1. About this policy
ShoryNow ("ShoryNow", "we", "us", "our") is a group of companies that builds and runs digital products. This Privacy Policy applies to our group website (shorynow.com) and to our brands:
- ShoryNow CDN: file storage and content delivery for businesses, including the client portal (cdn.shorynow.com), the admin console (cdn-console.shorynow.com) and the ShoryNow CDN API.
- ShoryNow Shortify: a URL shortener with link analytics, including the client portal (shortify.shorynow.com), the short-link domain shorynow.link and customers' own custom domains.
- ShoryNow Status: a self-hosted status page and uptime monitor, distributed as a Docker image (shorynow/shorynow-status on Docker Hub) that customers run on their own servers.
- 360PeopleForce: HR, payroll and workforce management software (360peopleforce.com).
- SukoonZon: an online shopping platform (sukoonzon.com).
Where a brand shows you a more specific privacy notice, that notice applies together with this policy. If you have questions at any point, contact us at ali.mushtaq@shorynow.com.
2. Information we collect across the group
Information you give us
- Contact and enquiry details: your name, email address, company, phone number and the message you send through a contact form, email or social media.
- Account details: your name, email address, optional phone number and password when you create an account on one of our products. Passwords are stored only in hashed form.
- Support and feedback you send us.
Information collected automatically when you visit our websites
Our websites record basic visit statistics so we can understand how they are used and keep them secure. For each page view we record:
- the page visited, the referring page and the time of the visit;
- your IP address and the approximate location derived from it (country, region and city);
- your browser and device type (user agent), language, time zone and screen size, and whether cookies are enabled.
We use these statistics only for our own analytics and security. We do not use them to build advertising profiles and we do not sell them.
Cookies and local storage
We use only essential cookies, for example to keep you signed in securely, plus browser storage for preferences such as theme and language. We do not use advertising cookies or third-party tracking cookies on our websites.
3. Information specific to each brand
ShoryNow CDN
- Files our business clients upload, with their metadata: file name and path, bucket, size, content type, upload time and, where generated, a preview thumbnail. We do not inspect file contents except to create previews and operate the service.
- File access logs: the time, action (for example upload, download or delete), outcome, bucket, file path and the API key or user that made the request.
- API key records (name, scope, status and last use), usage counters for quotas, plan and billing records, and sign-in security data such as IP address and browser, used to protect accounts and show active sessions.
ShoryNow Shortify
- Links our customers create: the destination URL, the short link and its domain, any title or tags, and custom domains with their verification status.
- Click data from people who open a short link: the time of the click, the referring page, the approximate location derived from the IP address (country and city), and the browser, device and operating system derived from the user agent. We use this to redirect the visitor, filter out bots and show the link owner aggregated click analytics. Link owners see these statistics, not the visitor's full IP address.
- Account, plan, usage, billing and API key records, used to run the account, apply plan limits and protect it.
ShoryNow Status
ShoryNow Status runs entirely on the customer's own server. The monitors, health URLs, check history, incidents, branding and admin account are stored in the customer's own data volume, and the software does not send any of it to ShoryNow. The customer who runs it is responsible for that data and for its public status page. When you download the image from Docker Hub, Docker's own privacy policy applies to that download.
360PeopleForce
360PeopleForce is used by employers to manage their workforce. Employers (our customers) enter and control information about their employees, such as employment and profile details, organisation structure, attendance and timesheets, leave, requests and approvals, performance records and payroll-related data. We process this information on the employer's behalf and according to their instructions. If you are an employee, please direct requests about your HR records to your employer first; we will help them respond.
SukoonZon
- Account and profile details, delivery addresses and contact numbers.
- Orders, order history, returns, wish lists and product reviews you post.
- Payment information: payments are handled by our payment partners. We receive confirmation of payment and limited details such as the payment method type, not your full card number.
- Delivery information shared with delivery partners so they can bring your order to you.
- Customer support conversations.
4. How we use information
- To provide our products and services, including storing and delivering files, running HR workflows, and processing and delivering orders.
- To create and secure accounts, authenticate users and API requests, and prevent fraud and abuse.
- To measure usage, apply plan limits, bill customers and process payments.
- To reply to enquiries, provide support and send service messages about your account, orders, security or changes to our services.
- To understand how our websites and products are used and improve them.
- To keep backups so we can recover from failures.
- To comply with the law and enforce our terms.
We do not sell personal information. We do not use our business customers' files or HR data for advertising, and we do not use them to train artificial-intelligence models. We will only send marketing messages where the law allows, and you can unsubscribe at any time.
5. Google user data
ShoryNow CDN administrators can connect a Google account so the service can copy its storage backups to Google Drive as an off-site copy. Only ShoryNow administrators use this feature; customers and shoppers are never asked to connect a Google account.
- Data accessed: the Google Drive "drive.file" scope only, plus the connected account's email address. This lets the app see only the files and folder it created itself, never the rest of the Drive.
- How it is used: to create a backup folder, upload backup archives into it, list those archives and delete old ones when an administrator asks.
- How it is stored: the Google refresh token is stored encrypted on our servers and deleted when an administrator disconnects Google Drive.
- Sharing: Google user data is not sold, not shared with third parties, not used for advertising and not used to train AI models. People can read it only when needed to run backups, for security, or when the law requires.
ShoryNow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time in your Google Account under "Third-party apps and services".
7. International transfers
Our service providers may store or process information in countries other than yours. When we transfer information, we take steps to keep it protected as described in this policy and as required by applicable law.
8. How long we keep information
- Account information: while your account is active, and afterwards only as long as needed for legal, tax, billing or security reasons.
- Customer content (CDN files and 360PeopleForce records): until the customer deletes it or the contract ends, plus a limited period in backups.
- ShoryNow Shortify links and click data: while the link exists, with detailed click analytics kept for the period included in the link owner's plan, and aggregated totals after that.
- SukoonZon orders and invoices: as long as required for accounting, tax and consumer-protection rules.
- Website statistics, logs and enquiries: as long as needed for analytics, security, auditing and to deal with your request.
9. Our commitment: transparency and security
ShoryNow CDN, ShoryNow Shortify and ShoryNow Status are built so you can see what happens to your data and trust that it is kept safe. We commit to the following:
Transparency
- We tell you what we collect and why, in this policy, and we do not collect data for any purpose it does not describe.
- ShoryNow CDN keeps an audit trail of file activity (who uploaded, downloaded or deleted what, and when) that you can review in your account.
- ShoryNow Shortify shows link owners the click analytics we record for their links, so nothing is collected behind your back. We do not show link owners visitors' full IP addresses.
- ShoryNow Status runs on your own server, stores everything in your own data volume and does not send your monitors, history or incidents to ShoryNow. Its public page shows only the names, up/down history and incidents you choose to publish, never your monitor URLs or error messages.
- If a security incident affects your personal information, we will tell you without undue delay and as the law requires.
Security
- Encrypted connections (HTTPS) for our websites, portals and APIs.
- Each customer's data is kept separate, and only authorised accounts and API keys can reach it.
- Passwords are stored only as salted hashes; API keys and other secrets are encrypted or hashed, never stored in plain text.
- Private CDN files are shared only through short-lived signed links that expire.
- Sign-in protection such as rate limits on failed attempts, and session controls that let you see and end active sessions.
- ShoryNow Status runs as a non-root user in its container, blocks repeated wrong passwords and lets you keep the admin behind your own HTTPS proxy.
Your data stays yours
We do not sell your data, we do not use your files, links, click data or status data for advertising, and we do not use them to train artificial-intelligence models. You can export or delete your data at any time, as described in the "Your choices and rights" section.
10. Security
We use technical and organisational measures to protect information, including encrypted connections (HTTPS), access controls and per-customer data separation, hashed passwords, encryption of sensitive secrets, short-lived signed links and audit logging. No system is perfectly secure, so please keep your passwords and API keys private and tell us straight away if you suspect misuse.
11. Your choices and rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain uses, and to withdraw consent. You can update many details yourself in your account. For anything else, email ali.mushtaq@shorynow.com. We may need to verify your identity before acting on a request, and we will respond within the time the law requires.
If you are unhappy with how we handled your information, please contact us first so we can try to put it right. You may also have the right to complain to your local data-protection authority.
12. Children
Our services are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.
13. Changes to this policy
We may update this policy as our services change. We will publish the new version on this page with a new effective date and, for significant changes, notify account holders in advance.
14. Contact us
Email ali.mushtaq@shorynow.com, or use the contact form at shorynow.com/contact. Please say which brand your question is about so we can route it quickly.