Privacy Policy
1. Who we are
Reelscraft ("we", "us", "our") operates the website at reelscraft.app. This policy explains what personal data we collect, why we collect it, and your rights regarding that data.
Contact: hi@reelscraft.app
2. Data we collect
Account data — when you sign in we collect your email address. We use Supabase for authentication; passwords are never stored by us.
Usage data — URLs you submit for profiling, captions you select, and reel recipes you generate. This data is necessary to provide the Service.
Payment data — purchases are processed by Stripe. We receive a transaction record (amount, pack slug) but never see or store your card details.
Technical data — standard server logs (IP address, browser type, pages visited, timestamps). These are retained for up to 90 days for security and debugging purposes.
3. How we use your data
- To authenticate you and manage your account
- To generate brand profiles and reel content from URLs you submit
- To process payments and maintain your credit balance
- To send transactional emails (magic links, receipts)
- To debug issues and improve the Service
We do not sell your data to third parties. We do not use your submitted URLs or brand content to train AI models beyond the immediate request context.
4. Legal basis (GDPR)
Where GDPR applies, we process your data on the following bases:
- Contract — processing necessary to provide the Service you signed up for
- Legitimate interests — security logging, fraud prevention, product improvement
- Legal obligation — where applicable law requires us to retain records
5. Third-party services
We share data with the following sub-processors:
- Supabase — authentication, database (EU region)
- Vercel — hosting and edge functions (EU region available)
- Stripe — payment processing
- Anthropic — AI inference for brand profiling and caption generation
- PostHog — product analytics and event tracking (EU region, data stored on EU servers at eu.posthog.com). Only activated if you accept analytics cookies. PostHog does not sell your data. See posthog.com/privacy.
- Pexels / Giphy / Myinstants — asset APIs (no personal data sent)
6. Cookies & storage
We use browser localStorage to persist your session and UI preferences. We do not use third-party advertising cookies.
Analytics cookies (optional): If you click "Accept all" on our cookie banner, we activate PostHog analytics, which sets a first-party cookie and localStorage entry to track anonymous usage events (page views, feature interactions). This data is processed on EU servers. If you click "Necessary only", no analytics data is collected. You can change your preference at any time by clearing your browser's localStorage for this site.
Legal basis for analytics: Consent (GDPR Art. 6(1)(a)). Analytics are only activated after you explicitly accept.
7. Data retention
Account and usage data is retained for as long as your account is active, plus 12 months after deletion to satisfy legal and dispute-resolution requirements. Server logs are deleted after 90 days. You may request earlier deletion — see Section 9.
8. Security
Data is encrypted in transit (TLS) and at rest. Authentication uses passwordless magic links or OAuth — we never store passwords. Access to production data is restricted to authorised personnel only.
9. Your rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Restrict or object to processing
- Data portability
To exercise any of these rights, email hi@reelscraft.app. We will respond within 30 days.
10. Children
The Service is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or in-app notice. The "Last updated" date at the top of this page reflects the most recent revision.
12. Contact
Privacy questions or requests: hi@reelscraft.app