Politique de confidentialité

AppLooma LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM, United States, is responsible for personal data processed through shortad.ai and the ShortAd AI studio. Contact: [email protected].

• Account details — email address, name, password (stored hashed with bcrypt), and sign-in data from Google or Facebook if you use social login.
• Your content — prompts, product images, product URLs, presenter photos, voiceover scripts and the videos, voices and images you generate.
• Payment and transaction data — what you bought, when, the amount, your plan and renewal status and order history. Card details are collected and processed by Stripe, and mobile-wallet payments by EPS; we never receive or store your full card number or wallet PIN. For card purchases Stripe also collects your billing country (and, where required, address) to work out the tax that applies.
• Technical and security data — IP address, approximate country, browser, device and timestamps, and a device identifier (a first-party cookie and a browser fingerprint) used to keep accounts secure and to prevent fraud and duplicate accounts created to collect free credits.
• Support messages — emails and contact-form messages you send us.

• To run the Service: pass your inputs to the AI model or voice you choose, store your generation library, and manage your credits and plan.
• To process payments, renewals, refunds and chargebacks, and keep records required for tax and accounting.
• To send account and transactional emails (verification codes, receipts, renewal reminders, payment problems, service notices). We send marketing emails only with your consent.
• To prevent fraud and abuse and to enforce our Terms.
• To improve reliability and quality using aggregated, de-identified usage data.

We do not sell your personal data. We do not use your uploads, prompts or generations to train our own AI models. We do not use advertising or cross-site tracking cookies.

Each provider receives only what it needs for its task:

• Stripe, Inc. and its affiliates — the reseller and merchant of record for card, Apple Pay, Google Pay and Link purchases (Stripe Managed Payments): payments, subscriptions, sales tax/VAT/GST, fraud checks and receipts (stripe.com/privacy).
• EPS (Easy Payment System, Bangladesh) — mobile-wallet payments such as bKash, Nagad, Rocket and Upay.
• Google, ByteDance/BytePlus and Alibaba Cloud — the AI model you choose receives your prompts and reference images to generate your video or image.
• HeyGen — presenter photos, avatar selections and voice tracks for Lipsync Studio and Talking Avatar videos.
• ElevenLabs and Google — voiceover scripts, to generate spoken audio.
• Cloudflare (including R2 storage and Turnstile) — hosting security, bot protection, content delivery and media storage.
• Resend — delivery of our emails.
• Firebase (Google) — optional Google/Facebook sign-in.

We may also disclose data if required by law, to enforce our Terms, or as part of a merger or sale of the business (with notice to you).

AppLooma LLC is based in the United States and our providers operate servers in several countries. Your data may be processed outside your country; we rely on our providers' standard contractual safeguards for these transfers.

• Account data and your generation library: while your account is active. You can delete individual generations at any time.
• After you ask us to close your account, personal data is deleted within 30 days.
• Payment and transaction records: up to 7 years, as required for tax, accounting and chargeback handling.
• Security records (sign-in IP, country and device identifiers): while your account is active, to detect abuse.

All traffic is encrypted with TLS. Passwords are hashed with bcrypt. Databases are access-controlled on private networking with encrypted backups. Card data is handled only by Stripe (PCI DSS Level 1). Administrative actions on user accounts are recorded in an audit log.

We use essential cookies and local storage to keep you signed in, remember your session and language, and recognise your device for security. Stripe and EPS set their own cookies on their payment pages to prevent fraud, and Cloudflare may set a security cookie. We do not use advertising cookies.

You can ask to access, correct, export or delete your personal data, or object to certain uses. Email [email protected] from your account email and we will respond within 30 days. Depending on where you live (for example the EU, UK or California), you may have additional rights, including the right to complain to your local data-protection authority.

ShortAd AI is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

If we make material changes we will update the date above and, where appropriate, notify you by email.