Privacy Policy

Reelsomat (“we”, “us”) is an online service for making and publishing AI-assisted videos. We are the controller of the personal data described here, meaning we decide how and why it is used. You can reach us about anything privacy-related at hello@reelsomat.com.

This policy covers the Reelsomat website, dashboard, mobile apps and API. It should be read with our Terms of Service.

• Account details: name, email address, password (stored hashed) or the Google/Apple account you sign in with, plan and settings.
• Connected accounts: for YouTube and Instagram, OAuth access and refresh tokens, channel or account IDs and names, and statistics for videos we published.
• What you create: channel settings, topics, prompts, scripts, storyboards, looks, captions, titles, descriptions, and the videos, images, audio and thumbnails generated for you.
• Uploads: files you add to My media, long recordings for Long video → Shorts, logos, custom sets, and your own voiceovers.
• Face data: photos or short clips you upload to make a character from a real person, plus the record of who confirmed consent and when.
• Voice data: voice recordings you provide for voice cloning and the cloned voice made from them.
• Payments: your plan, billing history and the payment status Stripe sends us. Stripe collects your card details. We never see or store full card numbers.
• Usage and device data: which features you use, allowances consumed, generation logs and errors, IP address, browser and device type, and (in the mobile app) a push-notification token if you allow notifications.
• Email engagement: whether our emails were delivered, opened or clicked, and your email preferences.
• Support: what you tell us when you contact us.

We use the performance of videos we published (views, likes, comments counts) to improve suggestions for your own channel. We don't use your data for advertising and we don't sell or rent it.

Faces and voices are sensitive, so we treat them with extra care:

• Only for what you asked. A photo or clip is used only to create the character you requested (for example a cut-out, an idle loop or lip-synced takes) and to render your videos. A voice sample is used only to create your cloned voice, which is then used only for your videos.
• Not used to identify anyone. We don't use faces or voices to recognise or identify people and we don't build identity databases. Our automated safety checks look at things like whether an image contains exactly one clear face, may show a minor, contains nudity, or appears to show a well-known public figure, and then keep only the outcome. The consent video check only compares the consent video with the photo or clip you gave us for that character.
• Consent recorded. Before we accept a photo or clip, you confirm it shows you or someone who gave permission. We store who confirmed and when. To use a real face as it is (not a stylised avatar), the person shown also records a short consent video reading a consent sentence. We check it once, automatically, to confirm a live person, the same face as the photo or clip, and the sentence; we keep it privately with the character as a record of consent, use it for nothing else, and delete it when you delete the character.
• Private to you. Character media is stored privately in your account and is not visible to other users.
• Delete anytime. Deleting a character deletes its photo or clip, and deleting your cloned voice removes it from ElevenLabs. Deleting your account removes all of them (see retention).
• Who processes it. Face media is processed by Google Cloud (safety and consent video checks, and storage) and Replicate (cut-outs, idle loops and lip sync). Voice samples are processed by ElevenLabs.

Where face or voice data counts as biometric or other special category data under the law that applies to you, we process it on the basis of your explicit consent, which you can withdraw at any time by deleting the character or voice.

We do not use your uploads, prompts, scripts, faces, voices or videos to train, fine-tune or develop AI models, and we don't allow our providers to do so with data we send them where their terms give us that choice. Our AI providers process your data to return results to us under their business or API terms.

Reelsomat uses YouTube API Services to upload videos, read performance statistics, and manage playlists for your video series. We request the following permissions:

• youtube.upload: upload generated videos and set custom thumbnails on your behalf. Uploads are either user-triggered on demand or run on a schedule you explicitly configured and can pause or cancel anytime.
• youtube.readonly: read video statistics (view count, like count, comment count) for videos Reelsomat has uploaded. We only query video IDs our platform created. No other channel data is accessed.
• youtube: manage the videos and playlists Reelsomat creates: set a video Reelsomat uploaded to private or delete it when you unpublish or remove it in Reelsomat; and, when you start a series (e.g. “90 Days of Bhagavad Gita”), create one playlist and add each episode to it as it publishes. We only act on video and playlist IDs our platform created, and never access, modify, or delete other channel content.

We do not access, modify, or delete any existing content on your channel that was not created by Reelsomat. We do not read or post comments. We do not access your subscribers.

When we upload a video, we also set YouTube's “altered or synthetic content” disclosure for videos that contain realistic AI-generated people or footage.

By connecting your YouTube account, you agree to the YouTube Terms of Service. Google's Privacy Policy is available at policies.google.com/privacy.

You can revoke Reelsomat's access to your Google account at any time via Google Security Settings.

Reelsomat's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not use it to train AI models.

Reelsomat uses the Instagram Graph API to publish Reels to your Instagram Business or Creator account. By connecting your Instagram account via Facebook OAuth, you grant us the following permissions: instagram_basic (read profile info), instagram_content_publish (publish Reels), and pages_read_engagement (access linked Facebook Page).

By connecting Instagram, you agree to the Instagram Terms of Use and Meta Privacy Policy.

You can revoke Reelsomat's access at any time via Facebook Business Integrations Settings.

We share personal data only with providers that help us run Reelsomat (acting on our instructions), with the platforms you connect when you publish, and where the law requires it. Our current providers:

We may also share data with professional advisers, with authorities when legally required or to protect people from harm, and with a buyer or successor if the service is transferred (we would tell you first). We update this list when our providers change.

Our main database is in Germany and our file storage and video processing run in Belgium. Some providers process data in other countries, including the USA and India. When personal data leaves the UK or the European Economic Area, we rely on adequacy decisions (such as the EU–US and UK–US data frameworks, where the provider is certified) or on standard contractual clauses (with the UK addendum or the UK International Data Transfer Agreement where needed), plus additional safeguards where appropriate. You can ask us for more detail.

Deleting your account

You can delete your account in Settings, or email hello@reelsomat.com. Your login, profile, channels and video records are removed from our database straight away. Your remaining stored files (such as uploads and rendered videos) and copies held by our providers (such as a cloned voice) are deleted within 30 days of your request, and backups age out within a further 30 days. Email hello@reelsomat.com if you want this done sooner or would like confirmation once it's complete. We may keep limited records where the law requires it or to deal with abuse, fraud or legal claims.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate data;
• delete your data;
• restrict or object to how we use it, including objecting to marketing at any time;
• receive your data in a portable format;
• withdraw consent (for example for face or voice data) at any time, without affecting earlier processing; and
• not be treated differently for exercising your rights.

These include rights under the UK GDPR, the EU GDPR and US state privacy laws such as the California Consumer Privacy Act. We don't sell personal data or share it for cross-context behavioural advertising.

To use your rights, email hello@reelsomat.com. We may need to confirm your identity, and we will reply within the time the law requires (usually one month). You can also complain to your local data-protection authority, for example the Information Commissioner's Office (ICO) in the UK or the supervisory authority in your EU country. We'd appreciate the chance to help first.

Reelsomat is not for anyone under 18 and we don't knowingly collect their data. We don't allow photos, clips or voices of minors to be used for characters or cloned voices. If you believe a child has given us personal data, email hello@reelsomat.com and we will delete it.

We protect data with encryption in transit (HTTPS), encryption at rest on our storage and backups, access controls that keep each user's data to their own account, private storage with short-lived signed links for media, hashed API keys, and restricted administrative access. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

• Essential cookies: to keep you signed in and secure your session. The service doesn't work without them.
• Local storage: to remember small preferences on your device, such as dismissed banners, sound settings and the last options you chose.
• Performance measurement: Vercel Speed Insights measures page-load performance. It does not use cookies and does not track you across sites.

We don't use advertising cookies or third-party tracking pixels. Our emails contain links with campaign tags and may record opens and clicks, which helps us see whether emails are useful. You can turn product emails off in Settings or with the unsubscribe link.

We will update this policy when our practices or providers change. If a change is significant, we will tell you by email or in the dashboard before it takes effect. The date at the top shows the latest version.

For privacy questions or requests, email hello@reelsomat.com.