Privacy Policy

Last Updated: November 20, 2025

Introduction

Welcome to Reelfolio ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video creation platform at reelfolio.com (the "Service").

Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

1.1 Personal Information You Provide

When you register for an account or use our Service, we collect the following personal information:

• Name: Your full name as provided through Google OAuth
• Email Address: Your email address for account identification and communication
• Profile Picture: Your profile image from your Google account
• Authentication Data: Session tokens and authentication credentials

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

• Session Information: Session IDs, tokens, and expiration timestamps
• Device Information: IP address, browser type, user agent, and device identifiers
• Usage Data: Features used, templates selected, number of images processed, and timestamps of actions
• Analytics Events: Anonymized usage statistics including template usage, render counts, and feature interactions

1.3 User-Generated Content

We collect and store content you upload or create using our Service:

• Uploaded Files: Images and videos you upload to create your video reels
• File Metadata: Filenames, file sizes, MIME types, upload timestamps, and storage paths
• Website URLs: URLs you provide for our screenshot capture feature
• Generated Videos: Temporary video files created through our rendering service
• Template Settings: Your customization preferences for video templates

1.4 Cookies and Tracking Technologies

We use the following cookies and similar technologies:

• Essential Cookies: Session cookies required for authentication and service functionality
• Preference Cookies: Browser localStorage to save your template settings and preferences
• No Advertising Cookies: We do not use third-party advertising or tracking cookies

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Service Provision

• Create and manage your user account
• Authenticate your identity and maintain session security
• Process and render your video reels
• Store and manage your uploaded content
• Capture website screenshots on your behalf
• Enable template customization and video creation features

2.2 Service Improvement

• Analyze usage patterns to improve our Service
• Track feature usage to prioritize development
• Monitor system performance and identify technical issues
• Develop new features and templates

2.3 Communication

• Send transactional notifications about your account
• Respond to your inquiries and support requests
• Notify you of important changes to our Service or policies

2.4 Legal and Security

• Comply with legal obligations and enforce our Terms of Service
• Protect against fraud, abuse, and security threats
• Resolve disputes and enforce our agreements

3. How We Share Your Information

3.1 Third-Party Service Providers

We share your information with trusted third-party service providers who assist us in operating our Service:

Google LLC

• Purpose: OAuth authentication and user identity verification
• Data Shared: Name, email address, profile picture
• Privacy Policy: https://policies.google.com/privacy

Polar.sh

• Purpose: Payment processing for lifetime access purchases
• Data Shared: Email address, user ID, purchase information, order details
• Privacy Policy: https://polar.sh/legal/privacy

Supabase Inc.

• Purpose: Database hosting and file storage
• Data Shared: All user data, uploaded files, session information
• Data Location: Cloud infrastructure (US/EU regions)
• Privacy Policy: https://supabase.com/privacy

screen-shot.xyz API

• Purpose: Website screenshot capture
• Data Shared: URLs you provide, viewport preferences, IP address
• Privacy Policy: https://screen-shot.xyz (independent third-party service)

Railway Corp.

• Purpose: Video rendering service hosting
• Data Shared: Template selections, image URLs, rendering settings
• Privacy Policy: https://railway.app/legal/privacy

3.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Court orders, subpoenas, or legal processes
• Requests from government authorities or law enforcement
• Protection of our rights, property, or safety
• Investigation of fraud, security issues, or Terms of Service violations

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity, subject to this Privacy Policy.

3.4 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Data Retention

4.1 Active Accounts

We retain your personal information and user-generated content for as long as your account remains active or as needed to provide you with our Service.

4.2 Account Deletion

When you delete your account:

• Your personal information will be permanently deleted within 90 days
• Your uploaded files will be removed from our storage within 90 days
• Session data will be immediately invalidated
• Some anonymized analytics data may be retained for statistical purposes

4.3 Legal Retention

We may retain certain information for longer periods when required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes.

4.4 Rendered Videos

Videos created through our rendering service are temporary and not permanently stored on our servers. They are made available for download only.

5. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

5.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal information
• Restriction: Request restriction of processing under certain circumstances

5.2 GDPR Rights (European Economic Area Users)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority
• Right to object to automated decision-making and profiling
• Right to be informed about international data transfers

Legal Basis for Processing: We process your data based on:

• Contract Performance: To provide our Service to you
• Consent: For optional features and communications
• Legitimate Interests: For analytics, security, and service improvement

Data Controller: Reelfolio acts as the data controller for your personal information.

5.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell your personal information, so no opt-out is necessary
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

Categories of Personal Information Collected: Identifiers, commercial information, internet activity, inferences.

Business Purpose for Collection: As described in Section 2 of this Privacy Policy.

5.4 Exercising Your Rights

To exercise any of these rights, please contact us at the contact information provided in Section 11. We will respond to your request within 30 days (or as required by applicable law).

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption: All data transmission uses HTTPS/TLS encryption
• Authentication: Secure OAuth 2.0 authentication via Google
• Access Controls: Role-based access to user data and systems
• Session Security: Secure session management with token-based authentication
• Infrastructure Security: Cloud hosting with industry-standard security practices
• Regular Monitoring: Ongoing security monitoring and updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. International Data Transfers

7.1 Cross-Border Transfers

Our Service is operated from various locations, and your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

7.2 EEA Data Transfers

For users in the European Economic Area (EEA), we ensure appropriate safeguards are in place when transferring your data internationally:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with third-party service providers
• Adequacy decisions where applicable

7.3 Your Consent

By using our Service, you consent to the transfer of your information to countries outside your country of residence, including the United States.

8. Children's Privacy

Our Service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13 years of age.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately. If we discover that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

9. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to third-party services.

We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services before providing them with your personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Notice of Changes: We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this Privacy Policy
• Posting a notice on our Service
• Sending an email notification (for significant changes)

Continued Use: Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Reelfolio Email: support@reelfolio.io Website: https://reelfolio.com

For GDPR-related inquiries (EEA users): support@reelfolio.io For CCPA-related inquiries (California users): support@reelfolio.io

We will respond to your inquiry within 30 days or as required by applicable law.

Summary of Key Points

• What We Collect: Name, email, profile picture (via Google), uploaded files, usage data
• How We Use It: Provide service, authenticate users, process videos, improve features
• Who We Share With: Google (auth), Polar.sh (payments), Supabase (hosting), Railway (rendering), screen-shot.xyz (screenshots)
• Your Rights: Access, delete, correct, export your data
• Cookies: Session cookies only (no advertising/tracking cookies)
• Data Retention: 90 days after account deletion
• Age Requirement: Must be 13 years or older
• Contact: support@reelfolio.io

This Privacy Policy is effective as of the "Last Updated" date above.