Privacy Policy

Introduction

This Privacy Policy describes how HB Inc dba Reelsta (“Reelsta,” “we,” “us,” “our”) collects, uses, stores, and protects your personal data when you use our website at reelsta.com and any related applications or services. By using Reelsta, you agree to the practices described in this policy.

Data Controller

The data controller responsible for your personal data is HB Inc dba Reelsta. We determine how your personal data is processed, for what purposes, for how long, and which third-party processors we use.

Contact Information

For any questions about this Privacy Policy or your personal data, contact us at privacy@reelsta.com. For general inquiries, reach us at hi@reelsta.com.

Age Requirements

Our services are intended for users aged 18 and older. Users between 13 and 18 require verifiable parental consent. We do not knowingly collect personal data from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

Data We Collect

We may collect the following categories of personal data:

• Identity Data: email address, name, profile information
• Payment Data: billing information and payment method details (processed via our payment provider; we do not store full card numbers)
• Technical Data: IP address, device information, browser type, operating system, usage statistics
• Usage Data: subscription details, feature usage statistics
• Communications Data: email interactions, support conversations

How We Use Your Data

Service Delivery

We use your personal data (including email) to provide access to the Reelsta application, generate AI-powered videos, and fulfill our contractual obligations.

Billing & Accounting

We process billing information to comply with legal obligations related to tax documents and financial record-keeping.

Marketing & Newsletters

If you are a customer, we may send you commercial communications based on legitimate interest for up to 5 years. Non-customers receive marketing emails only with explicit consent. You may unsubscribe at any time via the link in each email or by contacting us at hi@reelsta.com.

Testimonials & Social Proof

With your consent during sign-up or account connection, we may use your publicly available profile image in anonymized, aggregated form for testimonial display on our website and marketing materials. We do not display your full name or personal identifiers alongside such images without your explicit consent. You may opt out at any time by contacting us, and we will remove your image within 30 days.

AI-Powered Services

We use service usage data and preferences to improve our AI video generation capabilities. Your personal data is not used to train external AI models. Our AI systems generate content based on your selected preferences without making automated decisions that significantly affect your legal rights.

Data Retention

• Account Data: until account deletion or 5 years of inactivity
• Payment Data: as required by tax and accounting laws (typically 7–10 years)
• Usage Logs: up to 12 months
• Generated Content: 3 months after creation
• Marketing Data: 5 years or until consent withdrawal

International Data Transfers

We store and process your personal data primarily in the United States. Where data is transferred outside your home jurisdiction, we ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions where available. By using our services, you acknowledge and consent to international data transfers as described in this policy.

Use of Google API Services

Reelsta uses Google OAuth for authentication (sign-in with Google). By signing in with Google, you agree to the Google Privacy Policy.

We store OAuth tokens solely to authenticate your account. You may revoke access at any time via your Google security settings.

Google User Data

For Google API usage, we access your email, profile avatar, and name solely to provide authentication and application services.

• Data obtained through Google Workspace APIs is not used for developing, improving, or training generalized AI, ML, or similar models.
• Data is used solely for providing core application functionality. Transfer to third parties occurs only as required for providing or improving the application.
• All Google user data is handled in compliance with the Google API Services User Data Policy.

We strictly prohibit the use of any data collected through Google Workspace APIs for targeted advertising, sale to data brokers, distribution to information resellers, credit-worthiness assessment, lending decisions, personalized advertisements, retargeting campaigns, interest-based marketing, or third-party advertising purposes.

Cookies

We use cookies and similar technologies to collect information about your visits, measure traffic, and customize your experience. This includes recording your IP address, time on site, and referral source. Cookie use for traffic measurement and service customization constitutes legitimate interest. Targeted advertising cookies require your consent.

We may share data with analytics and advertising providers (such as Google, Meta, and TikTok) for traffic analysis, conversion tracking, and advertising effectiveness measurement. You may disable cookies in your browser settings.

Security

We protect your personal data using modern technical and organizational measures to prevent unauthorized access, misuse, damage, or destruction. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law, and no later than 72 hours where feasible.

Third-Party Processors

We use the following third-party service providers to process your data:

• Vercel: website hosting and infrastructure
• Supabase: database services and authentication
• Stripe: payment processing
• Resend: transactional and marketing email
• fal.ai: AI image generation
• Inworld: AI voice synthesis (text-to-speech)
• Google Analytics / Ads: analytics and conversion tracking
• Meta (Facebook) Pixel: analytics and conversion tracking
• TikTok Pixel: analytics and conversion tracking

We may add additional processors in the future. All processors are required to maintain equivalent security and data protection standards.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of Access: request details about the personal data we hold about you
• Right to Rectification: correct inaccurate or incomplete personal data
• Right to Restriction: request restriction of processing in certain circumstances
• Right to Data Portability: receive your personal data in a machine-readable format
• Right to Erasure: request deletion of your personal data from our systems (subject to legal retention obligations)
• Right to Object: object to processing based on legitimate interest

To exercise any of these rights, contact us at privacy@reelsta.com. We will respond within 30 days.

Unsubscribing from Communications

You may unsubscribe from marketing emails at any time via the unsubscribe link in each email. Transactional emails related to your account or purchases will continue as necessary for service delivery.

Confidentiality

Our employees and contractors who process your personal data are obligated to maintain confidentiality about personal data and security measures. This obligation continues after the end of their employment or contractual relationship. We do not release personal data to third parties without your consent, except as described in this policy or as required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the website or email. Your continued use of Reelsta after changes are posted constitutes your acceptance of the updated policy.