Privacy Policy

1. Who we are

This Privacy Policy explains how Quiz Shorts (“we”, “us”) collects, uses and shares personal data when you use our website and application.

2. Data we collect

• Account data — name, email, profile image (if provided by you or an OAuth provider), company, bio, website, locale and timezone.
• Content data — quizzes, questions, images, audio, captions, rendered videos, schedules and generation/render job metadata.
• Billing data — Stripe customer and subscription identifiers, plan status and usage counters. Card details are handled by Stripe, not stored on our servers.
• Integrations — OAuth tokens and basic profile identifiers for connected social accounts (for example TikTok or YouTube) needed to publish on your behalf.
• Security / abuse signals — hashed IP addresses for free-generation abuse prevention, and bot protection signals from Cloudflare Turnstile.
• Technical logs — approximate device/browser information and operational logs required to run and debug the Service.

3. How we use data

We use personal data to:

• Provide accounts, generation, rendering, scheduling and publishing
• Enforce plan limits and prevent free-tier abuse
• Process payments and send transactional email
• Improve product quality, reliability and security
• Comply with law and respond to lawful requests

We do not sell your personal data. We do not use your private quiz content to train public foundation models outside the providers needed to generate your requested outputs.

4. Processors we rely on

We use service providers such as Stripe (payments), Resend (transactional email), Cloudflare Turnstile (bot protection), Google Cloud (hosting/storage/tasks), and AI providers configured for text, image search and speech. Social platforms receive data you choose to publish through their APIs.

5. Free-tier IP hashing

Raw IP addresses are not stored for free-generation claims. We store an HMAC hash of a normalised IP and may block additional free generations after repeated successful free claims from the same network hash. Paid subscribers are not limited by this free-tier control.

6. Retention

Account data is kept while your account is active. Generated media is retained according to your plan’s retention window, after which it may be deleted. Billing records may be kept longer where required for tax or accounting. You can request account deletion; we will delete or anonymise personal data unless we must retain it for legal reasons.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, export or restrict processing of your personal data, and to object to certain processing. Contact us to exercise these rights. You may also have the right to lodge a complaint with a supervisory authority.

8. Cookies

We use essential cookies for authentication and security. See our Cookies Policy for more detail.

9. International transfers

We may process data in the United Kingdom, European Economic Area, United States or other countries where our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Children

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction). Do not create an account if you are under that age.

11. Changes

We may update this Privacy Policy and will revise the “Last updated” date when we do. Continued use of the Service after updates means you acknowledge the revised policy.

12. Contact

Privacy requests (including deletion): contact support via your Account page or the email on your billing receipts.