Privacy Policy - ReelRecall | Your Data Protection Rights

Introduction

ReelRecall ("we," "us," or "our") operates the website reelrecall.ai and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

1. Information We Collect

1.1 Information You Provide to Us

We collect information you provide directly to us, including:

Account Information: Email address, username, password (encrypted), and profile details when you create an account.
Video Content: URLs of videos you save, video metadata (title, description, platform), and transcriptions generated by our AI.
Payment Information: Billing details processed securely through Stripe. We do not store your credit card information on our servers.
Communication Data: Messages you send to our support team, feedback, and survey responses.

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

Usage Data: Features you use, pages viewed, time spent on the Service, search queries, and interaction with video content.
Device Information: IP address, browser type, operating system, device identifiers, and general location data (city/country level).
Cookies and Tracking: We use cookies, web beacons, and similar technologies to enhance your experience. See Section 7 for cookie details.
Log Data: Server logs including error reports, API requests, and performance metrics.

1.3 Information from Third Parties

Social Media Platforms: When you connect your TikTok, Instagram, or YouTube account, we receive public video URLs you authorize us to access. We do not receive your social media passwords.
Analytics Providers: Data from Supabase (database), Vercel (hosting), and analytics tools to improve our Service.

1.4 ReelRecall Chrome Extension

The ReelRecall Chrome Extension allows you to save videos directly from supported platforms. This section details how the extension collects, uses, and protects your data.

Extension Permissions

The extension requests the following permissions, each necessary for its core functionality:

storage: Store your authentication tokens and preferences locally in your browser. This data never leaves your device except for authentication verification.
activeTab: Detect video content on the currently active tab when you click the save button. Only accessed when you actively interact with the extension.
tabs: Identify which supported platform you're browsing (YouTube, TikTok, Instagram, Twitter/X, Facebook) to show the save button on video pages.
notifications: Send you alerts when a video has been successfully saved or if an error occurs during processing.
alarms: Periodically refresh your authentication tokens to maintain your logged-in session securely.
host_permissions: Access to supported video platforms (youtube.com, tiktok.com, instagram.com, twitter.com, x.com, facebook.com) and reelrecall.ai to detect videos and communicate with our API.

Data Collected by the Extension

Video URLs: When you click "Save," the extension captures the URL of the video you want to save. This URL is transmitted to our servers for processing.
Platform Information: The platform (YouTube, TikTok, etc.) and video type (short, reel, video) for categorization purposes.
Authentication Tokens: Stored locally to keep you logged in. Tokens are encrypted and refreshed periodically for security.

Data NOT Collected by the Extension

Browsing History: We do NOT track or collect your general browsing activity. The extension only activates on supported video platforms.
Form Data or Passwords: We do NOT access or collect any form inputs, login credentials, or passwords from any website.
Personal Communications: We do NOT access messages, comments, or any personal communications on social media platforms.

Data Transmission and Security

All data transmitted by the extension uses HTTPS encryption. Video URLs are sent securely to our API at reelrecall.ai. Authentication uses industry-standard OAuth 2.0 via Supabase Auth. No data is transmitted to third parties directly by the extension.

Limited Use Disclosure

Chrome Web Store Limited Use Compliance: The ReelRecall extension's use of information received from Google APIs will adhere to Chrome Web Store's Limited Use Requirements, including the Limited Use restrictions. We only use data to provide and improve the extension's single purpose: saving and organizing videos. We do not use data for advertising, sell data to third parties, or use data for purposes unrelated to the extension's core video-saving functionality.

2. How We Use Your Information

We use your information for the following purposes:

Provide the Service: Transcribe videos, enable search, organize your video library, and deliver core features.
Account Management: Create and maintain your account, authenticate access, and process payments.
Improve the Service: Analyze usage patterns, fix bugs, develop new features, and optimize performance.
Communication: Send service updates, security alerts, respond to support requests, and (with your consent) send promotional emails.
Security and Fraud Prevention: Detect and prevent unauthorized access, abuse, and fraudulent activity.
Legal Compliance: Comply with legal obligations, respond to legal requests, and enforce our Terms of Service.

Legal Basis for Processing (EU Users): We process your data based on:

Contractual Necessity: To provide the Service you've signed up for.
Legitimate Interests: Improve the Service, prevent fraud, and ensure security.
Consent: For marketing communications (you can opt out anytime).
Legal Obligations: To comply with laws and regulations.

3. Data Security

We implement industry-standard security measures to protect your information:

Secure Infrastructure: Hosted on Vercel with industry-standard security. Database secured by Supabase with row-level security policies ensuring your data is private.
Access Controls: Limited employee access to user data, with strict authorization protocols.
Regular Audits: Periodic security reviews and vulnerability assessments.

Important: While we use best practices to secure your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

4. Data Retention

Account Data: Retained while your account is active. Deleted within 30 days of account closure unless required for legal purposes.
Video Content: Transcriptions and metadata are deleted when you remove videos or close your account.
Logs and Analytics: Aggregated analytics data retained for up to 24 months for service improvement.
Legal Holds: Data may be retained longer if required by law or to resolve disputes.

5. How We Share Your Information

We do not sell your personal information. We share your data only in the following circumstances:

Service Providers: Third-party vendors who help us operate the Service (cloud database, payment processing, and AI transcription services). These providers are contractually obligated to protect your data.
Legal Requirements: If required by law, subpoena, or government request.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
With Your Consent: When you explicitly authorize sharing (e.g., sharing collections with other users).

6. Your Privacy Rights

6.1 All Users

Access: Request a copy of your personal data.
Correction: Update or correct inaccurate information.
Deletion: Request deletion of your account and data.
Opt-Out: Unsubscribe from marketing emails (link provided in all emails).

6.2 EU/EEA Users (GDPR Rights)

Right to Rectification: Correct inaccurate personal data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
Right to Restrict Processing: Limit how we use your data.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests.
Right to Withdraw Consent: Withdraw consent for processing at any time.
Right to Lodge a Complaint: File a complaint with your local data protection authority.

6.3 California Users (CCPA Rights)

Right to Know: Request information about data collected and how it's used.
Right to Delete: Request deletion of personal information.
Right to Opt-Out of Sale: We do not sell your data, so this right does not apply.
Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise your rights, contact us at: privacy@reelrecall.ai

We will respond to requests within 30 days (EU) or 45 days (California) as required by law.

7. Cookies and Tracking Technologies

We use the following types of cookies:

Essential Cookies: Required for the Service to function (authentication, session management).
Analytics Cookies: Help us understand how users interact with the Service (anonymized data).
Preference Cookies: Remember your settings and preferences.

Cookie Management: You can control cookies through your browser settings. Note that disabling essential cookies may affect Service functionality.

8. Third-Party Services

Our Service integrates with third-party services:

Google API Services

ReelRecall uses Google API Services to provide authentication and optional document export functionality. Our use of Google API Services complies with the Google API Services User Data Policy, including the Limited Use requirements.

What We Access:

Google Sign-In: Your basic profile information (name, email, profile picture) for authentication purposes only.
Google Docs API (Optional): When you choose to export a Viral Blueprint to Google Docs, we create a new document in your Google Drive containing your blueprint data. We only create documents; we do not read, modify, or delete any existing documents in your Drive.

How We Use Google Data:

Authentication data is used solely to identify you and secure your account.
Google Docs export is user-initiated only. Documents are created directly in your Google Drive and we do not store copies of exported documents.
We do not share your Google user data with third parties except as required to provide the Service.

Limited Use Disclosure:

ReelRecall's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We only use Google user data to provide the features you explicitly request.
We do not use Google user data for advertising purposes.
We do not sell Google user data to third parties.
We do not use Google user data for purposes unrelated to ReelRecall's core functionality.

Revoking Access:

You can revoke ReelRecall's access to your Google account at any time by visiting your Google Account Permissions page and removing ReelRecall from the list of connected apps.

Other Third-Party Services

Stripe: Payment processing. See Stripe's Privacy Policy.
Supabase: Database and authentication infrastructure. See Supabase's Privacy Policy.
Vercel/Cloudflare: Hosting and CDN services.

We are not responsible for the privacy practices of third-party services. Please review their policies directly.

9. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@reelrecall.ai, and we will delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from those in your country.

For EU/EEA Users: We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection when transferring data outside the EU/EEA.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be notified via email or prominent notice on our Service.

Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@reelrecall.ai

General Support: support@reelrecall.ai

Response Time: We aim to respond within 48 hours.

EU Representative (GDPR): If you are located in the EU/EEA and need to contact our GDPR representative, please email gdpr@reelrecall.ai.

Your Privacy Matters

Quick Navigation