Privacy Policy
Last updated: November 8, 2026
This Privacy Policy explains how PT Redrama Inovasi Global ("we", "us"), which operates ShortDrama Studio at shortdrama.studio, collects, uses, shares and protects personal data when you use our website and services (the "Service").
Controller: PT Redrama Inovasi Global, Infiniti Office, Menara Cakrawala, 12F Unit 05A, Jl. M.H. Thamrin, Kebon Sirih, Menteng, Central Jakarta 10340, Indonesia. Contact: support@shortdrama.studio.
1. Data we collect
Data you give us
- Account data: your name, email address, password (stored hashed) or your Google account identity if you sign in with Google, username, country and language preferences.
- Content: the prompts, titles, scripts, novels, images, photos and audio you upload or write, and the stories, characters, scenes and episodes generated for you ("Your Content").
- Support messages: what you send us through the Help Center or by email, including attachments.
- Payment details: handled by our payment providers (see section 4). We receive the transaction record, such as the plan, amount, date and status, but not your full card number.
Data collected automatically
- Usage and device data: pages viewed, features used, credits spent, approximate location from your IP address, browser and device type, and error logs.
- Cookies and similar storage: necessary storage for sign-in, security and preferences, and, only if you allow it, analytics cookies. See our Cookie Policy.
2. How we use your data
| Purpose | Data | Legal basis |
|---|---|---|
| Provide the Service: accounts, projects, generation, exports | Account data, Your Content, usage data | Performance of our contract with you |
| Process payments, credits and subscriptions | Account and transaction data | Contract; legal obligations (tax, accounting) |
| Keep the Service secure and prevent abuse | Usage, device and log data | Legitimate interests; legal obligations |
| Answer support requests | Support messages, account data | Contract; legitimate interests |
| Understand and improve the Service | Analytics data | Your consent (analytics cookies) |
| Send service emails (verification, receipts, important changes) | Email address | Contract |
| Send product news, where allowed | Email address | Your consent, which you can withdraw at any time |
We do not sell your personal data, and we do not use Your Content to train our own AI models.
3. AI processing
To generate scripts, images, voices and video, the relevant parts of your prompts and content are sent to the AI model providers that power each feature. They process this data to return a result to us, under their own terms and data-protection commitments. Do not include sensitive personal data, or other people's personal data without their permission, in your prompts or uploads.
4. Who we share data with
We share personal data only as needed to run the Service:
- Hosting and infrastructure: cloud hosting, storage and content-delivery providers (such as Cloudflare).
- AI model providers: to generate content, as described above.
- Payments: our merchant of record and payment providers, such as Dodo Payments, Paddle and PayPal, which sell to you as reseller, process payments, handle taxes and prevent fraud under their own privacy policies. They receive your name, email, country and payment details, and tell us the result of the payment.
- Sign-in: Google, if you choose Sign in with Google.
- Analytics: Google Analytics, only if you allow analytics cookies.
- Email delivery and support tools, to send service emails and answer requests.
- Authorities, when required by law, or to protect our rights, users or the public.
- A successor, if our business is merged, acquired or reorganised, subject to this policy.
5. International transfers
We are based in Indonesia, and some of our providers process data in other countries, including the United States and the European Union. Where required, we rely on appropriate safeguards, such as contractual commitments, for these transfers.
6. How long we keep data
- Account data and Your Content: for as long as your account is active. When you delete a project or your account, we delete or anonymise the related data within a reasonable period, except where we must keep it longer by law.
- Transaction records: for as long as tax and accounting laws require.
- Logs and security data: for a limited period, unless needed to investigate abuse.
- Analytics data: according to the retention settings of Google Analytics (up to 14 months).
7. Your rights
Under Indonesia's Personal Data Protection Law (UU PDP) and, where applicable, the GDPR, the CCPA and other laws, you may have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate data;
- delete your data or your account;
- restrict or object to certain processing;
- withdraw consent at any time, for example through Cookie settings in the footer;
- receive your data in a portable format;
- complain to your data-protection authority.
To exercise these rights, email support@shortdrama.studio. We may need to verify your identity before acting on a request.
8. Security
We protect your data with encryption in transit (HTTPS), access controls and hashed passwords. No system is completely secure; please use a strong, unique password and tell us right away if you suspect unauthorised access to your account.
9. Children
The Service is not intended for children. You must be at least 18 years old, or the age of majority where you live, to create an account. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy. If the changes are significant, we will tell you by email or in the Service before they take effect. The date at the top shows the latest version.
11. Contact
PT Redrama Inovasi Global
Infiniti Office, Menara Cakrawala, 12F Unit 05A
Jl. M.H. Thamrin, Kebon Sirih, Menteng
Central Jakarta 10340, Indonesia
support@shortdrama.studio