ShareRec — Privacy Policy
Effective Date: 20.12.2024
Last Updated: 28.04.2026
This Privacy Policy describes how ShareRec ltd (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and protects your personal information when you use ShareRec (the “Service”). We are committed to protecting your privacy and handling your data transparently and responsibly.
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the practices described here, please do not use the Service.
1. Information We Collect
1.1 Information You Provide
- Account Information: When you create an account, we collect your name, email address, and password (stored in hashed form).
- Payment Information: When you subscribe to a paid tier, payment is processed by our third-party payment processor (e.g., Stripe). We do not store your full credit card number, CVV, or banking details. We may receive and store a partial card number (last 4 digits), card type, and billing address for record-keeping purposes.
- User Content: Screen recordings, webcam video, and audio that you create using the Service. User Content is stored on our servers for the duration specified by your subscription tier and is permanently deleted upon expiration or account deletion.
- Communications: If you contact us for support or feedback, we collect your name, email address, and the content of your message.
1.2 Information Collected Automatically
- Usage Data: We collect information about how you interact with the Service, including pages visited, features used, recording frequency, video duration, sharing activity, and anonymized visual session replays for service improvement.
- Device and Browser Information: We collect your browser type and version, operating system, screen resolution, and language preference.
- IP Address: We collect your IP address for security purposes, abuse prevention, and to determine your approximate geographic location.
- Cookies and Similar Technologies: We use essential cookies to maintain your session and preferences. We may use analytics cookies to understand how the Service is used. See Section 9 (Cookies) for more details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the Service: To operate, maintain, and improve the Service, including recording, storing, and delivering your video content.
- Account Management: To create and manage your account, process subscriptions, and handle billing.
- Communication: To send you transactional messages (e.g., payment confirmations), respond to your inquiries, and provide customer support.
- Service Improvement: To analyze usage patterns, diagnose technical issues, and improve the Service's features and performance.
- Security: To detect, prevent, and address fraud, abuse, and security threats.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
We will not use your personal information for purposes materially different from those described here without notifying you and, where required, obtaining your consent.
3. How We Share Your Information
We do not sell your personal information. We may share your information in the following limited circumstances:
- Service Providers: We share information with third-party service providers who assist us in operating the Service, including cloud hosting providers (for video storage and delivery), payment processors (e.g., Stripe, for billing), product analytics providers (e.g., PostHog, for usage analysis and anonymized session replay), and email delivery services (e.g., Resend, for notifications). These providers are contractually obligated to use your information only as necessary to provide services to us.
- Video Recipients: When you share a video, the recipient can view the video content and see your display name and any information you include in the video. Recipients do not have access to your account information.
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal process (e.g., court order, subpoena, or government request).
- Business Transfers: If the Company is involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership.
- With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.
4. Data Storage and Security
4.1 Data Storage
Your data is stored on secure cloud infrastructure. User Content (videos) is stored in accordance with your tier's expiration policy:
- Free tier videos are automatically and permanently deleted after 24 hours.
- Pro tier videos are automatically and permanently deleted after 7 days.
- Business tier videos are stored until you delete them or your account is terminated.
Account data is retained for as long as your account is active.
4.2 Data Security
We implement industry-standard security measures to protect your personal information, including encryption of data in transit (TLS/SSL), encryption of stored data at rest, secure password hashing, regular security assessments, and access controls limiting employee access to personal data.
While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
4.3 Data Location and International Transfers
Our primary infrastructure, including video storage and application servers, is hosted in the United States. This means that your personal information and User Content (including screen recordings) are stored on servers located in the United States, even if you are accessing the Service from Canada or another country.
4.4 Content Delivery Network (CDN)
We use a globally distributed content delivery network (CDN) to ensure fast and reliable video playback for your recipients worldwide. When a video is viewed, temporary cached copies of the video content may be created on edge servers in multiple countries, including but not limited to Canada, the United States, countries within the European Economic Area, the United Kingdom, Australia, Japan, Singapore, and other locations where our CDN provider operates. These cached copies are temporary and are automatically removed according to the CDN provider's caching policies.
4.5 Implications of International Data Storage
Because your data is stored in the United States, it may be subject to United States laws, including the USA PATRIOT Act, the Clarifying Lawful Overseas Use of Data (CLOUD) Act, and other applicable legislation. Under these laws, United States government agencies or law enforcement may be able to obtain access to your data through lawful legal processes such as court orders, subpoenas, or national security requests.
Similarly, when video content is cached on CDN servers in other countries, that data may be temporarily subject to the laws of those jurisdictions.
We take the following measures to protect your data during international transfers: we select infrastructure providers that maintain industry-leading security certifications (such as SOC 2, ISO 27001), we use Standard Contractual Clauses (SCCs) and other approved transfer mechanisms where required by applicable privacy laws (including GDPR), we encrypt all data in transit using TLS/SSL and at rest using AES-256 or equivalent encryption, and we ensure our service providers are contractually bound to protect your personal information in accordance with this Privacy Policy.
4.6 Your Consent to International Transfers
By creating an account and using the Service, you acknowledge and consent to the transfer, storage, and processing of your personal information and User Content in the United States and other countries as described above. If you do not consent to these international transfers, you should not use the Service. If you are located in the European Economic Area, United Kingdom, or Switzerland, please also refer to Section 7 (European Users) for additional information about your rights regarding international data transfers.
5. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may request that we correct inaccurate or incomplete personal information.
- Deletion: You may request that we delete your personal information by contacting us at hello@sharerec.com.
- Data Portability: You may request a copy of your data in a commonly used, machine-readable format.
- Withdraw Consent: Where we rely on your consent to process personal information, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at hello@sharerec.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.
6. Canadian Privacy Law Compliance
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Under PIPEDA, you have the right to access your personal information held by us, challenge the accuracy and completeness of your information, and withdraw consent for the collection, use, or disclosure of your information (subject to legal or contractual restrictions).
Our Privacy Officer can be reached at hello@sharerec.com for any privacy-related inquiries or complaints. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.
7. European Users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR). We process your personal data on the following legal bases: contract performance (to provide the Service), legitimate interests (to improve and secure the Service), consent (for optional analytics), and legal obligation (to comply with applicable laws). You have the right to lodge a complaint with your local data protection authority. For international data transfers, we use Standard Contractual Clauses or other approved mechanisms.
8. California Users (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). We do not sell your personal information. You have the right to know what personal information we collect and how it is used, request deletion of your personal information, and not be discriminated against for exercising your privacy rights. To exercise these rights, contact us at hello@sharerec.com.
9. Cookies and Analytics Technologies
We use the following technologies:
- Essential Cookies: Required for the Service to function (e.g., session management, authentication). These cannot be disabled.
- Cookieless Product Analytics: We use cookieless, in-memory analytics (PostHog) to understand how users interact with the Service. No persistent analytics cookies are set in your browser; an anonymous session identifier is stored only in tab memory and is cleared when you close the tab. We also drop IP addresses on ingest. Once you sign in, analytics events are associated with your account so we can measure feature usage and improve the Service.
We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent the Service from functioning properly.
10. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at hello@sharerec.com.
11. Data Retention
We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy. Specifically:
- User Content is retained according to your tier's expiration policy (24 hours, 7 days, or until you delete it).
- Account data is retained while your account is active and for up to 30 days after deletion to allow for recovery.
- Payment records are retained for up to 7 years as required by tax and financial regulations.
- Usage and analytics data is retained in anonymized form indefinitely for Service improvement.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service, updating the “Last Updated” date, and sending an email notification for significant changes. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
ShareRec ltd
Privacy Officer
Email: hello@sharerec.com
Website: https://sharerec.com/