Privacy Policy
This policy explains what data Reelipal collects, why, and the choices you have. The short version: we collect what is needed to run an AI content studio — your account, your content, your credit ledger — and nothing is sold to anyone.
01What we collect
- Account data — your email address and, if you sign in with Google, your name and avatar.
- Content data — prompts, briefs, reference images/videos you upload, and the media you generate. These are stored so your library works across devices.
- Billing data — your plan, credit balance and transaction history. Card details are handled entirely by Stripe and never touch our servers.
- Usage data — basic logs (timestamps, generation requests, errors) needed to operate, debug and protect the service.
02How we use it
We do not sell your personal data, and we do not use your prompts or generated content to train our own models.
- To run generations: your prompts and reference media are sent to the AI model providers that power the studio (e.g. fal.ai for images/video, ElevenLabs for voices) solely to produce your output.
- To operate your account: authentication, credit accounting, your creations library and project workspaces.
- To bill you: Stripe processes subscriptions and top-up purchases.
- To improve reliability: aggregate, non-identifying usage metrics and error logs.
03Where your data lives
Account records, credit ledgers and your media library are stored with our infrastructure providers (Supabase for the database and storage, Vercel for hosting). Generated media is stored in a storage bucket so it can be served to you quickly; treat generated-asset URLs as accessible to anyone you share them with.
04Third parties we share with
Each provider processes data under its own privacy policy and our agreements with them. We share the minimum needed for the feature to work.
- AI model providers (fal.ai, ElevenLabs, Sync) — receive the prompt/media needed to fulfil a generation request.
- Stripe — payment processing.
- Supabase & Vercel — database, storage and hosting.
- Google — only if you choose Google sign-in.
05Retention & deletion
Your content stays in your library until you delete it. Deleting a creation removes it from your library; backups and provider-side caches clear on their own schedules shortly after.
If you want your account and all associated data deleted, contact us at [email protected] and we will action it within 30 days, except for records we are legally required to keep (e.g. invoices).
06Cookies
We use only the cookies required to keep you signed in (Supabase session cookies). There is no third-party advertising or cross-site tracking.
07Your rights
Depending on where you live (e.g. GDPR in the EU, KVKK in Türkiye, CCPA in California), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email [email protected] to exercise any of these — we respond to all requests regardless of jurisdiction.
08Changes & contact
If this policy changes materially we will announce it on the site or by email; the “last updated” date above always reflects the current version.
Privacy questions? [email protected].