Politique de confidentialité

1. Data Controller

Shorts Uploader by Andre Fortunato operates the Services at shortsuploader.ia.br. We are the data controller responsible for your personal data. For inquiries about your data, contact us at https://andrefortunato.dev.br/contato/.

2. Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, and password (hashed) when you register.
• Payment data: Billing information processed by Stripe. We do not store full card numbers.
• Usage data: Logs of app usage, subscription status, and diagnostics to improve our Services.
• Technical data: IP address, device type, and browser information for security and analytics.

3. How We Use Your Data

We use your data to:

• Provide, maintain, and improve our Services
• Process subscriptions and payments
• Send transactional emails (account, billing, support)
• Comply with legal obligations
• Detect and prevent fraud or abuse
• Analyze usage to improve the product

We do not sell your personal data. We may share data with service providers (e.g., Stripe, Resend, MongoDB) under strict data processing agreements.

4. Legal Basis (GDPR/LGPD)

Contract: Processing necessary to perform our agreement with you (account, subscription, support).

Legitimate interest: Improving our Services, security, and fraud prevention.

Consent: Where required by law, we will obtain your explicit consent before processing.

5. Data Storage and Retention

Your data is stored on secure servers. We retain account data for as long as your account is active. After account deletion or subscription cancellation, we retain data only as required by law (e.g., tax records) or for legitimate business purposes (e.g., dispute resolution), typically no longer than 7 years.

6. Data Sharing

We share data only with: (1) payment processors (Stripe) for billing; (2) email providers (Resend) for transactional emails; (3) database providers (MongoDB) for storage; (4) authorities when required by law. We do not share data with third parties for marketing.

7. Cookies and Similar Technologies

We use essential cookies for authentication and session management. We may use analytics cookies to understand usage. You can control cookie preferences through your browser settings. Blocking essential cookies may affect Site functionality.

8. Your Rights

Under LGPD and GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Restrict: Request restriction of processing

To exercise these rights, contact us at https://andrefortunato.dev.br/contato/. EU residents may also lodge a complaint with their local data protection authority. Brazilian residents may contact the ANPD (Autoridade Nacional de Proteção de Dados).

9. Security Measures

We implement technical and organizational measures including encryption (HTTPS/TLS), hashed passwords, secure OAuth for YouTube credentials, and access controls. We regularly review and update our security practices.

10. International Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards (e.g., Standard Contractual Clauses, adequacy decisions) when required by applicable law.

11. Children

Our Services are not intended for users under 16. We do not knowingly collect data from children. If you believe we have collected data from a minor, contact us immediately.

12. Contact

For privacy-related questions or to exercise your rights, contact us at https://andrefortunato.dev.br/contato/.