Privacy Policy
This policy explains what data Reelipal collects, why, and the choices you have. The short version: we collect what is needed to run an AI content studio — your account, your content, your credit ledger — and nothing is sold to anyone.
01What we collect
- Account data — your email address and, if you sign in with Google, your name and avatar.
- Content data — prompts, briefs, reference images/videos you upload, and the media you generate. These are stored so your library works across devices.
- Billing data — your plan, credit balance and transaction history. Card details are handled entirely by Stripe and never touch our servers.
- Usage data — basic logs (timestamps, generation requests, errors) needed to operate, debug and protect the service.
02How we use it
We do not sell your personal data, and we do not use your prompts or generated content to train our own models.
- To run generations: your prompts and reference media are sent to the AI model providers that power the studio (e.g. fal.ai for images/video, ElevenLabs for voices) solely to produce your output.
- To operate your account: authentication, credit accounting, your creations library and project workspaces.
- To bill you: Stripe processes subscriptions and top-up purchases.
- To improve reliability: aggregate, non-identifying usage metrics and error logs.
03Where your data lives
Account records, credit ledgers and your media library are stored with our infrastructure providers (Supabase for the database and storage, Vercel for hosting). Generated media is stored in a storage bucket so it can be served to you quickly; treat generated-asset URLs as accessible to anyone you share them with.
04Third parties we share with
Each provider processes data under its own privacy policy and our agreements with them. We share the minimum needed for the feature to work.
- AI model providers (fal.ai, ElevenLabs, Sync) — receive the prompt/media needed to fulfil a generation request.
- Stripe — payment processing.
- Supabase & Vercel — database, storage and hosting.
- Google — only if you choose Google sign-in.
05Connected social accounts
Reelipal can publish your finished videos to your own social accounts (YouTube, TikTok, Instagram) when you explicitly connect them. Connecting grants us only the permissions needed to upload the content you choose — we never read your messages or feed, and we never post anything you did not ask us to publish.
Reelipal's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
If you connect a YouTube channel, Reelipal uses YouTube API Services to upload the videos you choose to publish. By connecting a YouTube account you also agree to the YouTube Terms of Service (youtube.com/t/terms); how Google handles your data is described in the Google Privacy Policy (policies.google.com/privacy).
If you connect a TikTok account, we access it only through TikTok's official developer APIs (Login Kit and the Content Posting API) and use that access solely to publish the videos you choose to post.
Access tokens for connected accounts are stored securely and deleted when you disconnect the account or delete your Reelipal account. You can also revoke Reelipal's access at any time from the platform's own security settings — see reelipal.com/data-deletion for step-by-step instructions. For Google/YouTube connections, this is your Google security settings page: myaccount.google.com/permissions.
06Retention & deletion
Your content stays in your library until you delete it. Deleting a creation removes it from your library; backups and provider-side caches clear on their own schedules shortly after.
If you want your account and all associated data deleted, contact us at [email protected] and we will action it within 30 days, except for records we are legally required to keep (e.g. invoices). Step-by-step instructions live at reelipal.com/data-deletion.
07Cookies
We use only the cookies required to keep you signed in (Supabase session cookies). There is no third-party advertising or cross-site tracking.
08Your rights
Depending on where you live (e.g. GDPR in the EU, KVKK in Türkiye, CCPA in California), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email [email protected] to exercise any of these — we respond to all requests regardless of jurisdiction.
09Changes & contact
If this policy changes materially we will announce it on the site or by email; the “last updated” date above always reflects the current version.
Privacy questions? [email protected].