1.Definitions
Terms like controller, processor, personal data and sub-processor have the meaning given in the GDPR. This addendum is part of the Terms of Service.
2.Scope and roles
The creator is the controller of their community’s data. Shortformia processes it only to provide the service: members’ identities on Whop, Discord or Telegram, their posted wins and screenshots, cards, links, clicks and joins.
3.Processing instructions
We process personal data only on the creator’s documented instructions, which are the settings and actions in the app, unless the law requires otherwise. We tell the creator if we believe an instruction breaks the law.
4.Confidentiality
Everyone at Shortformia with access to personal data is bound to confidentiality.
5.Sub-processors
Supabase, Vercel, Whop and Anthropic; for Discord servers, Discord and Railway; for Telegram groups, Telegram. As listed on the privacy page. The creator authorises these. We tell creators before adding or replacing one, and they may object on reasonable grounds.
6.Security measures
Row-level security on every table, server-only database access, an append-only audit log, screenshot redaction (on the phone on Whop, on our servers on Discord and Telegram, keeping only the blurred copy) and hashed click data.
7.International transfers
Data is stored in the EU. Where a sub-processor transfers data outside the EU, it does so under an adequacy decision or standard contractual clauses.
8.Data subject requests
Members and creators can export and delete data in the app. We help with any request the app can’t handle.
9.Breach notification
We notify affected creators without undue delay after becoming aware of a personal data breach, with the information they need to meet their own obligations.
10.Audits
We make available the information needed to show compliance with this addendum, and answer reasonable written questions about it, once a year or after a breach.
11.Term and deletion
This addendum lasts as long as the service is used. Afterwards we delete the community’s data unless the law requires us to keep it.
Questions? Contact support.