OneShot Privacy Policy

Last updated: October 12, 2026

This Privacy Policy explains how OneShot ("OneShot", "we", "us") collects, uses and protects your information when you use our website and app (the "Service"). OneShot is operated by the team behind Godly (godly.es) ("we"), which is the data controller for the personal data described here. Contact: godly.ai.app@gmail.com.

1. What OneShot does

OneShot lets you upload your own videos, automatically edits them (removing silences, filler words and repeated takes, and adding captions), generates alternative versions of the opening ("hooks"), and lets you review and publish the result to social media accounts you connect, such as TikTok, Instagram and YouTube.

2. Information we collect

Account information. Your email address and the login details needed to create and secure your OneShot account.

Content you upload. The videos you upload, and the content we create from them: audio transcripts with word timings, edit decisions (cuts), captions, hook texts and the final rendered videos.

Information from connected social accounts. When you choose to connect a social media account, we receive only what is needed to show you which account is connected and to publish on your behalf:

• TikTok: your TikTok open ID, display name and avatar (scope user.info.basic), the privacy options available for your account, and permission to upload videos to your TikTok inbox or publish them to your account when you confirm (scopes video.upload and video.publish).

• Instagram: your Instagram professional account ID and username, and permission to publish Reels you confirm.

• YouTube: your channel ID and name, and permission to upload videos you confirm (scope youtube.upload).

We also store the access tokens these platforms give us, so that we can publish when you ask us to. We do not receive or store your social media passwords.

Publishing information. The captions, scheduled times, privacy settings and post IDs of the videos you publish through OneShot, and the status of each publication.

Technical information. Basic logs (IP address, browser type, timestamps, errors) needed to run and secure the Service.

We do not collect your contacts, your messages, your followers list, or content from your social accounts other than what is listed above.

3. How we use your information

We use your information only to:

• provide the Service: process and edit your videos, generate captions and hooks, and store your projects;

• publish videos to your connected accounts, only after you review and confirm them;

• show you the status of your publications;

• keep the Service secure, prevent abuse and fix problems;

• communicate with you about your account and the Service.

We do not sell your personal data, use it for advertising, or use your videos to train AI models.

4. Legal bases (EEA/UK users)

We process your data to perform our contract with you (providing the Service), on the basis of our legitimate interest in keeping the Service secure and working, and on the basis of your consent when you connect a social media account (you can withdraw it at any time by disconnecting the account).

5. Service providers

We use trusted providers that process data on our behalf, only to run the Service:

• Supabase — database, authentication and file storage;

• OpenAI — speech-to-text transcription and text generation, when enabled;

• Anthropic — text generation (for example, detecting repeated takes and suggesting hooks and captions), when enabled;

• hosting and infrastructure providers needed to serve the website and process videos.

These providers may process data outside the European Economic Area. When they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. When you publish, your video and caption are sent to the platform you choose (TikTok, Instagram/Meta or YouTube/Google), whose own privacy policies apply to content posted there.

6. Data retention

• Raw uploaded videos: automatically deleted 30 days after upload.

• Transcripts, edits and final videos: kept until you delete the project or your account.

• Social media access tokens: kept while the account is connected; deleted when you disconnect it or delete your OneShot account.

• Logs: kept for a limited period for security purposes.

You can delete any project at any time, and you can delete your account by contacting godly.ai.app@gmail.com. We will then delete your data within 30 days, except where we are legally required to keep it.

7. Security

Access tokens are stored encrypted. Videos are stored in private storage, and the final videos are only made accessible through temporary links when needed to publish them (for example, Instagram requires a link to fetch the video). Access to data is restricted to what is needed to run the Service.

8. Disconnecting your social accounts

You can disconnect any social account from OneShot at any time, which deletes its tokens from our systems. You can also revoke OneShot's access directly from each platform:

• TikTok: Settings and privacy → Security and permissions → Apps and services permissions.

• Instagram: Settings → Apps and websites.

• Google/YouTube: https://myaccount.google.com/permissions

9. YouTube and Google API Services

OneShot uses YouTube API Services. By connecting a YouTube account, you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's Privacy Policy (https://policies.google.com/privacy) applies to the data Google processes. OneShot's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

10. Your rights

Depending on where you live, you have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw your consent at any time. To exercise these rights, contact godly.ai.app@gmail.com. If you are in the EEA, you can also file a complaint with your data protection authority (in Spain, the Agencia Española de Protección de Datos, www.aepd.es).

11. Children

OneShot is not intended for children. You must be at least 16 years old, or the minimum age required in your country to use the social platforms you connect, to use the Service.

12. Changes

We may update this policy. If we make significant changes, we will notify you through the Service or by email. The "Last updated" date shows when it was last changed.

13. Contact

Email: godly.ai.app@gmail.com