Privacy policy
Last updated 2026-10-13
Reeloop (https://reeloop.video) is operated by Logiciel Candy Inc ("we", "us"), the controller of your personal data. Reeloop turns a topic into a narrated vertical video and, if you choose, posts it to the social accounts you connect. This policy explains what we collect, why, who processes it, how long we keep it, and how to delete it.
1. Information we collect
We collect only what the product needs to work.
- Account: your email address and sign-in credentials (handled by our authentication provider; we never see your password in plain text).
- Content you create: topics, scripts, style and voice choices, and the videos, voiceovers, captions, and thumbnails we generate for you.
- Connected social accounts: the platform account id, display name, granted permissions, and the access and refresh tokens the platform issues. Tokens are encrypted (AES-256-GCM) before storage and are never shown back to you or anyone else.
- Posting records: which video was posted to which account, when, and the post id or error the platform returned.
- Billing: your credit balance and purchase history. Card details are handled by our payment processor and never reach our servers.
- Technical data: request ids, timestamps, IP address, browser type, and error codes, used to run and secure the service. We do not log your scripts, prompts, or tokens.
2. How we use your information
To create your account and sign you in; generate your videos; post them to the accounts and on the schedule you choose; show you their status; charge and refund credits; send service emails (for example "your video is ready for review"); prevent abuse; and meet legal obligations.
We do not sell or rent your personal information, and we do not use it for advertising.
3. Legal bases (EEA, UK, Switzerland)
We process personal data to perform our contract with you (providing the service), for our legitimate interests (security, fraud prevention, improving reliability), to comply with legal obligations, and with your consent where required (for example when you connect a social account, which you can withdraw at any time).
4. AI processing and model training
Your topics and scripts are sent to AI providers (listed below) to write scripts, generate voices, and create images and video clips. These providers process the content only to return the result to us.
We do not use your content, or any data from your connected accounts, to train AI models, and we do not permit our providers to do so where their terms allow us to choose.
5. YouTube API Services
Reeloop uses YouTube API Services to upload the videos you create to the YouTube channel you connect. By connecting YouTube you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy).
With your permission we access your channel id and title (to show which channel is connected) and the YouTube upload scope (youtube.upload) to publish videos. We do not read your existing videos, comments, subscribers, or analytics, and we do not share YouTube data with anyone except as needed to publish your videos.
We store the connected channel id, title, and encrypted tokens. Channel information is refreshed whenever we post on your behalf; data we have not been able to refresh for 30 days is deleted.
You can revoke Reeloop's access at any time from your Google security settings (https://myaccount.google.com/connections) or by disconnecting the channel in Settings. When access is revoked or the account is disconnected, we delete its stored tokens and channel data.
Reeloop's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
6. TikTok and Instagram
When you connect TikTok we receive your basic profile (open id and display name) and permission to upload and publish videos; when you connect Instagram (a Business or Creator account) we receive your account id and username and permission to publish content. We use these only to post the videos you approve and to show which account is connected.
You can revoke access in TikTok (Settings → Security → Manage app permissions) or Instagram (Settings → Apps and websites), or by disconnecting the account in Settings. Disconnecting deletes the stored tokens.
7. Who we share data with
We share data only with service providers that process it on our behalf, each for the purpose listed:
- Supabase: authentication and our database.
- Google Cloud: script writing and image/video generation (Vertex AI, Gemini), text-to-speech, file storage, and hosting.
- OpenRouter: access to some video-generation models.
- Resend: transactional email.
- Stripe: payments (when you buy credits or a plan).
- Vercel: hosting of this website.
- YouTube, TikTok, and Instagram: only when you connect an account and a post is published.
8. Other disclosures
We may disclose information if required by law or valid legal process, to protect the rights, property, or safety of our users or others, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to your information).
9. Cookies and local storage
We use only what is needed to keep you signed in and remember your session (browser storage set by our authentication provider). We do not use advertising cookies or third-party tracking. If we add analytics later, we will update this policy and ask for consent where the law requires.
10. Retention
We keep your account and videos while your account is active. Disconnecting a social account deletes its tokens immediately. When you delete your account, we delete your videos, scripts, tokens, and posting records within 30 days, except billing records we must keep for tax and accounting. Backups roll off within a further 30 days.
Videos already published to a platform stay there until you remove them on that platform.
11. Security
Data is encrypted in transit (HTTPS). Platform tokens are additionally encrypted at rest. Generated files are private and shared only through short-lived signed links. Access to production systems is limited to the people who operate the service.
12. International transfers
Our providers may process data in the United States and other countries. Where the law requires, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
13. Your rights
Depending on where you live (including under the GDPR and California's CCPA/CPRA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to withdraw consent. We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email support@reeloop.video from your account email; we respond within 30 days. You may also complain to your local data-protection authority.
14. Children
Reeloop is not intended for anyone under 13 (or the minimum age in your country, 16 in parts of the EU), and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
15. Changes and contact
If we change this policy in a way that matters, we will update the date above and tell you by email or in the app before the change takes effect.
Questions or requests: support@reeloop.video.