Privacy Policy
Selfshot is built around your camera roll, so privacy is not a footnote. This explains what we collect, why, who helps us run the service, and the choices you have.
1. Who is responsible
Selfshot is responsible for personal information collected through Selfshot. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Our Privacy Officer, who is accountable for how we handle personal information, is Joshua Deosaran, Founder. Reach them at hello@selfshot.net.
2. What we collect
When you create an account
- Name, email address and password (stored securely by our login provider, never in plain text).
- The version of our terms you agreed to and when, so there is a record of it.
- Profile answers from onboarding: your job, where you are, what you film, and your avatar.
When you upload
- The video file, plus a thumbnail and preview strip we create from it.
- Clip details: title, description, location, tags, length, resolution, frame rate and recording date.
- Signed releases you upload for people on camera.
- For clips recorded in the Selfshot camera: the recording time, device type and a signed capture record.
When you sign a release for a clip you appear in
- Your name (and a parent or guardian's name, if signing for a child), your signature, and your email if you give it.
- When you signed, plus your IP address and browser type, kept as a record that the signature is genuine.
- A selfie you take while signing and the phone number or email you confirm with a one time code, so we can check the person signing is the person in the clip. The creator who asked can see the selfie; buyers never do. Codes sent by text go through our text message provider.
- The creator who asked sees your name and that you signed. Buyers see only that a release is on file. If a share was offered, we use your email to pay it.
When you turn on alerts
- We turn the town or place you’re based in into rough map coordinates, so we can tell you about storms, fires, northern lights and other events near you, and about footage requests in your area.
- Your city is counted on Selfshot Pro’s creator map as part of a number (“12 creators in Lisbon”). It never shows where you live, and your username only appears there if you turn on casting and research requests.
- We keep a record of which alerts we sent you, so you never get the same one twice. Every email has a link to stop them, and you can switch them off in your studio.
When you open up to casting and research requests
- The phone number or email you choose to share. It is stored separately and released only to a Pro member whose request you accept.
When money is involved
- Purchase, subscription and payout records. Card numbers, bank details and ID documents go straight to Stripe. We never see or store them.
- Whether your identity check passed, which Stripe tells us.
- For Selfshot Business, the email addresses of teammates the account owner adds, so their seats can switch on when they log in.
Automatically
- A login cookie to keep you signed in, and basic server logs (IP address, browser type, pages requested) used for security and fixing errors.
- We do not use advertising cookies or sell your data. Ever.
3. When you upload clips
Selfshot only sees the clips you pick or drop in to upload. On a phone, your phone controls which videos Selfshot can open, and you can change that at any time.
- Read on your device first. Quality (sharpness, exposure, stability, motion), length, resolution and frame rate are measured on your device, along with what the file says about itself: the camera, the recording date, labels from AI tools, content credentials and signs it was downloaded from another app. Location data in the file is removed on your device before anything is uploaded.
- Sent to our AI provider, Anthropic. To suggest a title and tags, three small still frames (512 pixels on the longest side) may be sent. When you open a clip to publish it, six still frames (up to 768 pixels), the file details above and what you typed are sent to appraise it, check that it's real camera footage, count the people in it and suggest titles. If you ask for a second look, six more frames are sent. Frames are used only to produce those results and are not stored by Selfshot, and under Anthropic's commercial terms they are not used to train its models.
- What we keep. The appraisal and authenticity results are saved with a clip you publish or send to us, and people at Selfshot who review clips can see them.
- People in your clips. We count people to know when a release is needed. We do not run facial recognition or try to identify anyone.
- When it's uploaded. Nothing is uploaded until you press Publish or Send to Selfshot. Then we store the original video, a watermarked preview, a thumbnail, a short storyboard of frames and a fingerprint of the file, which we use to spot the same file uploaded twice.
- If we can't list it. When a person at Selfshot rejects a clip, the clip and its files are deleted. A clip someone already licensed is kept hidden instead, so the buyer can still download what they paid for.
4. Why we use it
- To run your account, host and sell your clips, and pay you.
- To show buyers watermarked previews and deliver originals to people who license them.
- To connect consenting creators with Pro members.
- To prevent fraud, enforce our terms and respond to takedown requests.
- To send account emails such as receipts, sales alerts and changes to our terms.
We only use personal information for the purpose it was collected for, unless you agree otherwise or the law requires it.
5. What others can see
Your @username, profile photo, job, general location and published clips are public on the marketplace. Your legal name, email, phone number and releases are never public. Buyers who license your clip see your @username on their license certificate, and you see theirs. If you choose to be credited by your real name, buyers who license your clips see it on their certificate and receipt instead. Otherwise Selfshot keeps your legal name on file and shares it only with a buyer's legal or clearance team when they need it to clear the footage, a Pro member whose request you accept, or when the law requires it.
6. Who helps us run Selfshot
We use these service providers. They process data only on our instructions and under their own security commitments.
| Provider | What for |
|---|---|
| Supabase | Accounts, login and database |
| Cloudflare R2 | Video, thumbnail and release storage |
| Stripe | Payments, payouts and ID verification |
| Netlify | Website hosting |
| Anthropic | Suggesting titles, tags and prices from still frames of a clip |
| Resend | Sending receipts and account emails |
These providers may store and process data outside Canada, including in the United States. When they do, your information may be accessible to the courts, law enforcement and national security authorities of those countries.
7. How long we keep it
- Account and clip data: while your account is open.
- Purchase and payout records: 6 years from the end of the tax year they relate to, as the Canada Revenue Agency requires.
- Releases: as long as any license for that clip is in force, so buyers stay protected.
- Server logs: kept by our hosting provider for a limited time set by their systems, and used only for security and fixing errors.
8. Your choices and rights
You can ask us to:
- Show you the personal information we hold about you.
- Correct anything that is wrong. Most of it you can edit yourself in your profile.
- Delete your account and clips, subject to the records we must keep by law.
- Withdraw consent, for example to casting and research requests, which you can switch off in your studio at any time.
Email hello@selfshot.net and we will reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
9. Security
Data is encrypted in transit and at rest. Originals are private and can only be fetched through short lived links issued to the owner or a paying licensee. Access to contact details is enforced in the database itself, not just in the app. No system is perfect, so if we ever have a breach that creates a real risk of significant harm, we will notify you and the Privacy Commissioner as soon as feasible, and we keep a record of every breach for two years, as the law requires.
10. Age
Selfshot is for adults 18 and over. We do not knowingly collect information from anyone younger.
11. Changes
If we change how we handle your information in a meaningful way, we will tell you before the change takes effect.