Shorvo

Privacy Policy

Version 1.0.1

This policy explains how Batu Kerem Yildirim handles information in connection with the Shorvo desktop application and this website.

The short version. Your videos are made on your computer and stay there. We hold the small amount of account information needed to run a licence: who you are, which computer is currently active, and how many videos you have made. If you buy Pro, the payment is handled by Stripe, and by PayPal if you choose to pay with PayPal.

1. Your account

Shorvo requires an account, so we hold:

  • Your email address, and whether it has been confirmed. If you sign in with Google we receive the email address of that Google account. We never receive your Google password.
  • A device identifier. Shorvo derives an identifier from your installation so the one-computer-at-a-time rule can work. It identifies the installation, not you, and it is stored as a hash.
  • A count of successful generations, so the free allowance and Pro can be applied.
  • A record that you accepted these documents, and which version.

Accounts and this data are hosted for us by Supabase, on servers in Frankfurt, Germany (Amazon Web Services region eu-central-1).

Account emails, such as address confirmation and password reset, are sent for us through Amazon Simple Email Service in the same Frankfurt region. Amazon processes your email address and the message in order to deliver it.

2. What happens on your computer

  • Narration, captions and the final render run locally. Finished videos are written to a folder you choose and are never uploaded to us.
  • The script writer runs on your device.
  • Your scripts, topics and finished videos are not sent to us.
  • AI marking. As EU law requires, every finished video carries an inaudible audio watermark and a signed provenance record (C2PA) stating that it was made with Shorvo and contains AI-generated elements. The record is signed with a certificate created on your computer for your installation. It contains no name, email address or account information, but the same certificate signs every video made with that installation, so those videos can be recognised as coming from the same installation. Nothing about the marking is sent to us.

3. What leaves your computer while a video is made

  • Research and footage. To build a video, Shorvo sends search terms directly from your device to public web sources and downloads publicly available images and video. Those services receive ordinary request data such as your IP address and user agent, under their own policies. We do not receive that traffic.
  • Optional browser session. Off by default. If you switch it on, Shorvo may read locally stored session cookies so footage sources treat requests as signed in. Those cookies stay on your device and are not sent to us.
  • Components downloaded on first use. If you install the optional script writer, and the first time Shorvo needs its image-matching model, those files are downloaded directly from their public distribution services (Ollama and Hugging Face). Those services receive ordinary request data such as your IP address, under their own policies.

4. Purchases

Payments for Shorvo Pro Lifetime are processed by Stripe. Stripe collects your payment details on its own checkout page; we never see or store full card details. If you choose PayPal on that page, you complete the payment with PayPal (Europe) S.à r.l. et Cie, S.C.A., which processes your payment and PayPal account details under its own privacy statement; we never see your PayPal login details. From Stripe we receive the order information needed to grant and support your licence, linked to your Shorvo account: the payment status, the amount and currency, and Stripe's references for the payment and for you as a Stripe customer.

5. This website

The site is static and is hosted by Cloudflare, which also delivers the Shorvo download. Cloudflare processes the technical data needed to deliver and protect the site, such as IP addresses and request details. The site sets no analytics or advertising cookies, embeds no trackers, and loads its fonts from this domain rather than from a third party.

6. International transfers

Your account data is stored in the EU. Supabase, Amazon Web Services, Google, Stripe, PayPal and Cloudflare are, or belong to, companies based in the United States, so personal data may be transferred to or accessed from the United States. Where the recipient is certified under the EU-US Data Privacy Framework, such transfers rely on the European Commission's adequacy decision for that framework; otherwise they rely on the European Commission's Standard Contractual Clauses.

7. Legal basis and retention

We process account data to perform our contract with you, and order records to meet legal and tax obligations. Technical data processed to deliver and protect the website and the download is processed on the basis of our legitimate interest in operating a secure service. Account data is kept while your account exists; order records are kept for as long as the law requires. Everything on your computer stays there until you remove it.

8. Your rights

If you are in the EU or UK you may request access, correction, deletion, restriction or portability of your personal data, and may object to processing. Write to [email protected]. You may also complain to your local data protection authority.

9. Contact

Batu Kerem Yildirim, [email protected]. Full details in the Impressum.