Privacy Policy
Data controller: Girdhari Lal, Sikar. Version 2.
ShootSong Privacy Policy (v1)
Who we are. ShootSong ("we") provides a video editor and an optional 18+ creator-calling service.
1. The video editor
Videos, music and photos you edit stay on your device. They are not uploaded to us.
2. Data we collect for your account
| Data | Why | Kept for |
|---|---|---|
| Mobile number | Login by OTP, preventing duplicate / fake accounts. Stored encrypted; never shown to other users. | Until account deletion |
| Year of birth & 18+ confirmation | Age restriction. Your full date of birth is checked once and not stored. | Until account deletion |
| Gender (your selection) | Shown on your profile; you can choose "Prefer not to say". It is not used to decide which features you get. | Until account deletion |
| Display name, username, profile photo, bio | Your public profile in the partner directory | Until account deletion |
| Online/offline status | Showing availability for calls | Until account deletion |
| Call metadata (who, when, duration, tokens) | Billing, safety, disputes. We do not record the audio or video of calls. | 3 years |
| Wallet, purchases, gifts, earnings (ledger) | Accounting, refunds, fraud prevention, tax law | 8 years (Indian accounting law) |
| Payout details (UPI ID, legal name, PAN) — creators only | Paying you and meeting tax/KYC obligations. Encrypted; visible only to our finance team; never shown to other users. | 8 years |
| Reports and blocks | Keeping users safe | 3 years |
| Device push token, IP address, app version | Notifications, security, rate limiting | Up to 90 days after last use |
| Install source (e.g. Google Play, an ad campaign or a referral code) | Measuring our marketing | Until account deletion |
We do not access your contacts, call logs, SMS, location or files.
Camera and microphone are used only while you record a video or are in a call you started or accepted.
3. Advertising measurement
If you allow it, the app tells Google (Firebase) and Meta that an install, sign-up or purchase happened so we can measure ads. We never send your phone number, name, messages or call content. You can turn this off anytime in Profile → Privacy.
4. Sharing
We share data only with service providers acting for us (cloud hosting, SMS OTP, calling infrastructure, Google Play billing, payment/payout and KYC providers), and with authorities when the law requires it. We do not sell personal data.
5. Your rights
You can view and edit your profile, download your transaction history, withdraw consent for ads measurement and delete your account in Profile → Account → Delete account. After deletion your profile, photo, phone number, favourites and blocks are erased immediately; financial records are kept only as long as the law requires, without your profile.
6. Children
The social, calling, gifting and creator features are only for people aged 18 or over. If we learn that a minor is using them we disable access.
7. Contact / Grievance Officer
Grievance Officer: <NAME>, <EMAIL>, <ADDRESS>. We respond within 30 days.
Shop orders and payments (Razorpay)
When you buy a physical product in the Shop, we collect your delivery name, phone number and address to deliver it.
They are stored encrypted and shared only with our courier. Payments for Shop orders are processed by Razorpay
(UPI, cards, net banking); we never see or store your card or UPI PIN. Wallet tokens are still bought only through
Google Play.
Advertising measurement and analytics
To measure which ads bring people to ShootSong we use the Meta (Facebook) SDK / Conversions API, Google Ads conversion
tracking and Google Analytics 4 (Measurement Protocol). When you complete a purchase we may send the event name, value,
currency and an order id to these services, together with a hashed (SHA-256, one-way) account identifier.
- We never send your phone number, name or address in readable form.
- Personal identifiers are sent only if you allow ads measurement. You can switch it off at any time in
Profile → Privacy & ads; from then on only anonymous, non-personal events are counted (or none).
- These providers process the data under their own privacy policies (Meta, Google).
Grievance officer
[Add in admin → Business & Policy] · ShootSong@gmail.com