Privacy Policy

Welcome to Shroomi.ai ("Shroomi," "we," "us," or "our"). We provide AI-powered analysis and creative iteration for short-form video. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

Our service is operated by The Editing Firm Ltd., a company registered in England and Wales with a registered office at 30 Churchill Place, Canary Wharf, London, E14 5RE.

For the purpose of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller.

We collect information that you provide directly to us, information we collect automatically, and information from third parties.

We use your information for the following purposes, relying on specified lawful bases under UK GDPR:

• To Provide and Maintain Our Service: We use your Account Information and User Content to operate features like "Second Opinion" and "Remix". (Lawful Basis: Performance of a Contract).
• AI Model Processing (Your Privacy Matters): Your User Content is processed by our AI models solely to provide the Service to you and to personalize your results. We do not use your User Content to train or improve our general AI models that serve other users. Your data is used for your benefit only. (Lawful Basis: Performance of a Contract).
• To Improve Our Service: We analyze anonymized Usage Data to fix bugs and enhance the user experience. (Lawful Basis: Legitimate Interest).
• To Process Payments: To manage your subscription. (Lawful Basis: Performance of a Contract).
• To Communicate With You: To send service-related announcements, security alerts, and support messages. We use Postmark for these transactional emails. (Lawful Basis: Performance of a Contract & Legitimate Interest).
• For Marketing Purposes: With your consent, we use your email to send newsletters and offers via Loops. You can opt-out anytime. (Lawful Basis: Consent).

We do not sell your personal data. We share information only with third-party service providers ("sub-processors") who help us operate our Service:

• Cloud Hosting & Infrastructure: Google Cloud Platform (GCP) and Supabase for hosting and data storage.
• AI/Machine Learning Platform Providers: To provide the core "Second Opinion" and "Remix" features, we send your User Content to third-party AI service providers for processing. We have strict data processing agreements in place with these providers to protect your data.
• Payment Processor: Stripe to handle payments securely.
• Analytics Providers: Google Analytics to understand service usage.
• Email Service Providers: Postmark and Loops for transactional and marketing communications.

We may also share information if required by law or to protect the rights, property, or safety of Shroomi, our users, or others.

Security: We implement appropriate technical measures like encryption of data in transit (TLS/SSL) and at rest. However, no method is 100% secure.

Retention: We retain your data as long as your account is active or as needed to provide the Service. You can delete your account and associated data at any time from your account settings or by contacting us.

International Transfers: Your information may be processed in countries outside of the UK, including the US. We ensure such transfers are lawful by relying on UK Adequacy Regulations or by implementing Standard Contractual Clauses (SCCs) to safeguard your data.

Under UK law, you have the right to access, rectify, erase, restrict processing of, or request portability of your data. To exercise these rights, please contact us at privacy@shroomi.ai. You also have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO).