Privacy policy.

• Account details: your name, email address, profile photo and sign-in method, including Google sign-in if you choose it.
• Workspace details: workspace names, members, invitations and roles.
• Your content: the videos and images you upload, links you import, the briefs and reference images you use to create looks, captions and edits you make, intro and outro videos, and feedback you send about a clip.
• Public profile: if you publish a look to the community, the creator name and handle you choose.
• Messages: emails you send to OneShot support.

• Processing results: transcripts, chosen moments, captions, generated images and visuals, look versions and rendered clips made from your content.
• Billing records: your plan, credit balance and usage, and purchase history. Card payments are handled by the payment provider; OneShot does not receive or store full card numbers.
• Service and device data: IP address, browser or device type, app version, timestamps and request records, kept to run, secure and troubleshoot the service.
• Error and performance reports: diagnostic details when something fails, sent to error monitoring and performance tools.
• Push notification token: on iOS, a device token if you turn notifications on.
• Website measurement: the website counts page views and sign-up steps with first-party events that carry no cookie or persistent identifier, and skips them when your browser sends Do Not Track or Global Privacy Control. OneShot uses no advertising trackers.

• To provide OneShot: turning your videos into clips, generating and previewing looks, rendering, keeping your library, and sharing what you choose to share.
• To run accounts, workspaces, plans and credits, including returning credits for failed work where the product offers it.
• To send service messages, such as sign-in codes, invitations, receipts and the notifications you turn on.
• To send occasional product update emails, which you can turn off at any time.
• To keep OneShot secure and reliable: preventing abuse, investigating problems and measuring performance.
• To meet legal obligations and enforce the terms of use.

Tessact does not sell your personal information or your content, and does not use them for advertising.

OneShot relies on third-party service providers to operate. These providers receive information needed for their part of the service, under their applicable service terms and privacy commitments. They include:

• Cloud hosting, storage and databases, which run the service and keep your content.
• Sign-in and account management.
• Payments: a payment provider handles purchases on the website. Purchasing is disabled in the current iOS TestFlight beta.
• Email and push notification delivery.
• Third-party AI services, which transcribe speech, choose moments, write captions and looks, and generate visuals from your content.

When you import a YouTube link on the website, the video is retrieved from YouTube, and YouTube’s terms and Google’s privacy policy apply to that retrieval.

In the iOS app, you are asked for permission before your content is first sent to these AI services, and you can turn that permission off at any time in You › Privacy.

• With your workspace: members of a workspace can see the videos, clips and looks in it.
• When you make something public: a share link lets anyone with the link watch the clips you include, until you turn the link off. Looks you publish to the community are visible, with your creator name and handle, to other OneShot users and visitors.
• For legal reasons: when the law requires it, or to protect the rights, safety and property of OneShot users, Tessact or others.
• In a business transfer: if Tessact is part of a merger, acquisition or sale of assets, information may transfer with it, still protected by this policy.

• Account and workspace information is kept while your account is active.
• Your content and the clips made from it are kept to provide your workspace library. Shared workspace content may remain available to other members after an individual account is deleted.
• Deleted items are removed from your library. Storage cleanup and backup expiration are separate processes; contact support for a content-erasure request.
• Diagnostic, security, billing and audit records may be retained separately to operate the service, investigate problems and meet legal obligations.

• Access and correct: update your name, email and photo in your account settings.
• Delete: delete individual videos and clips at any time. In the iOS app, Account & security → Delete account requests permanent deletion of your account and associated personal data, including your personal content and public contributions. No separate support request is required. We manually fulfill account deletion within 30 days and send confirmation to your verified email. Your account remains available until fulfillment starts. Content belonging to other members of shared workspaces and records we must retain for legal or billing obligations may remain. Backups expire under their retention policies and are not restored into active use. You can also request deletion by emailing OneShot support.
• Notifications: manage email and push notifications in settings. Turn off product update emails in settings or from the unsubscribe link in any of them.
• Photos: the iOS app asks only for permission to add the clips you save. Videos you pick are shared with OneShot one at a time.

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict how it is processed, and to complain to a data protection authority. To make a request, email oneshot@tessact.com; identity verification may be needed.

OneShot is not meant for anyone under 18, and Tessact does not knowingly collect information from children. If you believe a child has used OneShot, email oneshot@tessact.com so the account can be removed.

OneShot runs primarily on cloud infrastructure in India and Singapore. Service providers may process information in the United States and other countries. Where information crosses borders, it remains protected by the providers’ contractual commitments and the safeguards in this policy.

Information is encrypted in transit, access to production systems is limited and logged, and media is served through short-lived links. On iOS, uploads waiting to be sent use the device’s data protection and are excluded from backups. No system is perfectly secure, so keep your sign-in methods safe and report any suspected misuse to OneShot support.

When this policy changes, the date at the top is updated. Significant changes are announced in the product or by email before they take effect.

Questions or requests about privacy: oneshot@tessact.com. OneShot is operated by Tessact Pvt Ltd.