transcription model (Whisper).

DeepSeek, through Vercel AI Gateway: receives transcript text segments with their timestamps, the language, and the video length, to pick moments and write titles and descriptions. It does not receive the video file or your account data. Other AI models through Vercel AI Gateway receive the same text segments to compute the viral score.

Neon: Postgres database where we store your account, jobs, and credits.

Upstash: job queue (Redis) for downloads.

Modal: servers where we download the video, extract audio, transcribe, and create clips. To download from YouTube we use a DataImpulse network proxy.

Gladia: may receive the video link or audio to produce the transcript.

Bunny.net: stores and delivers finished clips.

Google: Google sign-in, the YouTube API to read public video details, Google Analytics, and Google Ads.

Whop: payments, subscriptions, and community. Its pixel measures page visits and purchases, and only loads if you accept cookies.

Resend: sign-in and notification emails.

International transfers

These providers have servers or offices outside Colombia, mainly in the United States and the European Union (Gladia and Bunny.net are European companies). DeepSeek is a Chinese company, so transcript text may be processed in China. The SIC may not consider China or some of these other countries to have an adequate level of data protection. That is why we make these transfers with your express authorization, which you give by accepting this policy, as article 26 of Law 1581 of 2012 allows, and under each provider's data protection contracts and terms.

Google Analytics, Google Ads, and cookies

We use Google Analytics 4 to understand how the site is used, and Google Ads to measure whether our ads lead to sign-ups and purchases. We measure events such as sign-up (sign_up), completed onboarding (onboarding_complete), checkout start (begin_checkout), purchase (purchase), and button clicks (cta_click).

We use Google Consent Mode v2 in advanced mode. Analytics and ad cookies are off by default and are not stored until you accept in the cookie notice. Until you accept, Google may receive cookieless signals (for example, that a visit happened) to make aggregate estimates.

Your choice is saved in your browser (localStorage, key snipshorts:cookie-consent). You can change it anytime with the "Cookies" button in the footer of every page.

Vercel Analytics does not use cookies. We also use necessary cookies that don't need your permission: a session cookie to keep you signed in, a language cookie (NEXT_LOCALE), and a first-visit technical cookie when you arrive from a link with campaign parameters (utm_source, utm_campaign, or gclid) to attribute your sign-up. The light or dark theme preference is stored in the browser.

YouTube and Google

SnipShorts uses YouTube API Services. By using them you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). Google handles data under its Privacy Policy (https://policies.google.com/privacy).

If you signed in with Google, you can remove SnipShorts' access anytime at https://security.google.com/settings/security/permissions.

Your rights

Under article 8 of Law 1581 of 2012 you have the right to:

1. Know, update, and correct your data, including data that is partial, inaccurate, incomplete, or misleading.

2. Ask for proof of the authorization you gave us.

3. Be told, if you ask, how we have used your data.

4. File complaints with the Superintendencia de Industria y Comercio (SIC) about violations of the law.

5. Revoke your authorization or ask us to delete your data when we don't respect your rights or the law, and in any case when you have no legal or contractual duty to keep it.

6. Access your data for free.

If you ask, we also give you a copy of your data in an easy-to-use format. We offer this voluntarily. It is not a right under Law 1581.

If you live in Spain or another European Union country, the GDPR also gives you the rights to portability, to object, and to restrict, and to complain to your data protection authority (in Spain, the AEPD). If you are in Brazil, the LGPD gives you similar rights, including knowing who we share your data with and complaining to the ANPD.

How to use your rights

Email leonardo@snipshorts.com from your account email with your name, what you are asking for and, for a complaint, the facts and any documents you want to add.

Questions: we answer within 10 business days at most. If we can't, we tell you why and answer within 5 more business days at most.

Complaints (correction, deletion, revocation, or a breach): we answer within 15 business days at most. If we can't, we tell you why and answer within 8 more business days at most. If your complaint is missing information, we ask for it within 5 days. If 2 months pass without you sending it, we treat the complaint as withdrawn.

Before complaining to the SIC, you must first send your question or complaint to us (a legal prerequisite in Colombia).

Minors

SnipShorts is only for people 18 or older, or the age of majority in their country if higher. We don't knowingly collect data from minors. If you believe a minor gave us their data, email us and we will delete it.

Security

We use encrypted connections (HTTPS), restricted access to our systems, and providers with good security practices. No system is perfect, so we can't promise total security, but we will tell you if an incident affects your data.

How long the database is kept

Your data is kept while your account is active and then for as long as the law requires (for example, accounting records of payments). Payment records Whop must keep stay with Whop.

Changes to this policy

If we change this policy, we will update the date above and let you know on the site or by email before it applies. If the change is about the purposes we use your data for, we will ask for a new authorization.

Effective date: October 20, 2026.