ReelsDraft collects account details (email address and username), creator profile preferences, generated scripts, planner entries, analytics snapshots, and security/audit records. We do not request special-category personal data; do not include it in AI prompts or workspace content.

We process account and workspace data to perform our contract with you, maintain security, meet legal obligations, and pursue legitimate interests such as preventing abuse. We ask for your recorded agreement to this policy when an account is created. We do not use your workspace content for direct marketing without separate consent.

Our legal bases are: contract (providing the service), legitimate interest (security, abuse prevention), and legal obligation (retention, audit). Where required, we rely on explicit consent for optional processing such as direct marketing.

Prompts and creator inputs are sent to the AI provider selected for the service (currently OpenAI or Google) solely to generate requested outputs. Avoid submitting personal or confidential information that is unnecessary for generation. Provider processing, retention, and international transfers are governed by the applicable data-processing agreement and transfer safeguards.

We do not sell personal information. We use processors for hosting and profile storage (Supabase), authentication (Google), AI generation (OpenAI or Google), email delivery, and infrastructure. Data-processing agreements are in place with each provider. Where required, standard contractual clauses or equivalent safeguards govern international transfers.

We use authenticated API access, encryption in transit, access controls, rate limiting, audit logging, and production HTTPS settings. No system is perfectly secure; report suspected incidents through the privacy contact channel.

You can correct profile data, download a portable JSON export, and permanently delete your account from Settings. You may also request access, restriction, objection, or rectification through the privacy contact channel. We respond within applicable legal time limits and may verify identity before acting.

Account-linked workspace data is retained while your account is active. Deleting an account removes Django records and the associated Supabase profile. Completed AI jobs and audit records are automatically removed according to the configured retention period. Backups and legally required records may persist for a limited, documented restoration or compliance period.

We use essential browser storage for authentication state and your theme preference. These are necessary to provide the signed-in service and are not used for advertising. If optional analytics or marketing technologies are added, they must remain disabled until you have made a separate opt-in choice.

The service is not directed at children. Do not create an account or submit personal data if you are below the minimum age required to consent to data processing where you live.