Privacy Policy

1. Information we collect

Account information: your email address and authentication identifiers, handled through Firebase Authentication (including Google sign-in).

Content you create: video generation settings, the generated video files and their metadata (titles, descriptions, hashtags), and any publishing schedules.

Connected platform accounts: when you link a YouTube or TikTok account we store an OAuth refresh token that lets us upload videos on your behalf, together with your channel or profile name. Tokens are encrypted at rest.

Payment information: your subscription status and plan. Payments are processed by PayMe — we never receive or store your card details.

Usage data: your credit balance, job history and related timestamps.

Browser storage: your language preference and sign-in session are stored in your browser (local storage). We do not use third-party advertising or tracking cookies.

2. How we use your information

To provide the service: generate videos, publish them to the accounts you connect, run your schedules, and track credit usage.

To process subscription payments and apply plan credits.

To communicate with you about your account, respond to support requests, and notify you of important changes.

To keep the service secure and prevent abuse.

We do not sell your personal information.

3. YouTube API Services

ChessShort uses YouTube API Services to upload videos to a YouTube channel you connect and to read your channel name.

By connecting YouTube you agree to the YouTube Terms of Service: https://www.youtube.com/t/terms

Google's handling of your data is described in the Google Privacy Policy: https://policies.google.com/privacy

We request only the scopes required to upload videos and read your channel name. We do not use YouTube data for advertising and do not share it with third parties; it is used solely to perform the uploads you request.

You can review and revoke ChessShort's access to your Google account data at any time at: https://myaccount.google.com/permissions

Cached YouTube data (such as your channel title) is refreshed or deleted within a reasonable time, and immediately when you disconnect the account.

4. TikTok

ChessShort uses the TikTok Content Posting API to upload videos to a TikTok account you connect.

We request only the user.info.basic, video.upload and video.publish scopes.

By connecting TikTok you agree to TikTok's Terms of Service. Our handling of any data obtained from TikTok follows this Privacy Policy and TikTok's developer requirements.

You can disconnect at any time from the Connections page, which deletes the stored access token.

5. Service providers

We share data with the following providers only as needed to run the service:

Google Firebase (authentication and database) — Google LLC.

Cloudflare R2 (storage of generated video files) — Cloudflare, Inc.

PayMe (payment processing).

YouTube Data API and TikTok Content Posting API (publishing videos you request).

Microsoft Edge / Azure text-to-speech (generating the voice-over from the script text).

Lichess (source of chess puzzles — no personal data is sent).

6. Data retention

Account data is kept while your account is active. Generated videos and job history are kept until you delete them or close your account. Connected-account tokens are kept until you disconnect that account.

When you delete your account we remove your personal data within 30 days, except records we must keep for legal, tax or accounting reasons (such as payment records).

7. Your rights and choices

You can access, correct, export or delete your data. Delete individual videos from the dashboard, disconnect linked accounts from the Connections page at any time, and request full account deletion by emailing us.

Depending on where you live you may have additional rights under laws such as the GDPR or CCPA. Contact us to exercise them.

8. Security

Data is transmitted over HTTPS. OAuth refresh tokens are encrypted at rest using AES-256-GCM. Access to personal data is limited to what is needed to operate the service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children

ChessShort is not directed to anyone under 16 (or the age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

10. International transfers

Our providers may process data in the United States and other countries whose data-protection laws may differ from yours. By using the service you consent to this transfer.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email. Continued use after changes take effect means you accept the updated policy.

12. Contact

For privacy questions or requests: bonestudiocontact@gmail.com.