Privacy policy
Last updated: 23 October 2026
This policy explains what personal data ReelsMaker collects, why, who helps us process it and what rights you have under the EU General Data Protection Regulation (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD).
1. Who is responsible for your data
Bilge Dönmez, self-employed professional (autónomo) registered in Spain
NIF: [NIF] · Address: [ADDRESS]
Contact for privacy questions: support@reelsmaker.io
2. What data we collect and why
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Email address and password (stored encrypted) | To create your account, sign you in and send account emails | Contract, Art. 6(1)(b) |
| Photos, clips, audio, text and music you add | To build, preview and export your videos | Contract, Art. 6(1)(b) |
| Text and images you send to AI features | To write scripts, read text aloud, translate and generate Reel AI videos | Contract, Art. 6(1)(b) |
| Plan, credits and payment history | To give you the features you paid for | Contract, Art. 6(1)(b) |
| Purchase records we receive from Paddle (order and subscription ID, plan, amount, billing country) | Spanish tax and accounting law requires us to keep them | Legal obligation, Art. 6(1)(c) |
| IP address, browser details, error and request logs | To keep the service secure, stop abuse and fix errors | Legitimate interest, Art. 6(1)(f) |
We do not sell your data, we do not show ads and we do not use your content to train AI models. We do not make decisions about you based solely on automated processing.
3. Who processes your data for us
We use the following service providers. Each one processes data only on our instructions, under a data processing agreement.
| Provider | What it does | Data involved | Location |
|---|---|---|---|
| Vercel Inc. | Hosts the website and app | IP address, browser details, request logs | USA / EU |
| Supabase Inc. | User accounts and database | Email, encrypted password, plan, credits, project data | USA / EU |
| Cloudflare, Inc. (R2) | Stores files you upload and videos you create | Your photos, clips, audio and finished videos | USA / EU |
| Resend Inc. | Sends account emails (sign-up, password reset) | Email address, email content | EU (Ireland) / USA |
| Anthropic PBC | AI script writing | Text prompts and card text you send to the AI feature | USA |
| Groq, Inc. | AI script writing | Text prompts and card text you send to the AI feature | USA |
| Google LLC (Cloud Text-to-Speech) | AI Voice | The text to be read aloud | USA / EU |
| DeepL SE | Translation of subtitles and text | The text to be translated | Germany |
| Replicate, Inc. | Reel AI video generation | The image and prompt you send to Reel AI | USA |
| Pexels GmbH | Free stock photo and video library | Your search words (no account data) | Germany |
Payments: Paddle
Our order process is conducted by our online reseller Paddle.com Market Ltd. (United Kingdom). Paddle.com is the Merchant of Record for all our orders: it sells the plan or credit pack to you, takes the payment, issues the invoice, handles sales tax and processes refunds. For this, Paddle collects your name, email, billing country and address and payment details, and acts as an independent data controller under its own privacy policy. We never see or store your full card number. Paddle shares with us only what we need to activate your purchase: your email, billing country, order and subscription ID, plan, amount and payment status.
4. Transfers outside the EU
Some providers above are based in the United States. Where data leaves the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework (for certified companies) or by the European Commission's Standard Contractual Clauses. You can ask us for a copy of these safeguards at support@reelsmaker.io.
5. How long we keep your data
- Account data: while your account is open. When you delete your account, we delete your account data and files within 30 days, except what the law requires us to keep.
- AI videos and uploaded clips stored on our servers: while you are on Pro. On the Free plan, 30 days after you create them; after a Pro plan ends, 90 days after it ends (and at least 30 days after you create them). We email you at least 7 days before we delete anything.
- Reels in My Archive: stored only in your browser on your device, not on our servers. You control them; clearing your browser data removes them.
- Purchase records: 6 years, as required by Article 30 of the Spanish Commercial Code. Paddle keeps its own invoices and payment records under its privacy policy.
- Security and error logs: up to 90 days.
6. Your rights
You can ask us at any time to:
- see the personal data we hold about you (access);
- correct data that is wrong (rectification);
- delete your data (erasure);
- limit how we use it (restriction) or object to processing based on legitimate interest;
- receive your data in a portable format (portability).
Write to support@reelsmaker.io from the email address of your account. We reply within one month. If you are not happy with our answer, you can complain to the Spanish Data Protection Agency (AEPD) at www.aepd.es or to the data protection authority of your own country.
7. Cookies and local storage
ReelsMaker only uses storage that is strictly necessary for the service to work: keeping you signed in and remembering your plan on this device. We do not use advertising or tracking cookies, so we do not ask for cookie consent. If we ever add analytics, we will ask for your consent first and update this policy.
8. Age
You must be at least 14 years old to create an account, as set by Spanish law. Paid plans are for adults (18+) or require the consent of a parent or guardian.
9. Security
Data is sent over encrypted connections (HTTPS), passwords are stored encrypted, and access to the database is restricted per user.
10. Changes to this policy
If we make important changes, we will tell you by email or in the app before they take effect. The date at the top shows the latest version.