Privacy Policy - ShortForge

1. Introduction

This Privacy Policy explains how APHVN Limited ("ShortForge," "we," "us," or "our") collects, uses, and shares information about you when you use our Service. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect the following types of information:

• **Personal Information:** Name, email address, billing address, company name (if applicable), job title (optional), profile picture (optional), payment information (credit card details, processed through Stripe).
• **User Content:** Data and content you upload to the Service.
• **Usage Data:** Information about how you use the Service, such as pages visited, features used, and duration of sessions.
• **Device Information:** IP address, browser type, operating system, device identifiers.
• **Cookies and Similar Technologies:** We use cookies and similar technologies to collect information about your browsing activity and to improve our service. These may include technologies used for analytics, functionality, and payment processing.

We may collect your approximate location based on your IP address for fraud prevention and to personalize your experience.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and improve the Service.
• To personalize your experience.
• To communicate with you, including sending you updates and marketing materials (where permitted by law).
• To analyze usage of the Service.
• To detect and prevent fraud and abuse.
• To comply with legal obligations.
• To improve the accuracy and relevance of our AI video generation models, and provide personalized video recommendations based on your activity.

We create user profiles to personalize your experience, recommend relevant content, and provide targeted support.

4. Sharing Your Information

We share your information with the following categories of recipients:

• **Service Providers:** We share information with third-party service providers who assist us with tasks such as payment processing (Stripe), analytics (Google Analytics, Mixpanel, Hotjar), customer support (Intercom), and other essential functions.
• We may share anonymized and aggregated data with advertising partners to improve the targeting and effectiveness of our advertising campaigns. We do not share personally identifiable information with advertising partners.

We have data processing agreements in place with our service providers to ensure they protect your information in accordance with GDPR. Currently, we do not share user data with any business partners. We do not sell user data to any third parties.

5. International Data Transfers

Your information may be transferred to and processed in countries outside of the UK and the European Economic Area (EEA) that may not have equivalent data protection laws. We may transfer user data to the United States, where some of our service providers are located.

We use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of protection for personal data transferred to the United States. We also ensure that our service providers have implemented appropriate technical and organizational measures to protect your data.

6. Your Rights

Under GDPR, you have the following rights:

• **Right to Access:** You have the right to request access to your personal data.
• **Right to Rectification:** You have the right to request correction of inaccurate or incomplete personal data.
• **Right to Erasure:** You have the right to request deletion of your personal data (the "right to be forgotten").
• **Right to Restriction of Processing:** You have the right to restrict the processing of your personal data.
• **Right to Data Portability:** You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• **Right to Object:** You have the right to object to the processing of your personal data in certain circumstances.
• **Right to Withdraw Consent:** If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.

To exercise your rights, please contact us at hello@aphvn.com.

7. Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. We retain your personal information for as long as your account is active and for a period of 6 months after account deletion to allow you to reactivate your account and retrieve your data. We retain your user content for 30 days after account deletion, after which it is permanently deleted from our servers. We retain usage data for 24 months for analytical purposes.

8. Security

We take reasonable measures to protect your information from unauthorized access, use, or disclosure. These measures include industry-standard security measures to protect your data, including encryption, firewalls, intrusion detection systems, and regular security audits. We also train our employees on data security best practices.

We may use pseudonymization techniques on certain datasets for analytical purposes.

9. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website.