Privacy Policy

iReelz ("we", "our", "us") operates the iReelz platform at ireelz.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service.

1. Data Controller

iReelz is the data controller responsible for your personal data. For questions regarding this policy or to exercise your data rights, contact us at support@ireelz.com.

2. Information We Collect

2.1 Information you provide

• •Account registration data (name, email address, password)
• •Profile information and preferences
• •Content inputs (topics, brand briefs, captions you generate)
• •Payment and billing information (processed securely by Paddle, our Merchant of Record)
• •Communications with our support team

2.2 Information collected automatically

• •Device and browser information (IP address, browser type, operating system)
• •Usage data (pages visited, features used, generation counts, timestamps)
• •Cookies and similar tracking technologies (see Section 7)
• •Analytics data collected via Vercel Analytics

2.3 YouTube data

When you use our trend analysis features, we retrieve publicly available YouTube video metadata including titles, view counts, like counts, comment counts, engagement rates, and channel information via the YouTube API Services. We do not access private YouTube account data or require YouTube authentication.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• •Contract performance: To provide the Service, process subscriptions, and deliver generated content.
• •Legitimate interest: To improve the Service, prevent fraud, and ensure security.
• •Consent: For marketing communications and optional analytics cookies.
• •Legal obligation: To comply with applicable laws and regulations.

4. How We Use Your Information

• •Provide, operate, and maintain the Service including caption generation, character voices, and trend analysis
• •Process your subscription payments through Paddle
• •Track usage against your plan limits and display usage history
• •Send service-related notifications (account confirmations, limit alerts, security notices)
• •Analyse aggregated usage patterns to improve features and performance
• •Detect, prevent, and address technical issues, fraud, and abuse
• •Process YouTube video data strictly for generating trend insights and performance analysis

5. Third-Party Service Providers

We share data with the following categories of providers, each bound by their own privacy policies and data processing agreements:

We do not sell your personal information to third parties. We do not share YouTube data with advertisers or unrelated external parties.

6. YouTube API Services

iReelz uses YouTube API Services to retrieve publicly available video and channel data. By using features that access YouTube data, you acknowledge the following:

• •Your use is subject to the YouTube Terms of Service.
• •Google's data practices are governed by the Google Privacy Policy.
• •You may revoke access to your YouTube data at any time via Google Account Connections.
• •YouTube data retrieved for trend analysis is stored in your account history for the duration of your plan's retention period (24 hours for free accounts, indefinitely for paid accounts).
• •You may request deletion of any YouTube-related data by contacting support@ireelz.com.

7. Cookies and Tracking

We use the following types of cookies:

• •Essential cookies: Required for authentication and core functionality. Cannot be disabled.
• •Analytics cookies: Help us understand usage patterns via Vercel Analytics. No personally identifiable information is collected.

We do not use advertising or retargeting cookies. You can manage cookie preferences through your browser settings.

8. Data Retention

• •Account data: Retained for as long as your account is active, plus 30 days after deletion to allow for recovery.
• •Generation history: Free plan history is automatically deleted after 24 hours. Paid plan history is retained until you delete it or close your account.
• •Usage logs: Aggregated usage counts are retained for billing and limit enforcement. Detailed logs are purged after 90 days.
• •Payment data: Stored and managed by Paddle in accordance with PCI DSS requirements. We do not store credit card numbers.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• •TLS encryption for all data in transit
• •Encryption at rest for database storage (via Supabase)
• •Row-level security policies restricting data access to authorised users
• •Access controls limiting personnel access to personal data

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. International Data Transfers

Your data may be processed in countries outside your jurisdiction, including the United States, where our service providers (Supabase, OpenAI, Paddle, Cloudflare) operate. These transfers are protected by appropriate safeguards including Standard Contractual Clauses and the service providers' own compliance frameworks.

11. Your Rights

Under GDPR (EEA residents)

• •Access: Request a copy of the personal data we hold about you.
• •Rectification: Request correction of inaccurate or incomplete data.
• •Erasure: Request deletion of your personal data.
• •Portability: Request your data in a structured, machine-readable format.
• •Restriction: Request restriction of processing in certain circumstances.
• •Objection: Object to processing based on legitimate interest.
• •Complaint: Lodge a complaint with your local data protection authority.

Under CCPA (California residents)

• •Right to know what personal information is collected and how it is used.
• •Right to delete personal information we hold.
• •Right to opt-out of the sale of personal information. We do not sell personal information.
• •Right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at support@ireelz.com. We will respond within 30 days.

12. Children's Privacy

The Service is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@ireelz.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification at least 14 days before taking effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy. Previous versions are available upon request.