[ PRIVACY ]

Privacy policy

Last updated: November 1, 2026

1. Who we are

ReelClone (reelclone.ai) is run by Marko, an individual based in the European Union ("we", "us"). We are the controller of the personal data described here, under the EU General Data Protection Regulation (GDPR).

2. What we collect

• Account details: your email address. If you sign in with Google, we also receive your name and profile picture from Google.
• Reference photos: the face, body and outfit photos you upload for your influencer.
• Reference reels: the videos you upload or the links you paste, plus still frames and the spoken words we take from them to understand the reel.
• Your reels: the videos we generate for you, any captioned copies you make, and the words spoken in them (used to make captions).
• Credits and payments: your credit balance, top-ups, reels charged and refunded, and kills used. Payments are handled by Stripe. We never see or store your full card number. We keep the amount, the date and Stripe's payment reference.
• Technical data: your IP address, browser type and login times, which our hosting and database providers record to keep the service secure and working.

We don't ask for and don't want sensitive data (health, religion, political views and so on). Please don't upload it.

3. How we use it, and our legal basis

• To provide ReelClone (log you in, generate reels, keep your balance, let you keep, kill or caption reels). Legal basis: performing our contract with you (GDPR Art. 6(1)(b)).
• To take payments and keep records required by tax and accounting law. Legal basis: legal obligation (Art. 6(1)(c)).
• To keep the service safe: preventing fraud, abuse, refund abuse and misuse of other people's images. Legal basis: our legitimate interest in a secure service (Art. 6(1)(f)).
• To answer you when you contact us. Legal basis: contract or legitimate interest.

We don't sell your data. We don't show ads. We don't use your photos, reels or prompts to train AI models.

4. AI processing

To make a reel, our system looks at frames and the audio of the reference reel and writes a video description. Your reference photos and that description are then sent to an AI video provider, which renders the video. For a 1:1 copy, the reference video itself (its first 15 seconds) is also sent to the AI video provider, because the copy follows it move by move. Speech-to-text providers turn spoken words into text for prompts and captions. These providers process the data only to deliver the result to us, under contract, and may not use it for their own purposes.

All of this is automated, but no decision with legal or similarly significant effects is made about you. You review every reel before you keep it.

5. Who we share it with

We share data only with service providers that help us run ReelClone, and only what each one needs:

• Hosting and delivery (Cloudflare): serves the website.
• Database, login and file storage (Supabase): stores your account, photos and reels.
• Payments (Stripe): processes your card payments.
• Sign-in (Google), only if you choose "Continue with Google".
• AI providers for video generation, video analysis and speech-to-text, as described above.
• Fonts (Google Fonts): your browser loads our fonts from Google, which sees your IP address.

We may also disclose data if the law requires it, or to protect our rights, our users or the public (for example, in response to a valid court order).

6. International transfers

Some of our providers process data outside the European Economic Area, mainly in the United States. When that happens, we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

7. How long we keep it

• Account, photos and reels: as long as your account is open. When you ask us to delete your account, we delete them within 30 days. Backups roll over within a further 30 days.
• Payment and credit records: as long as tax and accounting law requires (usually up to 10 years), even after your account is deleted.
• Technical logs: kept by our providers for a limited time, typically up to 90 days.

8. Security

Connections are encrypted (HTTPS). Your photos and videos sit in private storage that only your account can open, through short-lived links. Access rules in our database stop users from seeing or changing anyone else's data. No system is perfectly secure, but we work to protect your data, and we'll tell you without undue delay if a breach puts it at risk.

9. Cookies and local storage

We don't use advertising or tracking cookies. Your browser's local storage keeps you logged in and remembers small preferences (like which mode you picked). These are strictly necessary for the service, so no consent banner is needed. Stripe sets its own cookies on its checkout page to prevent fraud.

10. Your rights

Under the GDPR you can ask us to:

• see the personal data we hold about you and get a copy (access and portability),
• correct it,
• delete it (erasure),
• limit how we use it (restriction), or object to processing based on our legitimate interest.

Contact us (see below) and we'll answer within one month. You can also complain to the data protection authority in your EU country.

11. Age limit

ReelClone is only for adults aged 18 or older. We don't knowingly collect data from anyone under 18. If you think a minor has used ReelClone, contact us and we'll delete the account.

12. Changes

If we change this policy, we'll update the date at the top. For important changes, we'll tell you by email or in the app before they take effect.

13. Contact

For anything about your data, message us on Telegram: @obicancovak.