Privacy Policy

Last Updated: 12th April 2025

1. Introduction & Who We Are

Welcome to Shroomi.ai ("Shroomi," "we," "us," or "our"). We provide AI-powered analysis and creative iteration for short-form video. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

Our service is operated by The Editing Firm Ltd., a company registered in England and Wales with a registered office at 30 Churchill Place, Canary Wharf, London, E14 5RE.

For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.

2. Information We Collect

We collect information that you provide directly to us, information we collect automatically, and information from third parties.

A. Information You Provide to Us

  • Account Information: When you register, we collect your name, email address, and password.
  • User Content (Your Videos): To provide our Service, we collect the videos you upload or provide via URL, along with any related context you provide, such as campaign goals or audience details ("Contextual Data").
  • Payment Information: We use Stripe to collect and process your payment information. We do not store your full credit card details on our servers.
  • Communications: If you contact us, we collect your name, email address, and the contents of your message.

B. Information We Collect Automatically (Usage Data)

  • Log and Device Information: IP address, browser type, operating system, and device information.
  • Usage Information: Information about your interactions with our Service, such as features used and analyses run.
  • Cookies: We use essential and analytical cookies. Essential cookies are for site functionality (like keeping you logged in). Analytical cookies (like Google Analytics) help us understand usage patterns to improve the Service.
3. How and Why We Use Your Information (Lawful Basis)

We use your information for the following purposes, relying on specified lawful bases under UK GDPR:

  • To Provide and Maintain Our Service: We use your Account Information and User Content to operate features like "Second Opinion" and "Remix". (Lawful Basis: Performance of a Contract).
  • AI Model Processing (Your Privacy Matters): Your User Content is processed by our AI models solely to provide the Service to you and to personalize your results. We do not use your User Content to train or improve our general AI models that serve other users. Your data is used for your benefit only. (Lawful Basis: Performance of a Contract).
  • To Improve Our Service: We analyze anonymized Usage Data to fix bugs and enhance the user experience. (Lawful Basis: Legitimate Interest).
  • To Process Payments: To manage your subscription. (Lawful Basis: Performance of a Contract).
  • To Communicate With You: To send service-related announcements, security alerts, and support messages. We use Postmark for these transactional emails. (Lawful Basis: Performance of a Contract & Legitimate Interest).
  • For Marketing Purposes: With your consent, we use your email to send newsletters and offers via Loops. You can opt-out anytime. (Lawful Basis: Consent).
4. Data Sharing and Third-Party Sub-Processors

We do not sell your personal data. We share information only with third-party service providers ("sub-processors") who help us operate our Service:

  • Cloud Hosting & Infrastructure: Google Cloud Platform (GCP) and Supabase for hosting and data storage.
  • AI/Machine Learning Platform Providers: To provide the core "Second Opinion" and "Remix" features, we send your User Content to third-party AI service providers for processing. We have strict data processing agreements in place with these providers to protect your data.
  • Payment Processor: Stripe to handle payments securely.
  • Analytics Providers: Google Analytics to understand service usage.
  • Email Service Providers: Postmark and Loops for transactional and marketing communications.

We may also share information if required by law or to protect the rights, property, or safety of Shroomi, our users, or others.

5. Data Security, Retention, and International Transfers

Security: We implement appropriate technical measures like encryption of data in transit (TLS/SSL) and at rest. However, no method is 100% secure.

Retention: We retain your data as long as your account is active or as needed to provide the Service. You can delete your account and associated data at any time from your account settings or by contacting us.

International Transfers: Your information may be processed in countries outside of the UK, including the US. We ensure such transfers are lawful by relying on UK Adequacy Regulations or by implementing Standard Contractual Clauses (SCCs) to safeguard your data.

6. Your Data Protection Rights

Under UK law, you have the right to access, rectify, erase, restrict processing of, or request portability of your data. To exercise these rights, please contact us at privacy@shroomi.ai. You also have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO).

7. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. Users are responsible for ensuring any video content they upload does not feature minors without appropriate consent.

8. Changes to Policy & Contact

We may update this policy and will notify you of material changes. If you have questions, contact us at privacy@shroomi.ai.