Privacy Policy

Effective date: September 18, 2026 · Last updated: September 18, 2026

This Privacy Policy explains how Shorts IQ, Inc. (“Videogo”, “we”, “us”) collects, uses, shares and protects personal information when you visit videogo.ai (the “Site”), book a call with us, or use the Videogo service (the “Service”). It also describes the choices and rights you have, including under the EU and UK General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act as amended (“CCPA”) and other US state privacy laws.

If you do not agree with this Policy, please do not use the Site or the Service. Capitalised terms not defined here have the meaning given in our Terms of Service.

1. Who we are

Shorts IQ, Inc., a Delaware corporation, 8 The Green, Dover, Delaware 19901, United States, operating as Videogo, is the data controller for the Site and for the personal information of our customers’ business owners and users. Where we process personal information contained in a customer’s content on the customer’s instructions (for example the faces of people in footage a customer supplies), we act as that customer’s processor and the customer is the controller.

Contact for all privacy matters: [email protected], or by post at the address above, marked “Privacy”.

2. Who this Policy covers

Visitors of videogo.ai and of the pages linked from it.
Prospects who request a demo or book a call.
Customers and their users: the business owner and any team member who uses the Service.
People who appear in customer content, such as the owner, staff or customers filmed for a video. We process this information on behalf of our customer, who is responsible for having the right to include those people (see the Terms of Service).

The Site and Service are intended for businesses and for people acting on behalf of a business. They are not directed to children, and we do not knowingly collect personal information from anyone under 18 (see Section 12).

3. Personal information we collect

3.1 Information you give us

Demo requests. First name, last name, work email address and, if you choose, your business website and a message.
Booking a call. When you book through the calendar on our onboarding page, Calendly collects your name, email address, time zone and any notes you add, and shares the booking with us (see Section 6).
Account and business information (Service). Your name, business name, email address, password or sign-in credentials, contact preferences (email or WhatsApp), billing details handled by our payment provider, your website address, the documents, images, footage and other files you upload or connect (for example a Google Drive folder you authorise), and the facts about your business you tell Videogo (what you offer, how you sound, what you never say).
Your likeness and voice (Service). When you choose to film footage for a video, we process the recording, including your face and voice, to make that video. This is only done when you supply the footage and grant the specific permission asked for in the Service.
Correspondence. Anything you send us by email or through the Service.

3.2 Information from connected accounts (Service)

When you connect a social media account (currently Instagram; other channels as they become available), the platform provides us with your account identifier, profile details, the content you have published, and performance metrics (such as views, saves, comments and enquiries), together with an access token that lets Videogo publish within the permissions you grant. Tokens are encrypted at rest and are never placed in an AI prompt or written to logs.

3.3 Information collected automatically

Site security data. Our hosting provider, Cloudflare, processes your IP address and request data to deliver and protect the Site. The demo form uses Cloudflare Turnstile to tell people from bots; Turnstile processes technical signals from your browser. To limit abuse, our form counts attempts per network address for ten minutes using a one-way hash; the address itself is not stored by us.
Browser storage. The Site stores only your theme choice (light or dark) in your browser’s local storage under the key vg-theme. It contains no personal information and never leaves your browser. We use no analytics, advertising or tracking cookies on the Site.
Admin session cookie. A strictly necessary sign-in cookie is set only on the private administration page used by our team; visitors never receive it.
Service usage and diagnostics. When you use the Service we log actions needed to operate it (for example what was published, when, and with which permission). Metrics carry no personal information beyond what is needed to run your account.

3.4 Information we do not collect

We do not collect precise geolocation, government identifiers, financial account numbers (payment card data is entered directly with our payment provider and never reaches our servers), or sensitive personal information as defined by the CCPA, unless you include it in content you supply.

4. How we use personal information, and on what legal basis

Under the GDPR we must have a legal basis for each purpose. The table applies to visitors, prospects and customers wherever they are.

Purpose	Data	Legal basis (GDPR)
Reply to your demo request and arrange a call	Demo-request fields; booking details	Steps at your request before entering a contract (Art. 6(1)(b)); our legitimate interest in answering enquiries (Art. 6(1)(f))
Provide the Service: learn your business, plan, produce, review and publish content within your permissions, and report results	Account, business, connected-account and content data; likeness and voice where you supply footage	Performance of our contract with you (Art. 6(1)(b)); your explicit permission for each publishing right and each use of your footage, which you can withdraw in the Service
Improve the Service for your account by learning which content works	Performance metrics and content outcomes for your account	Performance of the contract (Art. 6(1)(b)); legitimate interest in improving the Service (Art. 6(1)(f))
Improve the Service across accounts using de-identified, aggregated learnings that cannot identify you, your business or your content	Aggregated, de-identified statistics only	Legitimate interest (Art. 6(1)(f)); we never use recognisable copies of your content for other customers
Billing, accounting and tax	Billing details, invoices	Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c))
Security, fraud and abuse prevention, and enforcing our terms	IP address (hashed for rate limiting), security signals, usage logs	Legitimate interest (Art. 6(1)(f)); legal obligation where applicable
Send you service messages (for example a filming request, a video ready for your go, a security notice)	Contact details and preferences	Contract (Art. 6(1)(b))
Send you marketing about Videogo	Email address	Your consent (Art. 6(1)(a)), which you can withdraw at any time using the unsubscribe link or by emailing us. We do not send marketing to EU/UK prospects without consent.
Comply with law, respond to lawful requests, protect rights	Any of the above, as relevant	Legal obligation (Art. 6(1)(c)); legitimate interest (Art. 6(1)(f))

4.1 Artificial intelligence

Videogo uses AI systems, including third-party generation providers, to plan, script, edit and produce content. Providers process your content only to deliver the Service under our agreements with them; we do not permit providers to use your content to train models that are made available to other parties, and we do not use your content to train models that serve other customers. Learning that improves Videogo across accounts uses only de-identified, aggregated data. We may retain a non-reversible fingerprint of content you delete solely to prevent it from being recirculated; it cannot be used to reconstruct the content.

4.2 Automated decisions

Videogo makes automated recommendations about what content to create and when to publish. Publishing happens only within the permissions you have granted, and you can veto, change or reject any idea or video before it goes out. We do not make automated decisions that produce legal or similarly significant effects on you without human involvement.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share personal information only as follows:

Service providers (processors) who act on our instructions under written data-processing terms: hosting, storage and security (Cloudflare, Inc., United States); scheduling (Calendly LLC, United States); transactional email (only if enabled); payment processing; AI generation and speech providers; and, if we enable it, a Google Sheets copy of demo requests (Google LLC, United States). An up-to-date list of sub-processors is available on request at [email protected] and will be published at videogo.ai before the Service is opened to customers.
Social media platforms you connect (for example Meta Platforms for Instagram), which receive the content published to your account under their own terms and privacy policies.
Professional advisers such as lawyers, accountants and auditors, bound by confidentiality.
Legal and safety. When required by law, subpoena or court order, or when we believe in good faith that disclosure is necessary to protect the rights, property or safety of Videogo, our customers or others.
Business transfers. In connection with a merger, financing, acquisition or sale of all or part of our business, subject to the acquirer honouring this Policy.
With your direction or consent, for example when you ask us to share something with a partner.

6. Booking a call with Calendly

The calendar on our onboarding page is provided by Calendly. To respect your choices, we do not load Calendly until you click “Load the booking calendar”, or you can open the same calendar on Calendly’s own site. When loaded, Calendly may set its own cookies and processes the details you enter to make the booking (name, email address, time zone, notes) as an independent controller under the Calendly Privacy Notice, and shares the booking with us so we can hold the call.

7. International transfers

We are based in the United States, and our service providers process data in the United States and, in some cases, the European Economic Area. If you are in the EEA, the United Kingdom or Switzerland, your personal information is transferred outside your region. We rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum) with our processors, and on the EU-U.S. Data Privacy Framework where the recipient is certified. You can ask us for a copy of the safeguards that apply to your data at [email protected].

8. How long we keep personal information

Demo requests: 24 months from our last contact with you, then deleted. Our storage automatically expires each request 24 months after it was submitted.
Call bookings: kept by Calendly under its own retention; our copy is treated like a demo request.
Customer account data and content: for as long as your account is active. When you delete content, revoke a permission, or close your account, the affected content and data enter a 30-day recoverable window and are then permanently deleted from our systems, including backups on their normal cycle. Scheduled but unpublished content that depends on a revoked permission is stopped. Where a third party (for example a social platform) holds a copy that we cannot delete, we tell you rather than claim it is gone.
Billing records: as required by tax and accounting law, generally seven years.
Security logs and hashed rate-limit counters: up to 20 minutes for rate-limit counters; security logs up to 12 months.
De-identified aggregate learnings and non-reversible content fingerprints: may be kept after deletion; they cannot identify you or reconstruct your content.

9. Your rights and choices

Depending on where you live, you may have the right to: access the personal information we hold about you and receive a copy; correct inaccurate information; delete your information; restrict or object to certain processing; receive your data in a portable format; withdraw consent at any time, without affecting processing that happened before; and not be discriminated against for exercising your rights.

To exercise any right, email [email protected] from the address we hold for you, or write to the postal address above. We will verify your identity before acting, respond within one month (GDPR) or 45 days (CCPA), and may extend that period where the law allows and we tell you why. You may use an authorised agent under the CCPA if the agent provides your signed permission. Customers can also export and delete their data from inside the Service.

9.1 European Economic Area, United Kingdom and Switzerland

You have all the rights listed above under Articles 15–22 GDPR. You also have the right to lodge a complaint with your supervisory authority; in Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it), and in the UK the Information Commissioner’s Office. We would appreciate the chance to address your concern first. Shorts IQ, Inc. has no establishment in the EU or UK; where Article 27 GDPR requires a representative, we will publish the representative’s details here before offering the Service in the EU and UK.

9.2 California and other US states

We do not sell personal information and do not share it for cross-context behavioural advertising, so there is no “Do Not Sell or Share” choice to make; we also honour Global Privacy Control signals by design because we run no tracking. Categories of personal information collected in the last 12 months, and their sources and purposes, are described in Sections 3 to 5. California residents may request to know, delete or correct their information, and may not be discriminated against for doing so. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with privacy laws have similar rights, including the right to appeal a decision by emailing [email protected] with “Appeal” in the subject line.

9.3 Marketing

You can unsubscribe from marketing email at any time using the link in the message or by emailing us. Service messages that are necessary to run your account (for example a filming request or a security notice) are not marketing and continue while you are a customer.

10. Security

We use administrative, technical and physical safeguards appropriate to the risk, including encryption in transit (HTTPS with HSTS) and at rest for access tokens, strict origin and rate-limit controls on our forms, hashed passwords, tenant isolation for customer data, least-privilege access, and step-up authentication for sensitive actions in the Service such as connecting or disconnecting a publishing account, granting publishing rights, exporting or deleting data. No method of transmission or storage is completely secure; if we learn of a breach affecting your personal information we will notify you and any competent authority as required by law, without undue delay and, where the GDPR applies, within 72 hours of becoming aware of it.

11. Links and third-party services

The Site links to third-party sites such as Instagram, Calendly and the platforms you connect. Their privacy practices are their own; this Policy does not apply to them.

12. Children

The Site and Service are for businesses and adults. We do not knowingly collect personal information from children under 18 (or under 13 for the purposes of COPPA). If you believe a child has provided us with personal information, contact us and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. We will post the new version here with a new effective date and, for material changes affecting customers, notify you by email or in the Service at least 14 days before they take effect. Continued use of the Site or Service after the effective date means the updated Policy applies.

14. Language

This Policy is written in English. We are preparing an Italian translation; if there is any conflict between versions, the English version governs to the extent permitted by law.

15. Contact us

Shorts IQ, Inc. (Videogo) · 8 The Green, Dover, Delaware 19901, United States · [email protected]