Our approach: we collect the information needed to provide, secure, support, and improve Creator Shots. We do not sell personal information or use the contents of your captures for advertising.
1. Scope and controller
This Privacy Policy explains how Velora Studios, LLC (“Velora,” “Creator Shots,” “we,” “us,” or “our”) handles personal data when you visit our websites, create an account, use the Creator Shots macOS application and hosted Service, view a shared capture, or communicate with us.
Velora Studios, LLC is the controller of account, website, billing, and direct-customer relationship data. Privacy and general support questions may be sent to support@creatorshots.com. Formal legal matters may be sent to legal@creatorshots.com. Our mailing address is Attn: Velora Studios, LLC, 16192 Coastal Highway, Lewes, Delaware 19958, United States.
When a customer uploads captures containing another person’s personal data, the customer generally determines why and how that data is processed and acts as controller; Velora generally acts as its processor or service provider. Questions about content in a capture should first be directed to the person or organization that shared it.
2. Information we collect
Information you provide
- Account information: email address, name, avatar, authentication data, account identifiers, and preferences.
- Customer Content: screenshots, screen and audio recordings, titles, annotations, uploaded logos, and related metadata.
- Billing information: plan, subscription status, Stripe customer and subscription identifiers, and transaction details. Full payment-card details are collected and stored by Stripe, not Creator Shots.
- Custom-domain information: domain names and verification information you provide.
- Communications: messages and information you provide when requesting support, exercising rights, or otherwise contacting us.
Information collected when you use the Service
- Capture metadata: media type, file type and size, recording duration, storage path, creation time, retention date, and sharing identifier.
- Usage and sharing data: capture view counts, first-viewed time, reactions, reaction timestamps for videos, and an anonymous browser identifier used to reduce duplicate reactions.
- Device and log data: IP address, browser and device type, operating system, referring pages, request times, crash or diagnostic data, and security events that may be recorded by us or our infrastructure providers.
- Desktop settings: connection and app preferences and recent-upload metadata stored locally on your Mac. Session credentials are encrypted using operating-system secure storage when available.
The macOS application requests access to screen recording, microphone, camera, and files only when needed for features you choose. Screen, audio, or camera data is not captured unless you initiate the relevant workflow and grant operating-system permission.
3. How we use information
We use personal data to:
- create and authenticate accounts and connect the desktop application;
- upload, store, deliver, organize, and delete captures;
- provide public share links, embeds, reactions, view state, branding, and custom domains;
- process subscriptions, prevent duplicate purchases, and maintain plan entitlements;
- provide support and send service, security, billing, and policy communications;
- monitor reliability, troubleshoot problems, prevent abuse, and protect users and the Service;
- understand and improve product performance using aggregated or de-identified information; and
- comply with law, enforce agreements, and establish or defend legal claims.
We do not use Customer Content to train general-purpose artificial intelligence models.
4. Legal bases for EEA, UK, and Swiss users
Where data-protection law requires a legal basis, we rely on:
- Contract: to create your account, provide requested features, process subscriptions, and support you.
- Legitimate interests: to secure and improve the Service, prevent fraud and abuse, communicate about the product, and operate our business, where those interests are not overridden by your rights.
- Legal obligation: to maintain required records, respond to lawful requests, and comply with tax, accounting, and other laws.
- Consent: where we specifically request it, such as for optional marketing or device permissions. You may withdraw consent at any time without affecting earlier processing.
5. How we disclose information
We disclose personal data only as needed:
- To people you share with. Anyone with a valid unlisted link can view its capture and associated public presentation information. Viewers may submit reactions visible to the account owner and other viewers.
- To service providers. Vendors provide database, authentication, media storage and delivery, hosting, domain provisioning, and payment services. They process data under contractual restrictions. See our Subprocessors page.
- For legal and safety reasons. We may disclose information when reasonably necessary to comply with law or valid legal process; protect rights, safety, and security; investigate abuse; or enforce agreements.
- In a business transaction. Information may be transferred in connection with a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice where required.
- At your direction. We disclose data when you direct us to do so or consent.
We do not sell personal data. We do not share personal data for cross-context behavioral advertising.
6. Cookies and local storage
Creator Shots uses cookies, browser storage, and similar technologies needed to authenticate users, maintain sessions, remember preferences, protect the Service, and support anonymous reactions. These technologies are primarily necessary for requested functionality and security. If we add non-essential analytics or advertising technologies, we will provide any notice and choice required by applicable law.
7. Retention
We retain account information while your account is active and as reasonably needed to provide the Service. Free-plan captures are generally deleted 30 days after upload. Paid-plan captures are generally retained until you delete them, close the account, or the applicable retention period ends. Reaction and capture metadata are deleted with the associated capture or account, subject to technical and legal exceptions.
After deletion, limited information may remain temporarily in encrypted backups, logs, fraud-prevention records, or records retained for tax, accounting, dispute, and legal-compliance purposes. Local information in your browser, device, recipients’ devices, third-party embeds, caches, or copies made by people with access to a link is outside our control.
8. Security
We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, encrypted network transport, private media storage, row-level database controls, restricted service credentials, and operating-system-backed encryption for desktop session tokens. No system is completely secure, and we cannot guarantee against every incident. You should protect your account, device, and share links and avoid uploading highly sensitive data unless an unlisted-link model is appropriate.
9. International transfers
Velora is based in the United States, and our providers may process data in the United States, European Economic Area, and other countries. These countries may have different data-protection laws. Where required, we use recognized transfer safeguards such as the European Commission’s Standard Contractual Clauses, the UK Addendum, adequacy decisions, or another lawful transfer mechanism.
10. Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of personal data; object to or restrict processing; withdraw consent; or appeal a denied request. You may also have the right to lodge a complaint with your local data-protection authority. We do not discriminate against anyone for exercising privacy rights.
You can update some account information or delete captures within the Service. For another request, email support@creatorshots.com with “Creator Shots Privacy Request” in the subject line or write to the address in Section 1 with the same wording clearly marked. We may need to verify your identity and authority. Authorized agents may submit requests where permitted by law. If your request concerns Customer Content controlled by a Creator Shots customer, we may direct you to that customer.
Residents of certain U.S. states may also request the categories and specific pieces of personal information collected, correction, deletion, and information about disclosures. As stated above, we do not sell personal information or share it for cross-context behavioral advertising.
11. Children
The Service is not directed to children, and account holders must be at least 18. We do not knowingly collect personal data directly from children. If you believe a child has provided personal data to us, contact us so we can investigate and take appropriate action. Customers must not upload children’s personal data unless they have all legally required authority, consent, and safeguards.
12. Changes to this policy
We may update this Privacy Policy to reflect changes in the Service, law, or our practices. We will post the updated version and revise the date above. If changes materially affect your rights, we will provide additional notice where required.
Questions about this Privacy Policy may be sent to support@creatorshots.com. Formal legal notices should be sent to legal@creatorshots.com.