Privacy at ShapShap

Your information has a job. Nothing more.

We use personal information to run accounts, fulfil video requests, process payments, deliver videos, prevent abuse, and provide support.

Staging note

This is the launch draft for Keagan’s legal sign-off. The responsible legal entity, formal information-officer details, and final retention schedule still need to be inserted before production.

1. What we collect.

  • Account details such as your name, email address, role, and profile image.
  • Order details such as the recipient name, pronunciation guide, occasion, and personal brief.
  • Payment references, amounts, status, fees, and refund records. ShapShap does not store full card details.
  • Creator videos, upload status, delivery records, and capacity settings.
  • Security and operational data such as session, device, request, error, and audit information.
  • Support messages and the information you choose to include in them.

2. Why we use it.

We process information to create and secure accounts, accept and fulfil orders, verify payments, deliver private videos, manage refunds, communicate order updates, prevent fraud and abuse, meet legal obligations, and improve the reliability of the service. We do not sell personal information.

3. Who helps us operate.

We use carefully selected service providers for hosting and authentication, payment processing, email, private video delivery, error monitoring, and operational infrastructure. At launch these may include Supabase, Railway, PayFast, Resend, Cloudflare Stream, and Sentry. They receive only the information needed for their role and operate under their own security and privacy obligations.

4. Creator and recipient information.

The selected creator receives the order brief needed to record the video. Do not include sensitive or unnecessary information about the recipient. If you provide another person's information, you confirm that you are authorised to do so for the purpose of the requested message.

5. Retention and security.

We keep information only for as long as it is reasonably needed for delivery, support, accounting, disputes, security, and legal obligations. Access is restricted by role, sensitive credentials stay server-side, and private delivery links are time-limited. No online system is risk-free, so we also monitor and respond to suspected security incidents.

6. Your choices and rights.

South Africa's Protection of Personal Information Act (POPIA) gives people rights in relation to their personal information. Depending on the circumstances, you may ask to access or correct information, object to certain processing, request deletion where retention is no longer required, or complain to the Information Regulator.

7. Contact us.

For a privacy request or question, email support@getshapshap.com. We may need to verify your identity before providing or changing account information. The production policy will include the responsible party and Information Officer's formal contact details after legal review.