Privacy policy
Last updated
Who is responsible
[LEGAL ENTITY NAME], [REGISTERED ADDRESS], is responsible for the personal data described here. For privacy questions, email contact@reelroutine.app.
What we collect
- Your account. Email address, and a password we only ever store hashed. If you sign in with Google, we receive your email address and name.
- What you give us about your app. The store link or description you paste, and everything we read from that public listing: name, icon, screenshots, description, category, and reviews.
- What the product makes. Your brief, brand voice, hooks, scripts, captions, and rendered slides.
- Payment details. Handled by Stripe. We store a customer id, which plan you are on, and when your period renews. We never see your card number.
- Usage. Which steps of the product you reached and when, so we can tell where it is failing people. We do not record your screen and we do not send your generated content to our analytics tool.
- Errors. When something breaks, a stack trace with the workspace and post it happened in.
Why we use it
- To run the service you asked for, which is the contract between us.
- To take payment and keep billing records, which the law requires.
- To keep the service working and secure, and to fix what breaks, which is our legitimate interest.
- To email you about your account, your posts, and problems with either.
We do not sell your data, and we do not use your content to train AI models.
AI providers
To write a brief, hooks, and a script, we send the text of your app listing and the settings you chose to an AI provider. We send what the generation needs and nothing more: no email address, no payment details, no account identifiers. Our providers state that data sent through their APIs is not used to train their models.
Who else processes your data
These companies process data on our behalf, under contracts that limit them to doing so for us:
| Company | What for | Where |
|---|---|---|
| Supabase | Database, authentication, and file storage | European Union |
| Vercel | Application hosting and delivery | United States and global edge network |
| Stripe | Payments, subscriptions, and invoices | United States and European Union |
| OpenAI | Writing briefs, hooks, and scripts, and checking them for safety | United States |
| Anthropic | The same, as a fallback when OpenAI is unavailable | United States |
| Replicate | Generating images when no photo fits a slide | United States |
| Pexels | Licensed stock photography for slide backgrounds | United States |
| Amazon Web Services | Rendering slides | European Union (Frankfurt) |
| Inngest | Running generation jobs in the background | United States |
| Sentry | Error reporting, so failures can be fixed | United States |
| PostHog | Product analytics, without recording your content | United States |
Some of them are in the United States, so your data is transferred outside the European Economic Area. Those transfers rely on the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
- Your account and content: while your account exists.
- After you ask us to delete your account: gone within 30 days.
- Invoices and payment records: as long as tax law requires.
- Error reports: 90 days.
Cookies
We set cookies to keep you signed in. Those are necessary for the product to work and cannot be turned off while you are using it. If product analytics is enabled, it sets a cookie to recognise a returning visit. We use no advertising cookies and no third-party trackers.
Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, or object to us using it. Email contact@reelroutine.app and we will answer within 30 days.
If you think we have handled your data badly, you can complain to the data protection authority where you live.
Security
Data is encrypted in transit and at rest. Files are private and reachable only through short-lived signed links. Access to production data is limited to the people who need it. No system is perfect, and if there is a breach that affects you, we will tell you.
Changes
When this policy changes we update the date at the top, and we tell you before a change that matters takes effect.