Privacy Policy
Welcome to ShortsMonkey. ShortsMonkey provides users and visitors ("you" and "your") with a service for analyzing YouTube viral videos, including but not limited to video discovery, channel monitoring, and data export ("Service").
This Privacy Policy ("Policy") describes and specifies how we collect, use, share, and protect (collectively, "process") personal information collected in the context of our Service. Please read this Policy carefully before using or submitting any information through or in connection with any portion of the Service. By using any portion of the Service, you agree to our collection, use, and disclosure of your information as set forth in this Policy. To the extent permitted by law, the English version of this Policy is binding, and other translations are for convenience only.
Europe (EEA, UK, Switzerland)
For the purposes of compliance with the EU General Data Protection Regulation 2016/679 ("GDPR"), the data controller is ShortsMonkey, which can be contacted at the address listed in the "How to Contact Us" section below. You do not need to consent to this Privacy Policy, but you acknowledge that you have read and understand its terms.
California Residents
If you are a California resident, the California Consumer Privacy Act of 2018 and the California Privacy Rights Act of 2020 provide you with additional rights.
This Policy applies to the processing of your personal information, provided that it does not conflict with applicable laws and regulations that apply to you. This Policy will provide you with the following information:
Table of Contents
1. Definitions
In this Policy, unless the context otherwise requires, the following definitions shall apply:
- We or Us
- Refers to the ShortsMonkey team and service providers.
- Cookie
- A small file placed on your computer, mobile device, or any other device by a website, with one of its many uses being to contain details of your browsing history on that website.
- Data Controller
- For GDPR purposes, a legal entity company that alone or jointly with others determines the purposes and means of the processing of personal information. For GDPR purposes, ShortsMonkey is the Data Controller.
- Personal Information (or Personal Data)
- Any information relating to an identified or identifiable individual. For GDPR purposes, Personal Information means any information relating to You, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity. For CPRA purposes, Personal Information means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with You.
- Website
- ShortsMonkey, accessible from the application URL.
- Sale
- The disclosure of any personal information by a business to another business or a third party for monetary or other valuable consideration.
- Service
- Analyzing YouTube viral videos, including but not limited to video discovery, channel monitoring, and data export.
- Service Provider
- Any natural or legal person who processes data on behalf of Us. It refers to third-party companies or individuals employed by Us to facilitate the Service, to provide the Service on Our behalf, to perform services related to the Service, or to assist Us in analyzing how the Service is used. For GDPR purposes, Service Providers are considered Data Processors.
- Usage Data
- Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- You
- Under GDPR, You can be referred to as the Data Subject or as the User as you are the individual using the Service.
2. What Information We Collect
As described further below, we collect information in a variety of ways when you use or otherwise access the Service, including when you provide information directly to us, and when information is passively collected from your browser or device (such as by logging how you interact with our Service).
2.1. Information You Provide Directly to Us
A. Registration Information
When you register for our Service or open an account, depending on the registration channel you choose, we may collect your email address, username, and verification code (for multi-factor authentication and to send you important messages), as well as any information you choose to provide to us (such as profile picture, your company position).
If you are located in Europe, the basis on which we process this information is entering into and performing a contract with you (GDPR Article 6(1)(b)).
B. Purchase Information
When you purchase paid services through the Website (e.g., a membership subscription to our Service), we may collect: (i) personal information related to your order, such as order number, time of order placement, and the services you choose to purchase; (ii) your financial information, such as credit card information collected by our payment service providers on our behalf.
If you are located in Europe, the basis on which we process this information is entering into and performing a contract with you (GDPR Article 6(1)(b)).
C. Content You Provide Through Our Service
We collect and securely store content that you post, send, and receive as part of the Service through our products, such as search queries, filter preferences, saved channels, and alert settings. This content includes any personal information about you that you may choose to include. For any personal information you choose to include in the content, you acknowledge and agree that you have obtained authorization from the relevant data subjects and have informed them that their personal information may be publicly displayed on our Service.
D. Communications with Us
You may contact us via email or other means (e.g., to ask questions about our Service, seek customer support, or tell us your thoughts about new products or modifications to existing products). You may also choose to respond to surveys we send out or queries about your usage. When you do so, we collect the information you choose to provide to us, such as your contact details, any images you choose to upload, and the content and nature of your message. To ensure the security of your personal information, we kindly request that you avoid sending any financial or sensitive data through our chat service or other channels unless we specifically request it to provide you with the Service.
2.2. Information Collected Passively or Automatically
A. Usage Information
When you interact with us through the Service, we automatically receive and store certain information from the device you use to access the Service, such as your IP address, browser settings, device information, click logs, crash data, session ID, geolocation information, etc. This information is collected passively through various technologies, including the type of internet browser or mobile device you use, the source website from which you accessed the Service, your operating system, and location data obtained through your IP address that identifies the city and state in which you logged into ShortsMonkey. We collect the above personal information to ensure the security and stability of our Service provision.
If you are located in Europe, the basis on which we process this information is our legitimate interests to support our business, where your data protection rights do not prevail over our interests (GDPR Article 6(1)(f)).
B. Cookies and Other Electronic Technologies
We collect certain types of information through various commonly used technologies. These technologies typically include tracking pixels, JavaScript, and various "locally stored data" technologies, such as Cookies and Local Storage. Depending on the technology we use, locally stored data may include text, personal data (such as your IP address), and information related to your use of ShortsMonkey.
3. How We Use the Information We Collect
We use information collected from the Service in a manner consistent with this Policy. We use the information you provide (or otherwise allow the Service to access) for the following purposes:
3.1. Providing the Service
We use the information collected to operate, maintain, and provide you with the Service, and to operate ShortsMonkey in accordance with this Policy and the Terms of Service of our Service. We may also use this information to limit attempts to use the Service from restricted regions and to use the Service in violation of applicable Terms of Service.
3.2. Analyzing and Improving Our Service and Platform
We use this information to administer, develop, improve, and maintain any Service (including responding to and processing queries, providing maintenance and support, and preparing data backups). We use the information collected to analyze data usage trends and preferences to improve the accuracy, effectiveness, security, usability, or popularity of our Service.
4. How We Disclose the Information We Collect
In certain situations, we share information collected through the Service with certain third parties without further notice to you, as follows. It should be noted in particular that we are not in the business of selling your information to advertisers or other third parties.
4.1. Third-Party Service Providers Who Process Your Data on Our Behalf
This includes:
A. Security Service Providers
We may (where permitted by applicable law) share your click logs, crash data, session ID, and device information with such providers to improve our Service and protect the security of our Service.
B. Other Third-Party Service Providers
Such as hosting providers, IT service providers, and other similar services we require to provide you with the Website and other business-related services. Any data processing performed on our behalf complies with applicable law.
4.2. Government Agencies/Law Enforcement Officials
Personal data may also be shared with government agencies and/or law enforcement officials if required for the above purposes, as required by law, or as required to legally protect our legitimate interests in compliance with applicable laws.
4.3. Potential Buyers and Advisors
In the event of a sale, merger, reorganization, dissolution, or similar event of the company, or in steps in preparation for such events (such as due diligence in a transaction), your personal data may (where permitted by applicable law) be shared with our advisors and the advisors of any potential purchaser and will be passed on to the new owners of the business.
4.4. Third Parties with Whom We Partner or Who Provide Services You Choose to Link
We share personal information with third parties who partner with us on various projects. When we share personal information with third parties, we require these third parties to process the information in accordance with relevant laws. When you link to or interact directly with third-party companies, their use of your personal information and your use of their features are governed by those companies' privacy statements. We encourage you to read their privacy statements carefully.
4.5. With Your Consent
We may share your information for other purposes if (i) you instruct us to do so or (ii) you consent to such sharing.
4.6. Aggregated Data
We aggregate, anonymize and/or de-identify information collected about you, both actively and passively, so that the information no longer relates to you personally. We then use this data for various legitimate purposes, including but not limited to our research into customer interests and behavior. We also share this information with our affiliates, agents, business partners, research institutions, or other third parties (e.g., Google Analytics).
4.7. Other Users of Our Service
If you choose to make your information public in publicly accessible areas of the Service (e.g., in content or comments you post), we make your information available to other users of our Service.
5. How We Handle Children's Personal Information
Our Website is not directed to children (defined as children under the age of 13, or in Europe, under the age of 16), and we do not knowingly collect personal data from children. If we discover that a child has provided us with personal data, we will immediately delete such personal data from our systems. Children must not submit any personal data to us without permission from their parent or guardian. If you have reason to believe that a child has provided personal information to us through the Service, please contact us at support@shortsmonkey.com, and we will delete such information from our database as required by law.
6. Security Measures
We are committed to keeping your personal data secure and strive to maintain the highest security standards. To this end, we have adopted state-of-the-art technology and implemented robust technical and organizational measures to ensure that your personal data is adequately protected from loss, misuse, unauthorized access, disclosure, alteration, and destruction. For particularly sensitive personal data transmitted over the internet, we specifically use encrypted transmission paths.
Unfortunately, the transmission of data via the internet is not completely secure. Therefore, while we will do our best to protect your personal data, we cannot guarantee the absolute security of data transmitted to our Website. Any transmission is at your own risk. Once we have received your personal data, we will employ strict procedures and security features to prevent unauthorized access. This includes but is not limited to the following measures:
7. Do Not Track Signals
"Do Not Track" (DNT) is a privacy preference that users can set in some web browsers. We do not recognize or respond to browser-initiated DNT signals, as the internet industry is currently still working to clearly define what DNT means, what it means to comply with DNT, and a common approach to responding to DNT.
8. How Your Information Will Be Stored and Transferred
8.1. Data Storage
Your personal information will be stored on secure servers in the United States via our database providers (Neon/Supabase).
8.2. Data Retention
Account Data
Retained as long as your account is active. Deleted within 30 days after account deletion.
Search History and Monitored Channels
Retained for your convenience. You can delete individual records or all history at any time through your account settings.
Alert Logs
Stored for 90 days for debugging and compliance purposes, then automatically purged.
System Logs
Retained for 6 months for security and diagnostic purposes.
9. Your Rights
Under applicable law, you have certain rights regarding your personal data. These rights include:
Access Your Personal Data
You have the right to request that we confirm whether we are processing your personal data and, if so, you have the right to access that personal data and receive information about how your data is processed, as well as to request that we provide you with a copy of your personal data.
Rectify Your Personal Data
This enables you to correct any incorrect, incomplete, or inaccurate data we hold about you.
Erase Your Personal Data
This enables you to request that we delete your personal data, for example, when the data we hold about you is no longer necessary or your data has been unlawfully processed.
Object to Processing
You have the right to object to the processing of your personal data and to ask us to stop processing, for example, when the data is being used for direct marketing purposes, or when we rely on legitimate interests (or those of a third party). In some circumstances, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Restrict Processing
This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data's accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Receive Your Personal Data in a Usable Electronic Format and Transmit it to a Third Party (Data Portability)
If we process your personal data based on your consent or a contract, you may request to receive your personal data in a structured, commonly used, and machine-readable format and transmit that data without hindrance to another controller.
Withdraw Consent
When we rely on consent to process your personal data, you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you that require that personal data. We will advise you if this is the case at the time you withdraw your consent.
Not Be Subject to Decisions Based Solely on Automated Processing
You have the right to request not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Complain to Your Local Data Protection Authority
You have the right at any time to submit your request and complaint to your local regulator, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement of the GDPR. However, we hope to have the opportunity to deal with your concerns before you approach the data protection authority, so please contact us first.
Limitations: These rights may be limited in some circumstances – for example, when we can demonstrate that we have a legal requirement to process your data (e.g., a tax authority requires us to keep it) or as is necessary for the normal performance of a contract. In some cases, this may mean that we can retain data even if you withdraw your consent. If you wish to exercise any of the above rights, please contact us via the details in the "How to Contact Us" section below. You can also update your personal information in your profile in the website settings.
10. Regional Supplemental Terms and Conditions
10.1 Privacy Information for California Residents
10.1.1 Categories of Information Collected and Disclosed
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), and we want to provide you with the following additional information about the purposes for which we use each category of personal information (as defined by CCPA) we collect, the categories of third parties to whom we disclose personal information for business purposes or cross-context behavioral advertising. This includes our use of third-party analytics services and online advertising services. These are described in detail in our Cookie Policy and may result in the disclosure of online identifiers (e.g., Cookie data, IP addresses, device identifiers, and usage information).
Specifically, your contact information (such as email) or internet network and device information (such as Cookie data and IP addresses) may be disclosed to online advertising and analytics partners. For more information about each category of personal information, purposes of use, and third parties to whom we disclose personal information, please see the "What Information We Collect," "How We Use the Information We Collect," and "How We Disclose the Information We Collect" sections in this Policy.
10.1.2 Additional CPRA Rights
We do not provide any financial incentives in exchange for your personal information. The CPRA also allows you to limit the use or disclosure of your sensitive personal information (as defined in the CPRA) when it is used for certain purposes. Please note that we only use or disclose sensitive personal information for business purposes, and you cannot opt out of these purposes under the CPRA. Please see the "Your Rights" section above in this Policy for additional rights you have under California law regarding your personal information and how to exercise those rights.
10.1.3 Retention of Your Personal Information
Please see the information under "How Your Information Will Be Stored" in this Policy.
10.1.4 California "Shine the Light" Law Disclosure
California's "Shine the Light" law gives California residents the right, in some circumstances, to opt out of sharing certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes, or alternatively, we provide a free method for consumers to opt out of any such disclosure. We currently do not disclose your personal information to third parties for their direct marketing purposes.
10.2 Privacy Information for European Residents
10.2.1 Legal Basis for Processing
If you are located in Europe, the basis on which we process personal information is entering into and performing a contract with you (GDPR Article 6(1)(b)).
10.2.2 How Your Information Will Be Transferred Globally
For users located in the European Economic Area, we may transfer personal data to law enforcement agencies or other organizations for the purposes described in this Policy, including to organizations located outside of Europe. The laws of certain jurisdictions outside of Europe may not be as protective as European data protection laws. If your personal data is transferred to a country not subject to a European Commission adequacy decision, we will ensure that appropriate safeguards are implemented for these jurisdictions (e.g., EU Standard Contractual Clauses or third-party Binding Corporate Rules) to ensure an adequate level of protection for your personal data.
10.3 Privacy Information for Mainland China Residents
10.3.1 How Your Information Will Be Stored
Your personal information will be stored overseas in the United States.
10.3.2 How Your Information Will Be Transferred Globally
For users located in Mainland China, we may transfer personal information to law enforcement agencies or other organizations for the purposes described in the "How We Use the Information We Collect" section of this Policy. We will only transfer your personal information in accordance with applicable laws and regulations and will take necessary organizational and technical measures to protect your personal data. For more information, or to exercise your rights as a data subject, please send an email to support@shortsmonkey.com.
10.3.3 Your Rights
For users located in Mainland China, in addition to the "Your Rights" section of this Policy, you also have the right to deregister your account and the right to request that we explain how your personal information is processed. To exercise these rights, please contact us via the details in the "How to Contact Us" section below. We will respond to your data subject request within 15 business days.
11. Other Terms
This Privacy Policy is incorporated into and forms part of our Terms of Service. Any capitalized terms not defined in this Policy have the meanings given to them in the Terms of Service.
12. How This Policy Will Be Updated
We reserve the right to update or modify this Policy at any time. If we do so, we will update the date at the top of its first page accordingly and encourage you to check the changes we have made. When changes to the Policy will have a fundamental effect on the nature of the processing or will materially affect you, we will, as required by applicable law, give you advance notice by email or a pop-up banner on the Website so that you have the opportunity to exercise your rights. If you do not agree with our revisions to the Policy, you may deactivate your account or stop using our Service. Please review this Policy regularly for any updates or changes. If you are located in Europe, you will not need to consent to any changes to this Policy, but you do acknowledge that you have read and understand its terms.
13. How to Contact Us
If you have any questions about this Policy or the Service's user information processing practices, please feel free to contact us at the following email address:
We will respond to all legitimate requests within 30 days.