Shortcast Privacy Policy

Shortcast is a phone app that posts a short video you choose to the Instagram, Facebook Page, YouTube and TikTok accounts you connect. This page explains what information it handles.

What Shortcast handles

• Your videos, captions and hashtags. They go straight from your phone to each platform you pick. They are never sent to or stored on Shortcast’s servers.
• Sign-in permissions. When you connect an account, the platform gives Shortcast permission to post for you (access tokens). These are stored in your phone’s secure storage (iPhone Keychain or Android Keystore).
• Sign-in helper. Shortcast’s small sign-in server completes each sign-in with the platform. The moment it receives the resulting permission, it locks it with a one-time key that only your phone holds, and keeps only that locked copy, for at most 5 minutes, until your phone collects it; then it deletes it. Nobody can open that locked handoff without your phone, including Shortcast’s server. For native TikTok sign-in, a separate encrypted server record keeps the account ID, granted permissions, access and renewal tokens, and their expiry times so your connection can renew. The server can decrypt that record only to renew or revoke your connection; the phone receives a separate secret renewal handle rather than TikTok’s renewal token. This current connection record is removed when you disconnect successfully or its renewal permission expires. If you reconnect and replace a connection, an older encrypted record may remain until its renewal permission expires; contact us if you need earlier removal. Shortcast does not log your content or sign-in credentials. Shortcast never sees or stores your passwords: you type them only on each platform’s own sign-in page.
• Account identity and optional post statistics. Shortcast reads the account or channel name and identifier needed to show where you are posting and prevent posting to the wrong account. With your permission, it retrieves available views, likes, comments and share counts for your own posts. Account details and cached statistics are kept on your phone; unavailable statistics are not treated as zero. You can decline optional TikTok video-statistics access without blocking a permitted upload.
• Post history. A list of your past posts (caption, links, status, a small preview picture) is kept on your phone only.

What Shortcast does not do

• No advertising, cross-app tracking or sale of your personal information. Post statistics are for your own account overview, not behavioral advertising.
• Shortcast does not read private messages. It uses platform data for account connection, the posts you choose to upload, and authorized post statistics.

Platform data

Shortcast uses the official Instagram Graph API, Facebook Graph API, YouTube Data API and TikTok Content Posting API. What happens to a post after it is published is governed by each platform’s own terms and privacy policy, including Google’s Privacy Policy and the YouTube Terms of Service. You can remove Shortcast’s access at any time in each platform’s settings (for Google: myaccount.google.com/permissions).

Deleting your data

Tap Disconnect on the Accounts screen while online to remove the saved connection and revoke its native TikTok server session. Deleting the app alone does not revoke a platform grant or immediately delete an existing TikTok server session. A replaced older session may remain until expiry; contact us to request earlier removal. See Delete your data.

Contact

Questions or requests: support@short-cast.com.