shotlingo

Privacy Policy

Last updated: June 2026

1. Information We Collect

We collect the following types of information:

  • Account Information: Email address and display name when you create an account
  • Project Data: Screenshots, text content, and translations you create
  • Payment Information: Processed securely by our payment provider (Paddle)
  • Usage Data: How you interact with our Service

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Process payments and manage subscriptions
  • Send important updates about the Service
  • Improve and develop new features
  • Respond to support requests

3. Data Storage and Security

Your data is stored and processed on Cloudflare's infrastructure: Cloudflare D1 (database), Cloudflare R2 (object storage for images), and Cloudflare Workers (compute). Authentication is handled by Better Auth with passwords stored only as salted hashes. Access to your projects, translations, and uploads is scoped to your account. We implement industry-standard security measures, including encryption in transit, to protect your information.

4. Third-Party Services and Sub-processors

We use the following third-party services. We do not sell your personal data.

  • Cloudflare: Hosting, database (D1), object storage (R2), compute (Workers), and server-side image rendering
  • Paddle: Payment processing (Merchant of Record)
  • OpenRouter: Routes AI translation and in-app AI assistant requests to large-language-model providers
  • Apple App Store Connect: Only when you use the App Store export feature. Your rendered screenshots are uploaded to your own App Store Connect account using credentials you provide
  • Google Play (Android Publisher): Only when you use the Google Play export feature. Your rendered screenshots are uploaded to your own Play listing using a service account you provide

5. AI Assistant and Claude Connector (MCP)

In-app AI assistant. When you use the in-app assistant, your message and the relevant project, template, and translation data needed to answer it are sent through OpenRouter to a large-language-model provider to generate a response. We do not use your content to train AI models.

Claude / MCP connector. Shotlingo offers a remote Model Context Protocol (MCP) connector. If you choose to connect Shotlingo to Claude (or another MCP-compatible host), you authorize that host through an OAuth consent flow to access your Shotlingo data on your behalf using a defined set of scoped tools (for example, listing templates, editing translations, or rendering screenshots). The connector only acts for the authenticated, paid user who granted access; write and export actions are rate-limited and recorded in an audit log. Data accessed by the host is then governed by that host's own privacy policy (for Claude, Anthropic's). You control the connection and can revoke it at any time from the host (e.g. in Claude's connector settings).

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and data
  • Export your data
  • Opt out of marketing communications

8. Cookies

We use essential cookies to maintain your session. We do not use tracking cookies or sell your data to advertisers.

9. Contact

For privacy-related questions or to report a security issue, please contact us at hello@shotlingo.com.