Privacy Policy
Last updated: 30 July 2026
1. Who is responsible for your data
Nomads Shorts is operated by Charu Tripathi, an individual sole proprietor based in Zurich, Switzerland ("we", "us"). We are the data controller for the personal information we collect through the service.
For any privacy-related question or request, email info@nomadsshorts.com.
2. What data we collect
We collect only what we need to operate the service:
- Account data (via Google sign-in). Your email address, name, and profile picture URL as provided by Google when you sign in.
- Video processing data. The YouTube URLs you submit, the transcripts we generate, the clip metadata (title, start/end timestamps, virality score), and the resulting video files.
- Billing data. Your Stripe customer id and a ledger of credit purchases and consumption. We do not receive or store your credit-card details — those are handled entirely by Stripe.
- Technical data. Standard server logs (IP address, user agent, request timestamps) retained for a limited period for security and debugging.
3. Why we use it (legal bases under revFADP / GDPR)
- To perform our contract with you — creating your account, processing your submitted videos, delivering clips, billing you for credits.
- For our legitimate interests — securing the service against fraud and abuse, improving reliability, debugging.
- To comply with legal obligations — retaining accounting records for the periods required by Swiss law.
4. Who we share it with (sub-processors)
We use these third parties to operate the service. Each acts as a processor under our instructions.
| Service | Purpose | Where data is processed |
|---|---|---|
| Supabase | Authentication and database | European Union |
| Vercel | Web app hosting | United States (Global CDN) |
| Fly.io | Video processing worker | United States |
| Cloudflare R2 | Video and clip storage | European Union / Global |
| Stripe | Payment processing | Ireland (EU) and United States |
| Google (OAuth + YouTube Data API) | Sign-in and YouTube video access | United States |
| Anthropic | AI (moment picking, translation) | United States |
| Replicate | AI (audio transcription with Whisper) | United States |
| Inngest | Background job queue | United States |
Where a sub-processor is located outside Switzerland or the EEA, we rely on the European Commission's Standard Contractual Clauses (or the sub-processor's certified equivalents) to provide an adequate level of protection for your data.
5. How long we keep it
- Account and video data: for as long as your account exists.
- After you delete your account: source videos, transcripts, and generated clips are deleted from our storage within 30 days.
- Accounting records (invoices, payments): retained for ten (10) years as required by Swiss tax law.
- Server logs: retained for up to 90 days.
6. Your rights
Under Swiss data-protection law and, where applicable, the GDPR, you have the following rights regarding your personal data:
- the right to access the data we hold about you;
- the right to have inaccurate data corrected;
- the right to have your data deleted (subject to legal retention obligations);
- the right to receive your data in a portable, machine-readable format;
- the right to restrict or object to processing based on our legitimate interests;
- the right to withdraw any consent you gave, without affecting the lawfulness of processing before withdrawal;
- the right to lodge a complaint with your local data-protection authority (in Switzerland: the FDPIC).
To exercise any of these rights, email info@nomadsshorts.com. We will respond within 30 days.
7. Cookies
We use only essential cookies to keep you signed in (Supabase session cookie). We do not run any analytics, advertising, or tracking cookies at this time. If we add any in the future, we will update this policy and, where required, ask for your consent.
8. Security
We use HTTPS for all traffic, encrypt data in transit and at rest (via our sub-processors), and follow least-privilege access controls. No system is perfect, however — you use the service at your own risk. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authority as required by law.
9. Children
The service is not intended for children under 18. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you by email or via the service.
11. Contact
For any question or request regarding this policy, email info@nomadsshorts.com.