Privacy Policy

This Privacy Policy explains how Shoot collects, uses, stores, and shares information when you use the Shoot website, app, marketplace, onboarding flows, dashboards, campaign tools, support tools, and related services.

Shoot is a clipping campaign marketplace. That means we process information about creators, businesses, campaigns, submissions, review decisions, community messages, notifications, and payouts.

We collect account information such as your name, email address, profile photo, selected role, username, birthday, country, onboarding status, workspace preference, and authentication provider.

Authentication may be handled through Firebase Auth, Google, Apple, email/password, or other sign-in providers we add later. Those providers may process sign-in information under their own privacy policies.

Business users may provide business names, brand profiles, logos, websites, bios, team members, campaign thumbnails, descriptions, budgets, platform choices, guidelines, invite links, brand assets, and campaign settings.

Some brand and campaign information may be public when a campaign is public or when a creator views a campaign invite page.

Creator users may provide display names, usernames, profile photos, social handles, niche tags, campaign joins, submitted links, captions, uploaded videos, notes, community messages, reactions, and payout preferences.

Creator submissions, review status, rejection reasons, view counts, and payout status may be visible to the relevant business running the campaign.

Creator billing profiles may include payout method preferences, Stripe account identifiers, PayPal email addresses, or bank-transfer details.

Bank account numbers should be stored only in masked form after save, such as the last four digits, unless a regulated payment provider needs more information to process payouts.

Stripe, PayPal, banks, and other payment providers may collect identity, tax, payment, fraud-prevention, and compliance information directly under their own terms and privacy policies.

We process campaign joins, submitted video URLs, review decisions, rejection reasons, resubmissions, view counts, payout estimates, payout status, notifications, and campaign analytics.

Shoot may use automated tools or third-party services, including xAI, to help estimate view counts, validate links, summarise content, or support campaign analytics. Automated results may be imperfect and may be reviewed or adjusted.

If you contact support or use in-app messaging, we collect message content, attachments, timestamps, sender details, conversation status, and related support metadata.

We use notifications and transactional emails to send account updates, welcome messages, clip review updates, campaign activity, support replies, payout updates, security alerts, and service notices.

We may collect technical information such as device type, browser type, IP address, pages viewed, interactions, session state, errors, performance data, and approximate location derived from network information.

Shoot may use cookies, Firebase authentication state, and browser local storage to keep you signed in, remember preferences such as theme and workspace, cache drafts, protect routes, improve loading speed, and secure the product.

We use information to create accounts, route onboarding, operate campaigns, display marketplace listings, process joins, accept submissions, support review queues, estimate payouts, provide dashboards, send notifications, prevent abuse, improve the product, and respond to support requests.

We may also use information to debug errors, enforce terms, protect users, comply with legal obligations, maintain security, and understand which features are working.

Campaign and submission data is shared between the relevant business and creator accounts inside Shoot so campaigns can be operated.

Public campaign information may be visible to visitors and signed-in users. Invite-only campaign information may be visible to people who receive the invite link.

We do not sell personal information. We may share information with service providers, payment providers, legal authorities where required, or parties involved in a business transfer such as a merger or acquisition.

Shoot may use Firebase for authentication, Firestore, and storage; Cloudflare for hosting and runtime infrastructure; Stripe and PayPal for payouts; Resend for transactional email; xAI for AI-assisted view tracking or validation; and analytics, security, or support tools added later.

These providers process information as needed to operate Shoot and may have their own privacy and security terms.

We keep account, campaign, submission, support, notification, and payout records for as long as needed to operate Shoot, provide support, maintain accurate campaign history, prevent fraud, resolve disputes, and meet legal, accounting, or tax requirements.

Draft campaign data may be cached locally in your browser to prevent accidental loss while creating campaigns.

We use reasonable technical and organisational measures designed to protect information. No internet service can be guaranteed to be fully secure.

You are responsible for using a secure password, protecting your device, and telling us promptly if you believe your account has been accessed without permission.

You can update profile information, billing preferences, connected accounts, notification preferences, and theme preferences inside Shoot where those controls are available.

You may contact us to request access, correction, deletion, or export of personal information. Some information may need to be retained for legal, security, payment, fraud-prevention, or dispute reasons.

Shoot is not intended for children. Users must be at least 18 years old where creator payouts, billing details, or earnings are involved.

If you believe a child has provided personal information to Shoot, contact us so we can review and take appropriate action.

Questions about this Privacy Policy can be sent to contact@tryshoot.com.

This policy is a product-ready draft and should be reviewed by qualified counsel before relying on it for a full paid public launch.