Privacy Policy for MintShorts

Last updated: August 31, 2026

This Privacy Policy explains how mintshorts.ai ("MintShorts," "we," "us," or "our") collects, uses, stores, shares, and deletes information when you use https://mintshorts.ai and its AI video-generation, scheduling, and social-publishing services (collectively, the "Service").

1. Information we collect

• Account information: name, email address, profile details, authentication records, preferences, and support communications.
• Content and settings: prompts, niches, scripts, titles, hashtags, schedules, images, audio, generated videos, revisions, and publishing selections.
• Connected-platform data: the account identifiers, display names, OAuth tokens, token expiry information, permissions, and publishing results described in Section 2.
• Billing information: subscription status and transaction metadata. Stripe processes payment-card information; we do not store complete card numbers on our servers.
• Technical and usage information: IP address, browser and device information, pages and features used, dates and times, cookies, logs, and diagnostic or security events.

2. Connected social-platform data

Connecting a social account is optional. We use OAuth authorization and do not receive or store your YouTube, TikTok, or Instagram password. We use each connection only for the features you select.

YouTube and Google

If you connect YouTube, we request the Google OAuth scopes youtube.upload and youtube.readonly. We access and store the connected channel identifier and display name, OAuth access and refresh tokens, token expiry, and the video identifier, status, and URL returned after an upload. We use this data to identify the authorized channel and upload videos with the title, description, tags, visibility, audience designation, and schedule you select. We do not request your Google password, viewing history, comments, subscriptions, YouTube Analytics, or advertising data.

MintShorts uses YouTube API Services. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Review our Google API Disclosure, the YouTube Terms of Service, and the Google Privacy Policy.

TikTok

If you connect TikTok, we request user.info.basic and video.publish. We access and store your TikTok Open ID, display name, OAuth access and refresh tokens, token expiry, available creator posting settings, and the publish identifier and status returned for a submitted video. We use this data to display the connected creator account, present the posting options TikTok makes available for that account, and submit a video only after the required per-post review and consent. We do not request your TikTok password, private messages, contacts, followers list, advertising data, or viewing history.

TikTok use remains subject to the TikTok Terms of Service and TikTok Privacy Policy.

Instagram and Meta

If you connect Instagram, we request instagram_business_basic and instagram_business_content_publish. We access and store the connected professional account identifier, username or display name, account type, OAuth token and expiry, and the media identifier, publishing status, and permalink returned when a Reel is published. We use this data only to identify the connected Business or Creator account and publish videos you manually approve or configure for series auto-posting. We do not request your Instagram password, messages, contacts, comments, insights, or advertising data.

Instagram use remains subject to the Instagram Terms of Use and Meta Privacy Policy.

3. How we use information

• Authenticate users and maintain accounts and preferences.
• Generate, render, store, revise, schedule, and publish videos.
• Refresh authorized OAuth tokens and maintain requested connections.
• Operate subscriptions, billing, customer support, and communications.
• Monitor reliability, troubleshoot errors, and prevent fraud or abuse.
• Comply with law and enforce our Terms of Service.

We do not sell or rent personal information. Connected-platform data is not used for targeted advertising, credit decisions, surveillance, or training AI models.

4. AI processing and service providers

We use service providers for hosting, databases, file storage, payments, email, support, analytics, and AI media generation. Prompts, scripts, images, audio, or other production inputs may be sent to AI and media providers when necessary to create the content you request. We do not send social-platform OAuth tokens or connected-account credentials to AI generation providers.

Providers process information for us under their applicable contracts, security commitments, and privacy terms. We may also disclose information when required by law, to protect users or the Service, in connection with a corporate transaction, or with your direction or consent.

5. Storage, security, and retention

Connected-account tokens are held in an access-controlled database, protected in transit with TLS and by our hosting provider's encryption at rest. Access is limited to server-side processes that need the credentials to provide connected-account and publishing features. No transmission or storage system is completely secure, and we cannot guarantee absolute security.

We retain account information and generated content while your account is active or as needed to provide the Service. OAuth tokens are retained only while the associated connection is active and necessary. Transaction, fraud, security, or legal records may be retained longer where required or permitted by law.

6. Revocation and deletion

You can disconnect YouTube, TikTok, or Instagram from Dashboard Settings at any time. Disconnecting stops future publishing, asks the applicable provider to revoke authorization where supported, and deletes the stored tokens and connected-account details from MintShorts. You can also revoke Google access through Google Account permissions and review Instagram authorizations through Instagram Apps and Websites.

Disconnecting or deleting MintShorts data does not delete videos already published to YouTube, TikTok, or Instagram. Those videos must be managed on the applicable platform. If a token is revoked or can no longer be refreshed, we stop using the connection and delete its stored authorization data.

You may request deletion of your MintShorts account and associated data at any time from the Delete account control in Dashboard Settings or by following our data deletion instructions. Account deletion cancels the linked Stripe customer subscription, attempts to revoke all connected social-platform grants, removes generated media, and deletes the MintShorts authentication account and user-owned database records. You may also request deletion by emailing cs@xrdivision.com. Verified deletion requests are processed as soon as possible and within seven calendar days, except where retention is legally required. Deleting data from MintShorts does not delete data held independently by a connected platform.

When Meta sends MintShorts a valid signed data-deletion request, we verify it using the applicable app secret and automatically remove the associated Instagram connection, OAuth credentials, account profile information, and Instagram publishing metadata.

7. Cookies and logs

We use cookies and similar technologies to maintain sessions, remember settings, protect the Service, and understand product usage. Browser and server logs may include IP address, browser type, requested pages, timestamps, referring pages, and error information. You can control cookies through your browser, although disabling essential cookies may prevent parts of the Service from working.

8. Your rights and choices

Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal information and to withdraw consent. Contact us to exercise a right. We may need to verify your identity before completing a request.

9. Children's privacy

MintShorts is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Creators remain responsible for accurately selecting whether content uploaded to YouTube is made for children and for complying with applicable child-privacy laws.

10. External links

The Service may link to third-party sites and services. Their privacy and security practices are governed by their own policies, and we are not responsible for third-party sites we do not operate.

11. Changes and contact

We may update this Privacy Policy and will post the revised date on this page. We will provide additional notice when required by law. For privacy questions or access, correction, revocation, or deletion requests, contact cs@xrdivision.com or use our contact page.