Privacy Policy

Last Updated: 3/29/2026

This Privacy Policy describes how Shyfly ("Shyfly," "Company," "we," "us," or "our") collects, uses, discloses, and protects personal information when you access or use our website, applications, and services (collectively, the "Services").

This Policy is designed to align with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) as amended by CPRA, and industry-standard data protection practices.

1. Eligibility and Minors

The Services are intended only for individuals who are at least 18 years old. We do not knowingly collect personal data from individuals under 18. If you believe that a person under 18 has provided personal information to us, please contact us so we can review and delete that information where appropriate.

2. Information We Collect

2.1 Information You Provide: Name, email, username, password, uploaded content (video, audio, images, text), prompts and editing instructions, and communications and support messages.

2.2 Automatically Collected Data: IP address, device type, OS, browser, usage behavior and feature interaction, logs, errors, and timestamps.

2.3 Third-Party Data: When you connect accounts (Instagram, TikTok, YouTube, etc.), we may collect account identifiers, access tokens, and authorized content and metadata.

3. How We Use Information

We use data to provide core functionality (editing, rendering, posting), execute automated workflows, improve performance and reliability, detect fraud and abuse, enforce our Terms of Service, and communicate with users.

4. AI and Automated Processing

We may use AI systems to edit or enhance media, generate captions or metadata, and optimize workflows. Outputs may be inaccurate or unintended. You are responsible for reviewing content before publishing. We do not train generalized AI models on private user content without explicit consent.

5. Legal Bases (GDPR)

We process personal data based on contractual necessity (service delivery), legitimate interests (security, improvement), legal obligations, and consent where required.

6. Sharing of Information

Service Providers (Subprocessors): Cloud hosting (e.g., AWS), payment processors (e.g., Stripe), and analytics tools.

Third-Party Platforms: When you authorize posting or integrations.

Legal Authorities: When required by law.

Business Transfers: In case of merger, acquisition, or asset sale.

7. Subprocessors

We use third-party vendors to operate the Services, including Amazon Web Services (hosting, storage) and Stripe (payments).

8. Data Retention

We retain data as follows: account data until deletion, user content until deleted or account termination, logs for 30 to 180 days, and billing records as required by law. Backup systems may retain data temporarily.

9. Your Rights

GDPR (EU/EEA): You have the right to access, rectification, erasure, restriction, objection, and portability of your personal data.

CCPA/CPRA (California): You have the right to know what data is collected, access and delete your data, correct inaccuracies, and opt-out (we do not sell or share data).

To exercise your rights, contact us at admin@shyfly.com.

10. Do Not Sell or Share

We do not sell or share personal information for advertising purposes.

11. International Transfers

Data may be processed in the United States. We use safeguards such as Standard Contractual Clauses (SCCs) where applicable.

12. Security

We implement encryption in transit (TLS), encryption at rest where applicable, access controls, and logging and monitoring. No system is completely secure.

13. Cookies

We use cookies for authentication, preferences, and analytics. You can control cookies via your browser settings.

14. Third-Party Services

We are not responsible for third-party platform policies or the data practices of integrated services.

15. Changes to This Policy

We may update this Policy at any time. Continued use of the Services constitutes acceptance of the updated Policy.

16. Contact

Shyfly
admin@shyfly.com