Privacy Policy

1. Information we collect

Information you give us:

• Your account: name, email address, username, profile picture, and password (stored only as a hash by our sign-in provider), or your Google account’s name and email if you sign in with Google.
• Your workspace: brands, projects, tickets, scripts, comments, discussions, labels, and the video, audio and image files your team uploads.
• Messages you send us for support.

Information collected automatically:

• Activity in the workspace, such as who moved, edited, downloaded or commented on a ticket and when, kept as the workspace’s activity log.
• Technical data: IP address, browser type, and the times you sign in. People opening a shared delivery link are counted by an anonymous browser key, device type and country.

2. Connected TikTok and Instagram accounts

A workspace administrator can connect a brand’s TikTok or Instagram professional account so Mastershorts can publish the team’s finished videos to it. When an account is connected we receive and store:

• The account’s ID, username and display name.
• Access and refresh tokens issued by TikTok or Meta, encrypted at rest.
• For TikTok, the posting options the account allows (privacy levels, whether comments, Duet and Stitch are available, and its longest allowed video), read each time a post is prepared.
• For each post we publish: the platform’s post ID, its link, and its publishing status.

We use this data only to publish the videos your team chooses to publish, at the time it chooses, with the caption and settings it sets, and to show whether each post went out. Nothing is posted without a team member pressing the button to schedule or post it. We do not read your followers or messages. We read the account’s most recent posts only to confirm that a post we sent went out, and keep nothing from them but that post’s ID and link. We do not use platform data for advertising, and we do not sell or share it with anyone else.

Use of TikTok and Instagram is also subject to TikTok’s Privacy Policy and Instagram’s Privacy Policy.

3. How we use information

• To run Mastershorts: sign you in, show your team its work, store and play its files, and send the notifications you have not turned off.
• To publish videos to connected accounts, as described above.
• To keep the service secure, investigate problems, and provide support.
• To improve the service and tell you about changes to it.

We process your information because it is needed to provide the service you signed up for, for our legitimate interest in keeping it secure and working, to meet legal obligations, or with your consent.

4. Who we share it with

Your workspace’s content is visible to the members of that workspace, according to their roles, and to anyone your team sends a share link to. Beyond that, we share information only with service providers that run parts of Mastershorts for us, and only as they need to:

• Supabase, for the database and sign-in.
• Vercel, which hosts the application.
• Cloudflare R2, which stores uploaded files.
• Google, if you choose to sign in with Google.
• Our email delivery provider, for notification and sign-in emails.
• TikTok and Meta, which receive the videos, captions and settings your team publishes.

We also disclose information when the law requires it.

5. Cookies

Mastershorts uses cookies to keep you signed in, to remember which brand you are working in, and to recognise a browser that opens a share link. It stores some preferences, such as table columns, in your browser. We do not use advertising or analytics cookies.

6. Retention and deletion

• Workspace content is kept while the workspace exists.
• When a connected account is disconnected in Mastershorts, we revoke our access where the platform allows it and delete its stored tokens. Removing Mastershorts from your Instagram or TikTok app permissions does the same once the platform tells us, or the next time we use the account and find our access gone.
• Records of posts already published stay with the ticket, as part of the workspace’s history, until the workspace or ticket is deleted.
• Otherwise we keep information only as long as we need it for the purposes above and our legal obligations, then delete or anonymise it.

To have your data or a connected account’s data deleted, email creators@masterhooks.com. We complete deletion requests within 30 days.

7. Your rights

Depending on where you live, you may have the right to access, correct or erase your personal information, to restrict or object to certain processing, to receive a copy of it, and to withdraw consent. Contact us at the address below to use these rights. We usually reply within 30 days.

8. Security

Data is encrypted in transit, connected-account tokens are encrypted at rest, and files are reached only through short-lived signed links. If a breach affects your information, we will tell you and the relevant authorities as the law requires, without undue delay, with what happened, the information involved, and what we are doing about it.

9. Children

Mastershorts is not directed at anyone under 18. If we learn we have collected information from a child, we will delete it.

10. Changes

We will post changes to this policy on this page with a new date, and tell you by email when a change is material.

11. Contact

Masterhooks, Beverly Hills Dr, Whittier, California 90601, US. creators@masterhooks.com. See also our Terms of Service.