Privacy policy

Information we handle

• Account information: your username, email address, password hash, and account creation details.
• Video and scan information: uploaded files, filenames, processed videos, analysis reports, job status, and processing timestamps.
• Billing information: subscription status, plan, billing dates, and Stripe customer, subscription, and payment references. Stripe collects payment card details through its checkout; FlashShield does not store full card numbers.
• Support messages and technical information needed to operate and troubleshoot the service, such as request, error, and upload records. Hosting providers may also receive IP addresses and connection information when you access the site.

How information is used

We use this information to authenticate your account, process videos, show scan reports, deliver downloads, manage subscriptions and usage limits, respond to support requests, and maintain service security and reliability. We may also retain information to meet legal obligations or resolve billing disputes.

Service providers

FlashShield uses Vercel for the website, Render for the API, Neon PostgreSQL for account and scan records, Cloudflare R2 for videos and reports, and RunPod for video processing. Stripe processes payments and manages billing. These providers receive the information needed for their services. Cloud hosting and storage providers may process information in countries other than your own.

We may disclose information when required by law or when necessary to address fraud, security incidents, or threats to others’ rights.

Storage and retention

Videos and processed outputs are subject to the service’s storage and retention limits. You can remove stored media for finished scans from Scan History. Removing media does not automatically remove its scan report or account and billing records.

We retain account and operational records as needed to provide the service, resolve disputes, and meet legal obligations. To request account deletion or ask about a particular record, email us. Some records may need to be retained for legal or payment-related reasons.

Browser storage

FlashShield uses your browser’s local storage to keep you signed in and remember an active scan, and to remember your privacy choice for up to six months. Clearing browser storage removes that information from your device but does not delete your server-side account. Payment providers may use their own cookies or similar technologies when you visit their checkout or billing pages.

Optional Vercel Web Analytics is disabled until you accept it. If enabled, it measures visits to public pages only. We exclude account and billing pages, uploaded filenames, video content, URL query strings, and fragments from analytics events. Vercel receives the connection information needed to process those requests. You can reject analytics or withdraw permission at any time using “Cookie & analytics settings” in the footer. Essential features work with analytics rejected.

To limit automated abuse, the API temporarily stores keyed hashes of request IP addresses and normalized email addresses with request counters. These records expire within one day; expired records are removed during routine maintenance.

Your choices and requests

You can contact us to request access to, correction of, or deletion of your personal information, or to ask how it is used. Depending on where you live, you may have additional rights under applicable privacy law, including the right to complain to a relevant authority. We may need to verify that a request comes from the account holder before acting on it.

Email pirmuhammedovbegmuhammet@gmail.com for privacy questions or requests. Do not include your password or full payment card details.

Updates to this policy

We will update this page when our data practices change and show the revised date above. We will communicate material changes where required by applicable law.