Privacy policy

ReelsAudio is operated by ReelsAudio, Inc., a company registered in India. For any question about this policy or your data, write to [email protected] and we will respond within 30 days.

This policy covers the reelsaudio.com website, the ReelsAudio workspace and any content we publish to a connected social account on your behalf.

We collect as little as the product allows. There are three categories: what you give us, what the product generates for you, and what we infer from how the product is used.

Account information

Email address, display name, hashed password and workspace role. We never ask for a phone number or a payment card to use the free plan.

Beta requests

If you request beta access we store your email address, the time of the request and the invite status, so we can invite you once and avoid duplicate invitations. We do not sell or share this list.

Contact messages

The name, email address, topic and message you send through the contact form, kept so we can reply and so we have a record of what was asked.

Technical fields on submissions

A salted, truncated, non-reversible hash of your IP address, and your browser user-agent string. We use these only to rate-limit spam. The raw IP address is never stored.

Generated content

Scripts, voice preset settings, rendered episodes and the assets they use. This is required to show you your own work and is stored in your workspace.

Usage telemetry

Feature usage, error events and performance timings. Used to find breakage and to decide what to build next. IP addresses are truncated before storage.

Connected channels

OAuth tokens for TikTok, Instagram, YouTube and Snapchat, stored encrypted. We request publishing scope only, and we never read your inbox or DMs.

• No facial recognition, biometric data or voice recordings of you. The product exists so you do not have to appear.
• No contents of your social inbox, direct messages or private account data.
• No third-party advertising trackers or data brokers.
• No training of third-party models on your scripts or exports without an explicit, separate opt-in.

The narration voice library is generated. We do not collect recordings of your voice for cloning, and there is no voice-cloning feature in the product.

If you upload your own music or footage, you confirm you hold the rights to it. Uploaded assets stay in your workspace, are not shared with other users, and are deleted with your workspace.

• To operate the product: rendering, publishing on the schedule you set, and storing your work.
• To bill you on paid plans and issue refunds.
• To send service messages about your workspace, billing or a security incident.
• To send product updates. Every marketing email has a one-click unsubscribe.
• To detect abuse, including scraping the asset library or reselling rendered episodes.

Under GDPR and comparable regimes we rely on: performance of a contract for operating your workspace and subscriptions; legitimate interests for security telemetry and crash reporting; and consent for marketing email and for any non-essential cookie, which you can withdraw at any time.

We share the minimum required with the processors who run our infrastructure: cloud hosting, database, email delivery and error monitoring. Each is contractually limited to processing on our instructions.

We disclose data to authorities where legally required. We do not sell personal data, and we have never done so.

Database hosting

Form submissions are stored in a hosted SQLite database operated by Turso, currently in the Mumbai region (aws-ap-south-1). It receives the fields listed above and nothing else.

Cloud infrastructure

Hosting and storage. Data stays in the region you select.

Email delivery

Transactional and marketing email. They see your address only.

Error monitoring

Stack traces and performance data. No script content.

Payment processing

Card details go straight to the processor. We store only a token and the last four digits.

We run infrastructure in India, Ireland and the US. Where personal data leaves your region we rely on standard contractual clauses and encryption in transit and at rest.

Beta and contact submissions

Held until you ask us to delete them, or for 24 months after we last hear from you, whichever comes first. Unsubscribed invitees are deleted within 30 days.

Account and billing records

Kept for 7 years to meet tax and accounting obligations.

Your content and exports

Until you delete them, then removed from primary storage within 30 days and from backups within 90.

Security and error logs

90 days.

Marketing preferences

Until you unsubscribe, plus a suppression record so we do not email you again by accident.

Where you are in the GDPR, UK GDPR, CCPA or an equivalent regime, you can ask for a copy of your data, ask us to correct it, ask us to delete it, object to processing, or port it to another provider. Email [email protected] and we will action it within 30 days.

If you are in the EEA or UK and we cannot resolve a complaint directly, you may contact your local supervisory authority.

• Passwords hashed with a memory-hard algorithm. We never store or email passwords.
• Connected channel tokens encrypted at rest and never exposed in the client.
• Least-privilege access internally, with production access logged and reviewed.
• Third-party penetration test annually; report summaries published to beta users.

ReelsAudio is not for anyone under 16. We do not knowingly collect data from children, and if you believe we have, contact us and we will delete it.

If a change materially affects your rights we will email account holders at least 14 days before it takes effect and update the date at the top of this page. Continuing to use ReelsAudio after that means accepting the new version.