Privacy Policy

1. Data we collect

Data you provide

• Account data: email address, password (stored hashed by our auth provider), display name and avatar, and the sign-in method you use (email, Google, or GitHub).
• Content: prompts, text, images, audio, and video you upload or enter (“Inputs”), and the videos, images, audio, and text generated for you (“Outputs”), plus projects you save (e.g. Canvas and Ad Studio projects).
• Communications: messages you send to support.

Data collected automatically

• Usage data: features used, generations requested, models selected, credits charged and refunded, errors, and timestamps.
• Device & log data: IP address, browser type, operating system, referring URL, and pages visited.
• Cookies & local storage: strictly necessary cookies that keep you signed in and secure your session, and local storage that remembers editor state and preferences. We do not use third-party advertising cookies.

Payment data

Payments are processed by Stripe. Your card number and other payment credentials are entered directly into Stripe and are never stored on our servers. We receive limited payment metadata from Stripe, such as the purchase amount, credit pack, currency, payment status, a customer/session identifier, and billing email or country.

2. How we use data

• To provide the Service: create and secure your account, run generations, store your outputs and projects, and maintain your credit balance.
• To process purchases, issue automatic refunds for failed generations, and handle refund requests.
• To prevent fraud and abuse and enforce our Terms and Acceptable Use Policy, including automated and manual content safety checks.
• To troubleshoot, monitor performance, and improve the Service.
• To communicate with you about your account, transactions, security, and policy changes.
• To comply with legal obligations, including reporting illegal content to authorities where required.

Legal bases (EEA/UK users): performance of our contract with you; our legitimate interests in securing and improving the Service and preventing abuse; compliance with legal obligations; and your consent where we ask for it (you may withdraw it at any time).

We do not use your Inputs or Outputs to train our own AI models.

3. AI providers receive your prompts and inputs

To generate content, the prompts, reference images, audio, video, and other Inputs you submit are sent to the third-party AI provider that powers the feature you choose (listed below). Those providers process the data to return the Output to us and handle it under their own terms and data-processing commitments. Do not include sensitive personal information in prompts or uploads unless it is necessary.

4. Service providers (processors)

We share personal data only with providers that help us run the Service, under contracts that limit their use of it:

We may also disclose data if required by law or legal process, to protect the rights, safety, or property of our users or others, or as part of a merger, acquisition, or sale of assets (in which case this Policy will continue to apply to your data).

5. Retention

• Account data is kept while your account is active and deleted within 30 days after you ask us to delete your account, except as below.
• Inputs, Outputs, and projects are kept until you delete them or your account is deleted.
• Purchase and credit-transaction records are kept for as long as required for tax, accounting, and legal purposes (typically up to 7 years).
• Server logs are kept for a limited period for security and debugging.
• Content linked to suspected illegal activity may be preserved as required by law.

6. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, or California CCPA/CPRA), you may have the right to:

• Access the personal data we hold about you and receive a copy;
• Export your data in a portable format;
• Correct inaccurate data;
• Delete your account and personal data;
• Object to or restrict certain processing, and withdraw consent;
• Know the categories of data we collect and share, and not be discriminated against for exercising your rights.

To exercise any right, email support@templatereel.comfrom the address on your account. We may need to verify your identity and will respond within the time required by law (generally 30 days). You can also lodge a complaint with your local data-protection authority. We do not sell or “share” personal data for cross-context behavioral advertising as those terms are defined under California law.

7. International transfers

We and our providers may process data in the United States and other countries that may not have the same data-protection laws as yours. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or our providers’ equivalent transfer mechanisms.

8. Children

The Service is not directed to children and is only for users 18 or older (or the age of majority where they live). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

9. Security

We use industry-standard measures including encryption in transit (HTTPS/TLS), access controls, row-level security on our database, and reputable infrastructure providers. No system is completely secure, so we cannot guarantee absolute security. Please use a strong, unique password.

10. Changes to this Policy

We may update this Policy from time to time. We will post the new version here and update the “Last updated” date, and notify you of material changes by email or in the Service.

11. Contact

[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
Email: support@templatereel.com