Privacy statement

1. Who we are

shrthnd ("shrthnd", "we", "us", "our") is a service that reads a website, learns its brand voice and generates ready-to-post social content. The responsible party (data controller) is Goodd Apps, registration number 2026 / 553997 / 07, of 37 Parliament Street, Cape Town, South Africa. This statement is issued in line with the Protection of Personal Information Act (POPIA) and, where it applies to you, the GDPR.

2. What personal information we collect

• Account information — your email address and a securely hashed password. If you sign in with Google, Apple or Microsoft, we receive your email address from that provider.
• Websites you scan — the URLs you submit and the publicly available text and headings we read from those pages in order to generate content.
• Generated content — the ideas, posts and articles we create for you, and the brand-voice summary we infer.
• Billing information — if you subscribe, our payment processor collects and processes your card details. We do not see or store full card numbers; we keep only a transaction reference, the subscription period and amount.
• Usage and technical data — basic logs, device/browser information and interactions with the app, used to run and improve the service.
• Cookies and local storage — see our Cookie policy.

3. How we use your information

• To provide the service — scanning sites, generating content and showing you your plan.
• To create and secure your account and to sign you in.
• To process subscriptions and payments.
• To communicate with you about your account, updates and support.
• To maintain, debug, secure and improve the product.
• To meet legal and regulatory obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

4. AI processing of website content

To generate content, we send the text we read from the website you scan, together with our instructions, to our AI provider, Anthropic (the Claude API). That website text is treated strictly as source material for generating your drafts. We do not use it to train models, and our providers process it under their own data-processing terms. Generated drafts are stored in your account so you can review, copy and manage them.

5. Legal basis for processing

Where the GDPR applies, we rely on: performance of a contract (to deliver the service you sign up for); legitimate interests (to secure, run and improve the product); consent (for optional cookies and marketing, where used); and legal obligation. Under POPIA we process personal information on the corresponding lawful grounds, including your consent and the conclusion and performance of a contract with you.

6. Who we share it with

We share personal information only with service providers ("operators") that help us run shrthnd, under appropriate agreements:

• Anthropic — AI content generation.
• Paystack — subscription payments.
• AWS — servers, storage and delivery.
• MS Exchange — transactional email.

We may also disclose information where required by law, to protect our rights, or as part of a business transfer. We never sell your data.

7. How long we keep it

We keep your account and content for as long as your account is active. If you delete your account, the associated websites, scraped page content and generated content are deleted (our data model cascades these deletions). We may retain limited records — such as billing and transaction records — for as long as the law requires.

8. Your rights

Subject to the law, you can ask us to: access the personal information we hold about you; correct or update it; delete it; restrict or object to certain processing; receive it in a portable format; and withdraw consent where we relied on it. To exercise any of these, email [email protected]. You may delete your account at any time from your account settings.

9. Security

We protect your information with measures appropriate to the risk — including hashed passwords, encrypted connections (HTTPS) and access controls. No system is perfectly secure, but we work to keep your data safe and will notify you and the relevant regulator of a breach where the law requires.

10. International transfers

Some of our providers (including our AI provider) process data outside South Africa. Where personal information is transferred across borders, we take steps to ensure it receives a level of protection consistent with POPIA and, where applicable, the GDPR.

11. Children

shrthnd is intended for businesses and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to this statement

We may update this statement from time to time. We will change the "last updated" date above and, for material changes, take reasonable steps to let you know.

Terms of service · Cookie policy