Privacy Policy
NoShotList makes short videos for businesses: you talk with Remy, our AI producer, on your computer while your phone films you. That means we handle your face and your voice. This page says, in plain words, what we collect, who helps us process it, who owns it, and how you delete it. NoShotList is operated by 19CONSULTANTS LLC, New York, USA.
The short version
- Your recordings and the shorts made from them are yours. We use them to make your videos and to check how well we make them, and no one outside the NoShotList team watches them unless you say yes first.
- We never clone or synthesize your voice, we don't sell your data, and we don't train AI models on your footage. (Our transcription provider's standard terms do let it use some audio to improve its models — see section 3.)
- Your conversation with Remy runs on OpenAI; your recordings are stored with Cloudflare, and your phone's recording is transcribed by Deepgram; Stripe handles payments. The full list is below.
- Delete a short or a whole business from the app and its files are deleted. To delete your account, email hello@noshotlist.com.
1. What we collect
- Your email address. You sign in with a one-time link we email you — there are no passwords. Sign-in links expire after 20 minutes and a sign-in lasts up to 90 days on that device. We store only scrambled (hashed) versions of sign-in links and sessions.
- Your waitlist request. If you request access: your email and anything you choose to tell us — your business, website, how often you post short videos and where you want to post. Your request is emailed to the NoShotList team. We also keep a scrambled (hashed) form of your network address, only to limit how many requests one network can send.
- Your conversations with Remy. When you talk with Remy, the sound from your microphone streams from your browser to OpenAI's realtime voice model, which is Remy's voice and ears. We keep a text log of each filming session (what you and Remy said, with timings, plus a few numbers your browser measures about how you said each line — pace, pitch, loudness — never the sound itself) so we can find your answers in the recording and pick your best takes, plus what Remy learns about your business (your business brief) and any text chats with Remy.
- Your recordings. Your phone records video and sound of the session — Remy's voice from your computer's speakers can be in it too — and uploads it to private storage for your account. Unless you pick Phone under Microphone in the studio, your computer's microphone (or the mic you pick there) also records the session's sound while your phone films. It's uploaded to the same private storage, stored with that recording, and deleted with it. Each short's sound comes from one of the two. Until a take has finished uploading, the unsent part waits in your browser, and it's deleted from there once it's uploaded. During setup, a few still snapshots from your phone's camera are checked by an OpenAI vision model to help with your framing and light; they aren't stored.
- Transcripts and shorts. The timestamped words of each recording, the shorts we cut from it, their thumbnails, captions and on-screen text, and your feedback on them (like your answer to "Would you post this?" and how often you downloaded each one).
- Usage and billing. The voice minutes you use, your plan and your subscription status. Payments go through Stripe: we never see or store your card number. We keep the customer and subscription IDs Stripe gives us.
- Technical data. A sign-in cookie that keeps you signed in, a few settings your browser remembers (like the business you last opened), and short-lived technical logs (for example, errors). Our pages load fonts from Google Fonts, and your phone and computer find each other for the live camera preview through public connection servers run by Cloudflare and Google, so those services see your IP address. We don't use advertising or analytics trackers.
2. How we use it
- To run NoShotList for you: learn your business, research formats for your niche, plan and hold your sessions, cut your shorts, bill your plan, and email you sign-in links and invites.
- To fix problems: when something fails — for example, a video that won't render — the people who run NoShotList may look at that session's log or recording to find out why.
- To make NoShotList better: we look at how shorts turn out — your "Would you post this?" answers, downloads and whether a cut needed review — to improve how we cut them. The people who run NoShotList may also review your shorts, their transcripts and your session logs to measure how well Remy's interviews and our cuts work. We ask you first before anyone outside the NoShotList team watches your videos, for example to check whether a short makes sense to a stranger.
We don't sell your data, we don't use it for advertising, and we don't post anything for you. We never clone or synthesize your voice: every word in your shorts is one you actually said.
3. Who processes it
These companies process your data for us, only to provide NoShotList:
| Cloudflare | Hosts the site and app; stores your account data (database) and your recordings, session logs and shorts (file storage); sends our emails; can run video rendering on its container service; and runs a video classifier from TypeSafe on its AI platform (below). |
|---|---|
| OpenAI | Remy's voice conversation (realtime voice model), plus the models that read your business, check your camera framing, plan your shorts, pick the lines for each short and write captions. During your intro chat, Remy can ask OpenAI's web search about your business. |
| Deepgram | Transcribes your phone's recordings into timestamped words. |
| Stripe | Payments and subscriptions. |
| TypeSafe | Through Cloudflare's AI platform, or TypeSafe's own API as a fallback, scores which public videos fit your audience. It receives a short description of your business and its buyers — never your footage, voice or contact details. |
| Our render computer | A computer NoShotList operates downloads your recordings (your phone's and your computer's), picks the clearer sound, cuts your shorts, uploads them, and deletes its working copy when each job finishes. |
What they do with it
- OpenAI doesn't use data sent through its API to train its models by default. We start Remy's voice sessions with OpenAI's storage turned off. OpenAI may keep API data for up to 30 days, for example to check for abuse.
- Deepgram: under Deepgram's standard terms, which we use today, Deepgram may keep part of the audio it transcribes and use it to improve its speech-recognition models.
- NoShotList doesn't train AI models on your recordings, your voice or your transcripts.
Research uses public videos, not yours
To find short videos that work in your niche, we search public videos on YouTube (YouTube Data API), Instagram (Meta's Graph API), TikTok and Instagram (through ScrapeCreators) and the web (OpenAI's web search), and we may download and transcribe those public videos. These services receive search terms about your niche — and, for the web search, your business name and website — never your footage, your voice or your contact details. Our research uses YouTube API Services: see YouTube's Terms of Service and the Google Privacy Policy. Reference videos in the app play in YouTube, TikTok or Instagram players, which follow those companies' own privacy policies.
4. Your footage is yours
You own your recordings and the shorts made from them. You let NoShotList store and process them only to provide the service to you and to improve it, as this page describes. We don't publish or post your videos. We don't use them in our marketing or show them to anyone outside the NoShotList team — for example, for a quality check — unless you say yes first.
5. How long we keep it, and how to delete it
- Recordings are kept until you delete them. There's no automatic expiry today: a recording stays until you delete its business or your account.
- Delete a short (in Clips): its video, thumbnail and text are deleted right away. The recording it came from stays, because your other shorts use it. We keep your "Would you post this?" answer and download count for it — no video or words — until you delete the business.
- Start over on a business: forgets its brief, research and chat with Remy, and keeps your recordings and shorts.
- Delete a business (in Settings): deletes its recordings, session logs, transcripts, shorts, research, chats and brief. We keep a record of the voice minutes you used and when research ran — no content — because they count toward your plan's limits and billing.
- Delete your account: email hello@noshotlist.com from the address you sign in with, and we'll delete your account and everything in it within 30 days. Stripe keeps its own payment records as the law requires.
- Leave the waitlist: email us and we'll remove your request.
- Deleted database records can stay in our database provider's recovery backups for up to 30 days before they're gone for good.
6. Keeping it safe
Everything travels over encrypted connections. Your recordings and shorts sit in private storage: only your signed-in account can play or download them, apart from the people who run NoShotList when they need to operate or fix the service. No system is perfectly secure; if something goes wrong that affects your data, we'll tell you.
7. Your choices
You can ask for a copy of your data, ask us to correct it, or ask us to delete it — email hello@noshotlist.com. You can download your shorts from the app at any time. NoShotList is for businesses and adults: don't use it if you're under 18.
8. Changes and contact
If we change this policy we'll post the new version here with a new effective date, and email account holders about significant changes. Questions: hello@noshotlist.com.
See also our Terms of Service.