Privacy Policy

1. Introduction

At BrainyShorts ('we,' 'our,' or 'us'), we are committed to protecting your privacy. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information when you use our platform ('the Platform'). By accessing or using the Platform, you agree to the collection and use of information in accordance with this policy.

Last updated: August 22, 2026.

2. Information We Collect

We collect information that you provide directly to us and information that is collected automatically when you use the Platform:

• Personal Information: When you register for an account, we collect personal identifiers such as your name, email address, and password.
• User Content: We collect the content you create, upload, or share on the Platform, including videos, images, and other media.
• Usage Data: We automatically collect information about your interactions with the Platform, such as your IP address, device information, browser type, operating system, referring URLs, and pages visited.
• Social Media Information: When you connect your social media accounts to our Platform, we collect information such as your profile information, access tokens, and content you share from those platforms.
• Authentication Access Keys: We collect authentication access keys to enable cross-posting functionality to your social media accounts.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing and Maintaining the Service: To operate the Platform and manage user accounts.
• Social Media Posting: To enable cross-posting functionality to your social media accounts.
• Improving the Platform: To understand and analyze usage trends and preferences to enhance user experience and develop new features.
• Communication: To send you administrative information, updates, security alerts, and support messages.
• Marketing and Promotions: To inform you about news, offers, and events related to BrainyShorts that may interest you. You can opt-out of receiving marketing communications at any time.
• Compliance and Protection: To enforce our Terms of Service, comply with legal obligations, and protect the rights, privacy, safety, or property of our users and the public.

4. Data Security & Storage

Account, publication, automation, and analytics data is stored with our cloud service providers. Social access tokens are encrypted at rest and are used only for the connections and publishing actions you authorize. Users may request deletion of their account data by contacting [email protected].

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, please be aware that no method of transmission over the internet or method of electronic storage is completely secure.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: We engage third-party companies and individuals to facilitate our services, provide services on our behalf, or assist us in analyzing how our Platform is used. These third parties have access to your personal information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your personal information may be transferred. We will provide notice before your personal information is transferred and becomes subject to a different Privacy Policy.

6. Google and YouTube Data

BrainyShorts uses YouTube API Services. When you connect a YouTube channel, BrainyShorts receives the channel identifier and name, OAuth access and refresh tokens, and the video metadata and processing status needed to perform and verify actions you request. BrainyShorts also retrieves channel statistics (subscriber, view, and video counts) and view, like, and comment counts for videos published in the last 30 days, and shows them only to you as analytics. For local automations, the runner stages the requested video in a private Cloudflare R2 bucket using a short-lived upload URL. BrainyShorts then uses YouTube API Services and the connected YouTube account to publish and verify that video. Azure Blob Storage may be retained as a rollback path during the storage migration. The runner never receives your Google credential.

We use Google user data only to provide user-authorized connection, publishing, verification, and related support features. We do not sell Google user data, use it for advertising, or use it to train generalized artificial intelligence models. We disclose it only to infrastructure providers acting on our behalf, when needed to communicate with Google APIs, or when required by law.

BrainyShorts's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

YouTube API Services are provided under the YouTube Terms of Service. Google's handling of information is described in the Google Privacy Policy.

Google connection tokens are encrypted at rest and retained only while the channel remains connected. A failed or abandoned connection may retain an encrypted token only in a limited revocation queue until Google confirms that access is revoked. BrainyShorts revalidates the authorization at least every six days and refreshes or deletes stored YouTube API data within 30 days. Disconnecting the channel in Social Accounts revokes BrainyShorts's Google authorization and deletes the stored connection, YouTube publication records, and related analytics. This local deletion does not delete videos stored by YouTube. You can also revoke access from your Google security settings; data associated with revoked access is deleted as soon as possible and within seven calendar days.

7. Instagram and Meta Data

When you connect an Instagram professional account, BrainyShorts receives the account identifier, username, profile information, access token, published-media identifiers, and insights needed to display the account, publish content you authorize, and report performance. BrainyShorts does not sell Meta data, use it for advertising, or use it to train generalized artificial intelligence models.

Disconnecting Instagram from Social Accounts disables the connection and deletes the stored token, connection record, related publication records, and analytics. Removing BrainyShorts from Instagram or submitting a Meta data-deletion request triggers the same deletion automatically. If a publication is already in progress, the connection is disabled immediately and deletion completes after that operation ends. Content already published on Instagram is not deleted from Instagram.

Data-deletion instructions and request status are available on our data deletion page.

8. LinkedIn and X Data

When you connect LinkedIn or X, BrainyShorts receives the account identifier, display name or username, granted permissions, encrypted OAuth access and refresh tokens where provided, token expiry information, and identifiers for posts created at your request. We use this information only to display the connection and to publish, schedule, and verify content you authorize. We do not sell this data, use it for advertising, or use it to train generalized artificial intelligence models.

Disconnecting a LinkedIn or X account deletes its stored BrainyShorts connection credentials and related publication records. It does not delete content already published on that platform. You can also revoke BrainyShorts from your LinkedIn permitted services or X connected apps settings.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You can request access to the personal information we hold about you.
• Correction: You can request that we correct or update inaccurate or incomplete information.
• Deletion: You can request that we delete your personal information, subject to certain exceptions.
• Objection: You can object to the processing of your personal information under certain circumstances.
• Data Portability: You can request a copy of your personal information in a structured, commonly used, and machine-readable format.

To exercise these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe.

10. Cookies and Tracking Technologies

We use essential cookies and similar storage for authentication, security, OAuth state validation, and user preferences. We do not use these technologies for third-party behavioral advertising.

11. Children's Privacy

Our Platform is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to remove that information from our servers.

12. International Data Transfers

Your information, including personal information, may be transferred to—and maintained on—computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

13. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at:[email protected]