Privacy Policy
Effective Date: June 20, 2026
Shotro inc. (“Shotro,” “we,” “us,” or “our”) offers an AI-assisted creative production platform, including tools for AI filmmaking, video creation, project planning, production workflows, collaboration, content generation, and related services. This Privacy Policy describes how Shotro collects, uses, discloses, and protects personal information when you use Shotro, including our website located at https://shotro.ai/, our applications, APIs, AI creative tools, marketing, events, community features, support, and other services that link to this Privacy Policy (collectively, the “Service”).
Shotro may provide additional or supplemental privacy notices for specific products, features, programs, or services at the time we collect personal information.
NOTICE TO EUROPEAN USERS: Please see the “Notice to European Users” section below for additional information for individuals located in the European Economic Area or the United Kingdom.
Index
1. Personal Information We Collect
2. How We Use Your Personal Information
3. Retention
4. How We Share Your Personal Information
5. Your Choices
6. Other Sites and Services
7. Security
8. International Data Transfers
9. Children
10. Changes to This Privacy Policy
11. Notice to European Users
12. How to Contact Us
1. Personal Information We Collect
1.1 Information You Provide to Us
Personal information you may provide to us through the Service or otherwise includes:
Contact data, such as your first and last name, email address, billing address, mailing address, company name, and phone number.
Profile data, such as your username, password, profile photo, account preferences, role, company information, links to professional or social profiles, interests, participation in surveys, promotions, or events, and other information you add to your account profile.
Demographic data, such as age, date of birth, gender, or other demographic information if you choose to provide it or if it is required for a specific feature or compliance purpose.
Communications data, including the contents of messages, support requests, feedback, and other communications you send to us through the Service, social media, email, or other channels.
Transactional data, such as information relating to orders, purchases, subscriptions, credits, invoices, billing history, payment status, and transaction history.
Payment data needed to complete transactions, including payment card information or bank account information. Payment data is collected and stored by our payment processors and not directly by Shotro unless otherwise stated.
Marketing data, such as your preferences for receiving marketing communications and details about your engagement with them.
Project and creative data, such as text, prompts, scripts, images, videos, audio, references, files, project materials, brand assets, production notes, comments, edits, generated outputs, and other content you upload to or process through the Service.
Metadata, including information about how, when, where, and by whom content was created, uploaded, collected, formatted, edited, generated, or shared, as well as keywords, location information, technical settings, and other similar data.
Query and prompt data, such as prompts, commands, instructions, descriptions, comments, questions, messages, creative briefs, scene descriptions, references, and other information you submit through the Service.
Feedback data, such as information about your experience with the Service, bug reports, feature requests, survey responses, and product feedback.
Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
YOU SHOULD NOT PROVIDE SHOTRO WITH CONFIDENTIAL, SENSITIVE, BIOMETRIC, HEALTH, FINANCIAL, GOVERNMENT ID, UNLICENSED PROPRIETARY, OR HIGHLY SENSITIVE INFORMATION THROUGH THE SERVICE UNLESS YOU HAVE THE RIGHT TO DO SO AND ACCEPT THE ASSOCIATED PROCESSING.
1.2 Third-Party Sources
We may combine personal information we receive from you with personal information we obtain from other sources, such as:
Public sources, including public websites, public records, social media platforms, and other publicly available sources.
Service providers, including companies that provide services on our behalf or help us operate the Service or our business.
Third-party services, such as authentication providers, social media services, cloud storage platforms, creative tools, collaboration tools, or other services that you use to log in, connect, sync, or interact with Shotro.
For example, if you log in with a Google account or connect a Google service, we may receive your Google username, profile picture, email address, account identifiers, and other information made available to us based on your settings and authorization. Our use and disclosure of information received from Google APIs will adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.
1.3 Automatic Data Collection
We, our service providers, and our business partners may automatically collect information about you, your device, and your interactions over time with the Service, our communications, and other online services, such as:
Device data, including operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type, IP address, unique identifiers, language settings, mobile carrier, network information, and general location information such as city, state, or geographic area.
Online activity data, including pages or screens viewed, time spent on pages or screens, navigation paths, access times, duration of access, referring websites, activity on pages or screens, feature usage, generation activity, and interactions with emails or links.
Location data, when you authorize the Service or a mobile application to access your device location or when approximate location is inferred from IP address.
Communication interaction data, such as whether you open or forward emails or click links in our communications. We may collect this through pixel tags, clear GIFs, or similar technologies.
1.4 Data About Others
Shotro may offer features that allow users to invite collaborators, teammates, clients, or contacts to use the Service or join a project. If you provide information about another person, you represent that you have permission to do so.
Please do not share another person’s contact details, likeness, voice, biometric information, private information, or other personal information through the Service unless you have the right and permission to do so.
1.5 Cookies and Similar Technologies
Some automatic data collection is facilitated by cookies, pixels, web beacons, local storage, SDKs, log files, device identifiers, and similar technologies. For more information, please see our Cookie Notice. We may also store a record of your cookie and privacy preferences.
2. How We Use Your Personal Information
We may use personal information for the following purposes or as otherwise described at the time of collection.
2.1 Service Delivery and Operations
We may use personal information to:
1. provide, operate, maintain, and improve the Service;
2. create, authenticate, and manage accounts;
3. process payments, subscriptions, credits, transactions, and billing;
4. enable security features and account protection;
5. establish and maintain user profiles;
6. facilitate invitations, collaboration, sharing, and team features;
7. upload, store, process, sync, generate, edit, and manage project and creative data;
8. process prompts, references, files, project data, and generated outputs;
9. communicate with you about the Service, including announcements, updates, security alerts, billing notices, support messages, and administrative messages;
10. communicate with you about events, contests, promotions, or programs in which you participate;
11. provide support and respond to requests, questions, feedback, or complaints;
12. develop new features, products, services, and workflows.
2.2 Service Personalization
We may use personal information to:
1. understand your needs, preferences, and interests;
2. personalize your experience with the Service;
3. remember settings, selections, and preferences;
4. customize product experiences, workflows, recommendations, and communications.
2.3 Service Improvement, Analytics, and Development
We may use prompts, uploads, outputs, feedback, usage information, telemetry, and project data to provide, operate, maintain, improve, secure, and develop Shotro, including quality, safety, reliability, product performance, abuse prevention, moderation, user experience, and new product development, where permitted by applicable law, our agreements, and available settings.
We may also use personal information to analyze usage of the Service, understand user activity, measure performance, diagnose errors, test features, improve the Service, improve our business, and develop new products and services.
2.4 Third-Party AI, Cloud, and Infrastructure Providers
We may engage third-party AI providers, model providers, cloud providers, storage providers, infrastructure providers, analytics providers, security providers, customer support providers, and other service providers to process prompts, uploads, outputs, project data, and personal information for the purpose of providing, operating, securing, supporting, improving, and developing Shotro.
These providers may process information on our behalf or under their own terms, depending on the service, integration, and applicable settings.
2.5 Marketing
We and our service providers may send you direct marketing communications and may personalize these messages based on your needs, interests, account information, and interactions with Shotro.
You may opt out of marketing communications as described in the “Your Choices” section below. You will still receive transactional, security, legal, billing, and service-related messages.
2.6 Compliance and Protection
We may use personal information to:
1. comply with applicable laws, lawful requests, and legal process;
2. respond to subpoenas, court orders, investigations, and government requests;
3. protect our rights, privacy, safety, property, users, and others;
4. make, investigate, or defend legal claims;
5. audit internal processes for compliance with legal, contractual, and policy requirements;
6. enforce terms, policies, and agreements;
7. prevent, identify, investigate, and deter fraudulent, harmful, unauthorized, unethical, abusive, or illegal activity, including cyberattacks, misuse, rights violations, and identity theft.
2.7 Aggregated, De-Identified, or Anonymized Data
We may create aggregated, de-identified, or anonymized data from personal information and other data we collect. We may use and share such data for lawful business purposes, including analytics, research, product development, safety, benchmarking, business operations, and promotion of our business.
2.8 Further Uses
In some cases, we may ask for your consent to use personal information for purposes not compatible with the initial purpose for which it was collected.
3. Retention
3.1 General
We retain personal information for as long as reasonably necessary to fulfill the purposes for which we collected it, including to provide the Service, maintain accounts, comply with law, resolve disputes, enforce agreements, prevent abuse, maintain security, support legitimate business purposes, and establish or defend legal claims.
The length of time we retain information depends on the type of information, the purpose of processing, your choices, legal requirements, security needs, and operational needs.
3.2 Content Deletion and Account Closure
We may allow you to remove certain content from your Account or request account closure. Deleted content may remain in active systems for a limited period and in backups for longer.
If you close your Account or request deletion, some information may be retained where required or permitted for legal, security, payment, fraud-prevention, tax, accounting, dispute resolution, backup, or legitimate business purposes.
Users may request account deletion by contacting privacy@shotro.ai or through available account settings where provided.
3.3 When Information Is No Longer Needed
When we no longer require personal information, we may delete it, anonymize it, aggregate it, or isolate it from further processing until deletion is possible.
4. How We Share Your Personal Information
We may share personal information with the following categories of parties and as otherwise described in this Privacy Policy, other applicable notices, or at the time of collection.
Affiliates. Our corporate parent, subsidiaries, and affiliates.
Service providers. Third parties that provide services on our behalf or help us operate the Service or our business, including hosting, cloud infrastructure, storage, AI/model providers, APIs, information technology, customer support, email delivery, security, analytics, marketing, consent management, and error monitoring.
Payment processors. Payment information may be collected and processed directly by payment processors such as Stripe or other payment providers. Their use of payment data is governed by their own terms and privacy policies.
Advertising partners. Third-party advertising and analytics companies that help us measure campaigns, understand referrals, prevent repeated ads, or provide more relevant marketing where permitted.
Third parties designated by you. We may share personal information with third parties when you instruct us or consent to do so, including collaborators, team members, clients, connected services, or people with whom you share projects or content.
Partners. Third parties with whom we partner, including co-sponsors of events or promotions, joint product or service providers, or companies whose products or services may be of interest to you.
Linked third-party services. If you log in with, connect, sync, or link the Service to an authentication provider, social media service, cloud storage platform, creative tool, collaboration tool, or other third-party service, we may share information with that third party as needed for the connection or as authorized by you.
Professional advisors. Lawyers, auditors, bankers, insurers, accountants, and other professional advisors where necessary in the course of services they provide to us.
Authorities and others. Law enforcement, government authorities, courts, regulators, private parties, or other third parties where we believe disclosure is necessary or appropriate for compliance, enforcement, protection, safety, fraud prevention, or legal purposes.
Business transferees. We may disclose personal information in connection with actual or prospective financing, investment, merger, acquisition, reorganization, sale, transfer, bankruptcy, receivership, or other business transaction involving all or part of our business, assets, or shares.
Other users and the public. If you make your profile, content, outputs, comments, projects, or community posts public or share them with others, that information may be visible to other users or the public and may be copied, saved, indexed, screen captured, cached, redistributed, or used by others. We are not responsible for such use by others.
Content remains private by default unless you choose to share it, publish it, or make it available through Shotro features.
5. Your Choices
5.1 General
This section describes rights and choices available to users. Users located in Europe should also review the “Notice to European Users” section below.
5.2 Access or Update Your Information
If you have an Account, you may review and update certain account information by logging into your Account or using available account settings.
5.3 Opt Out of Marketing Communications
You may opt out of marketing emails by following the unsubscribe instructions in the email or by contacting us. Even if you opt out of marketing emails, you may still receive service-related, transactional, security, legal, billing, and administrative messages.
5.4 Cookies
For more information about cookies and similar technologies and how to control them, see our Cookie Notice. Most browsers let you remove or reject cookies through browser settings. Blocking cookies may cause parts of the Service to work incorrectly or require you to sign in more often.
5.5 Blocking Images and Pixels
Most browsers, devices, and email clients allow you to prevent images from loading, which may prevent some pixels or web beacons from functioning.
5.6 Do Not Track
Some browsers send “Do Not Track” signals. Shotro does not currently respond to those signals unless required by law.
5.7 Declining to Provide Information
We need certain personal information to provide parts of the Service. If you do not provide information identified as required or mandatory, we may not be able to provide those parts of the Service.
5.8 Linked Third-Party Platforms
If you connect to the Service through a third-party platform, you may be able to use settings in your account with that platform to limit information we receive. If you revoke our access, that choice will not apply to information we already received.
5.9 Delete Content or Close Your Account
You may delete certain content through your Account where the Service provides that functionality. You may request account closure or deletion by contacting privacy@shotro.ai.
Deleted content may remain in active systems for a limited period and in backups for longer. Retention periods may be extended where necessary for legal, security, payment, fraud-prevention, tax, accounting, dispute resolution, backup, or legitimate business purposes.
5.10 Privacy Rights
Depending on your location, you may have rights to access, correct, delete, export, restrict, object to, withdraw consent, opt out of marketing, opt out of certain advertising or data sharing, and appeal a privacy-rights decision.
To exercise privacy rights, contact privacy@shotro.ai. We may verify your request before acting on it.
6. Other Sites and Services
The Service may contain links to websites, mobile applications, online services, integrations, APIs, model providers, payment providers, storage providers, creative tools, or other third-party services.
These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third-party services and are not responsible for their actions, policies, security, availability, or practices. We encourage you to review the privacy policies and terms of third-party services you use.
7. Security
We use reasonable technical, organizational, physical, and administrative safeguards designed to protect personal information. However, no online system, internet transmission, or information technology system is perfectly secure, and we cannot guarantee the security of your information.
8. International Data Transfers
Shotro is based in the United States. We may use service providers and partners that operate in the United States and other countries. Your personal information may be transferred to, processed, and stored in the United States and other locations where privacy laws may differ from those in your state, province, or country.
Where required, we use appropriate transfer mechanisms.
9. Children
The Service is not intended for use by anyone under 18 years old. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child provided personal information to Shotro in a manner prohibited by law, contact privacy@shotro.ai. If we learn that we collected such information, we will take steps to delete it as required by law.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may notify you by updating the date of this Privacy Policy, posting the updated version on the Service, sending an email, providing in-product notice, or using other appropriate means.
Your continued use of the Service after the effective date of an updated Privacy Policy means the updated Privacy Policy applies to your interactions with the Service and our business.
11. Notice to European Users
11.1 Where This Notice Applies
This section applies only to individuals located in the European Economic Area, United Kingdom, or Switzerland.
11.2 Personal Data
References to “personal information” in this Privacy Policy include “personal data” as defined by applicable European data protection laws, including the General Data Protection Regulation and UK GDPR.
11.3 Controller
Shotro inc. is the controller of personal data covered by this Privacy Policy for purposes of European data protection laws.
Contact:
Shotro inc.
3101 Ocean Park Blvd Ste 200
#612
Santa Monica, CA 90405
Email: privacy@shotro.ai
11.4 Legal Bases for Processing
Our legal bases for processing personal data may include:
Contractual Necessity. Where processing is necessary to provide the Service, manage your Account, process payments, or take steps you request.
Legitimate Interests. Where processing is necessary for our legitimate interests and your interests and fundamental rights do not override those interests, including operating, improving, securing, and developing the Service; preventing fraud and abuse; communicating with users; analyzing usage; and protecting rights and safety.
Consent. Where we rely on your consent, such as for certain optional cookies, marketing communications where required, or other optional processing.
Compliance with Law. Where processing is necessary to comply with legal or regulatory obligations.
11.5 Purposes and Legal Bases
We rely on the following legal bases for the purposes described in this Privacy Policy:
Service delivery and operations
Categories involved may include contact data, profile data, demographic data, communications data, transactional data, payment status, project and creative data, query and prompt data, feedback data, third-party source data, device data, location data, and cookies or similar technologies.
Legal bases: Contractual Necessity; Legitimate Interests; Compliance with Law where applicable.
Personalization
Categories involved may include profile data, preferences, usage data, online activity data, project settings, and cookies or similar technologies.
Legal bases: Legitimate Interests; Consent where required.
Research, development, improvement, analytics, safety, and product performance
Categories involved may include profile data, demographic data, communications data, transactional data, project and creative data, query and prompt data, feedback data, third-party source data, device data, location data, online activity data, and cookies or similar technologies.
Legal bases: Legitimate Interests; Consent where required.
Direct marketing and advertising
Categories involved may include contact data, communications data, marketing data, communication interaction data, demographic data, transactional data, online activity data, device data, location data, and cookies or similar technologies.
Legal bases: Legitimate Interests; Consent where required.
Compliance, protection, and legal obligations
Categories involved may include contact data, profile data, demographic data, communications data, transactional data, project and creative data, query and prompt data, feedback data, third-party source data, device data, location data, online activity data, and cookies or similar technologies.
Legal bases: Compliance with Law; Legitimate Interests.
11.6 Retention
We retain personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide the Service, comply with law, resolve disputes, enforce agreements, maintain security, prevent abuse, and establish or defend legal claims.
When we no longer need personal data, we will delete, anonymize, aggregate, or securely isolate it until deletion is possible.
11.7 No Obligation to Provide Personal Data
You do not have to provide personal data to us. However, where personal data is necessary to provide the Service or comply with law, failure to provide it may prevent us from providing some or all of the Service.
11.8 Sensitive Information
Do not provide sensitive personal information, including social security numbers, government ID numbers, health information, racial or ethnic origin, political opinions, religion, trade union membership, genetic data, biometric data, or criminal background information, unless you have the right to do so and accept the associated processing.
11.9 Automated Decision-Making
As part of the Service, Shotro does not engage in automated decision-making that produces legal or similarly significant effects concerning you, unless otherwise disclosed.
11.10 Your Additional Rights
European data protection laws may give you certain rights regarding your personal data, including the right to:
Access personal data and information about our processing.
Correct inaccurate or incomplete personal data.
Delete personal data where there is no good reason for continued processing.
Transfer/Portability certain personal data in a machine-readable format.
Restrict processing of personal data in certain circumstances.
Object to processing based on Legitimate Interests or direct marketing.
Withdraw Consent where processing is based on consent.
To exercise these rights, contact privacy@shotro.ai. We may request information to verify your identity and process your request. We will respond as required by applicable law.
11.11 Right to Lodge a Complaint
If you are located in Europe and are not satisfied with our response or how we process personal data, you may lodge a complaint with the data protection regulator in your habitual place of residence.
12. How to Contact Us
For privacy questions, requests, or complaints, contact:
Shotro inc.
3101 Ocean Park Blvd Ste 200
#612
Santa Monica, CA 90405
Email: privacy@shotro.ai
For legal notices, contact:
Shotro inc.
Attn: Legal Department
3101 Ocean Park Blvd Ste 200
#612
Santa Monica, CA 90405
Email: legal@shotro.ai