Privacy Policy

Effective date: October 15, 2026

This Privacy Policy explains how Shuffll Inc. (“Shuffll”, “we”, “us”) handles information in connection with our websites, Shuffll Engage, video creation and personalization services, APIs, MCP connections and related support (the “Services”). Contact us at [email protected].

1. Our role and your organization’s role

We handle website inquiries, account administration, service operations and our business communications for our own purposes. When a business customer supplies audience information or other personal data to create and deliver content, that customer determines the purpose of the campaign and we process the data on its behalf, subject to the applicable service agreement and data processing terms. If you received a video or message from one of our customers, that customer’s privacy notice also applies. Please contact that organization about its campaign or audience records; we can help route a request.

2. Information we handle

Account and business information: names, work email addresses, company and role, account identifiers, organization memberships, permissions, correspondence, order and billing information.
Customer content: briefs, prompts, scripts, templates, brand materials, product information, uploaded images, video and audio, generated outputs and review decisions. Content may include personal information supplied by a customer.
Audience and campaign information: recipient names and contact details, personalization fields, segments, interests, behavior or loyalty attributes, and campaign instructions supplied or connected by the customer. We do not obtain these attributes merely because someone visits our website.
Integration information: connected service identifiers, selected organizations, authorization scopes, access credentials and records of API, MCP or webhook operations.
Technical and usage information: IP address, browser and device information, timestamps, referring pages, campaign attribution, cookie or similar identifiers, tool selections, job status, errors, performance, delivery status and video interaction events where enabled.

Information comes from you, your organization, the systems you authorize, and interactions with the Services. Only supply data you are authorized to share. Do not submit passwords or sensitive personal information in a general contact form or chat prompt.

3. How we use information

We use information to provide and administer the Services; authenticate users and enforce permissions; create, personalize, render, store and deliver requested content; operate integrations; process orders and usage; answer inquiries and provide support; detect abuse, investigate errors and maintain security; meet legal obligations; and understand and improve service quality. We use demo-request details to respond to the request and manage the business relationship. Optional marketing communications can be stopped using their unsubscribe instructions or by contacting us.

4. AI processing and service improvement

Features that generate or transform text, images, voice or video may send the relevant prompts, content and settings to AI and media-processing providers. The providers and processing depend on the feature, configuration and applicable agreements. A third-party chat service you choose to connect, such as ChatGPT, Claude or Grok, has its own privacy terms and account settings.

We may use aggregated or effectively de-identified operational information to analyze, evaluate and improve the Services, including to develop or train models that select tools, route tasks or coordinate workflows. Examples include tool choices, execution timing, error patterns and workflow outcomes. Information used for this purpose must not reasonably identify an individual or customer or reveal identifiable customer content or confidential business information. Removing a name or replacing an identifier alone does not make information anonymous. We apply appropriate measures to reduce re-identification risk and do not attempt to re-identify information used in this form.

Shuffll does not currently use raw or identifiable customer content to train its own shared AI models. Any future use of such content for that purpose requires separate customer authorization and must comply with the applicable agreement and law. This policy does not override a customer’s existing contractual restrictions. It does not promise that every external AI provider has identical retention or training rules; contact us about the processing terms relevant to your configuration.

5. When information is shared

We share information as needed with service providers supporting hosting, storage, rendering, AI processing, analytics, customer relationship management, communications, security, support and business administration. For enabled delivery channels, the necessary message, media and destination information is sent to the relevant SMS, WhatsApp or other delivery provider. Customer-configured webhooks receive the payloads the customer authorizes.

We also share information with users and administrators authorized within the customer’s workspace, with destinations the customer chooses, when reasonably necessary to comply with law or protect rights and security, and in connection with a corporate transaction subject to applicable safeguards. We do not sell customer content. We do not publish a customer’s uploaded content merely because it uses the Services. Public or shared preview and video links can be accessed by people who receive the link, depending on the link’s access settings; share them carefully.

6. API, MCP and connected applications

A connected application can request data and perform actions within the permissions approved for its organization and credential. Tool results may be returned to that application and included in the conversation or workflow you initiate. Connecting an application does not by itself authorize every feature or launch a campaign. Review the requested scopes and your organization’s permissions.

You can disconnect an application in its settings and revoke its Shuffll access through the available access controls or by contacting us. Revocation stops future authorized access but does not automatically erase data already returned to another service. To remove those copies, use that service’s controls and privacy process as well.

7. Cookies, analytics and embedded content

Our sites use cookies, browser storage and similar technologies for essential functions such as authentication, security and preferences, and may use analytics and embedded third-party content. The Engage website offers analytics preferences; where enabled, optional analytics such as Google Analytics help measure site usage and campaign attribution. You can change those preferences or use browser controls, although disabling essential storage may affect functionality. Embedded media and external websites may process information under their own policies. If you post a public comment or other public contribution, the information you choose to publish may be visible to others.

8. Retention and deletion

Retention depends on the type of information, the Services and features used, customer instructions, the account relationship, applicable agreements, legal obligations and legitimate security or recordkeeping needs. Customer projects and media can remain available until removed under the applicable workflow or agreement. Disconnecting a connector is not a project-deletion request.

Contact us to request deletion, an export or clarification of retention for your account. We may verify identity and authority before acting. Some records may need to be retained for legal, accounting, dispute or security reasons. Backup copies may remain for their applicable retention cycle and are not the same as actively available project data. We do not promise immediate removal from every backup or from independently controlled third-party systems.

9. Security and international processing

We use technical and organizational measures appropriate to the Services, including authentication, access controls and encrypted connections. No system can guarantee absolute security. Keep credentials confidential, limit integration permissions and report suspected unauthorized access to us.

Shuffll and its providers may process information in the United States and other countries. Applicable transfer requirements and customer agreements govern that processing. Contact us for information about the safeguards and processing locations relevant to your service arrangement; this policy is not a representation of a particular certification or data-residency commitment.

10. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction or portability of personal information, object to certain processing, withdraw consent where processing relies on it, or complain to a relevant supervisory authority. Where consent is withdrawn, that does not change the lawfulness of earlier processing. Where applicable, our processing grounds include providing the service or contract, consent, legal obligations and legitimate interests such as security, support and service administration.

Send requests to [email protected], identifying the account or organization and the request without including unnecessary sensitive information. If the information belongs to a customer’s campaign, contact that customer first; our ability to act may depend on its instructions and your authority.

11. Children

The Services are intended for business users and are not directed to children under 13 or a higher minimum age required by applicable law. Contact us if you believe a child has supplied personal information without the required authorization.

12. Changes and contact

We may update this policy to reflect changes in the Services, processing practices or legal requirements. We will post the updated date and provide additional notice or obtain consent where required. A policy update does not by itself authorize a materially different use of previously collected information contrary to applicable law or an existing agreement.

Shuffll Inc.
Privacy and legal inquiries: [email protected]
Terms of Service