Privacy Policy

1. Who we are

ReelYay (“we”, “us”, or “our”) provides tools to create product marketing videos from SaaS websites and a discovery platform where creators can choose to showcase their products. This policy explains how we handle information when you visit reelyay.com, sign in, create videos, or use the product showcase.

Contact us about privacy, your data, or this policy at [email protected]. This policy explains our practices; it does not replace any consent that applicable law requires us to obtain separately.

2. Information we collect

• Account and sign-in information. When you use Google or GitHub to sign in, we receive a provider account identifier, email address, name or username, and profile image when available. Our authentication system stores linked-account records, authorization tokens where provided, and session information. We do not receive your Google or GitHub password.
• Project and creation information. This includes the website URLs you submit, publicly accessible website text and screenshots we capture, uploaded reference images and filenames, creative instructions, language and video settings, saved preferences, generated scripts and videos, and task status and diagnostic records.
• Showcase information. If you publish a showcase, we store your product name, product URL, description, category, tags, selected video and thumbnail, and the publication and consent records.
• Technical information. Our authentication and infrastructure services may process IP addresses, browser or device information, request times, session identifiers, and error or security logs to operate and protect the service.
• Website analytics. When enabled, we use PostHog to measure visits to public pages, interactions with public showcases, and steps in the video creation flow. Events can include a public page path, referring domain, campaign labels, and a public showcase ID. Creation events record whether a valid request was submitted or accepted, a ready result was viewed or played, or a download was started. They do not include the website you submitted, your private project or task ID, or your media links. This setup uses cookieless measurement without session recordings or account profiles. PostHog uses the browser's user agent and network address to compute an anonymous identifier and removes those inputs before storing the event.
• Purchase records. We link order references, plan, amount, payment and refund status, and remaining video uses to your ReelYay account to deliver purchases, show your billing history, and respond to support requests.
• Support communications. We receive the information you choose to include when you contact us, such as your email address, message, and attachments.

3. Google and GitHub sign-in

Google sign-in requests only openid, email, and profile. GitHub sign-in requests basic profile and email access (read:user and user:email). We use this information to identify your account, authenticate you, maintain sessions, associate your projects with your account, and address account security or support requests.

We do not request access to Gmail messages, Google Drive files, contacts, calendars, or GitHub repositories. We do not send Google or GitHub sign-in profile information or authorization tokens to AI model providers as generation inputs, use that information for advertising, or sell it. ReelYay’s use and transfer of information received from Google APIs adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google provides your account ID, email address, name, and profile photo if available. Convex processes and stores the account association, sign-in tokens, and sessions needed to authenticate you. See when data is shared, how it is protected, and retention and account deletion.

You can revoke access through your Google Account connections or GitHub application settings. Revoking provider access is separate from requesting deletion of the data already held by ReelYay.

4. How we use information

We use information to provide sign-in and account access, analyze the public websites you submit, prepare and run video creation tasks, store and deliver your work, apply your showcase publication choices, troubleshoot failures, prevent abuse, and answer support requests. We may retain task costs and operational records to manage service usage and reliability.

Where applicable law requires a legal basis, we process information as necessary to provide the service you request, for legitimate interests such as security and service reliability where those interests do not override your rights, to meet legal obligations, or with your consent where required. We obtain any required consent before using information for a materially different purpose.

5. Video creation and submitted material

We capture screenshots and copy from public product websites you submit and assemble them into a video. We store the video and task records to deliver it and troubleshoot problems. For earlier projects that used an AI creation feature, relevant materials may have been shared with OpenRouter and the providers that processed the request. Private images could be accessed through time-limited links.

We do not use Google or GitHub sign-in data to train general-purpose AI models. The handling of product material submitted for creation is distinct from sign-in data: upstream AI providers may have different logging, retention, safety-review, and model-improvement policies. Unless we expressly state otherwise for a specific feature, ReelYay does not promise zero data retention, exclusion from all provider training, or processing only in a particular country. Do not submit secrets, private customer records, or sensitive personal data that is unnecessary for your task.

6. When information is shared

• Service providers. We use Convex for backend, database and authentication storage and Cloudflare for hosting, network delivery and private object storage. Google and GitHub handle sign-in. Processing workers also handle website capture and media inspection. Support messages may be forwarded by Cloudflare Email Routing to a support inbox hosted by Google. We share information needed for the relevant service, rather than making private projects publicly accessible.
• Waffo Pancake checkout. Waffo Pancake provides checkout as the merchant of record. Waffo and its payment providers handle the billing and card details you enter at checkout. ReelYay does not receive or store full card numbers or security codes. We provide the product, price, and order reference to create the checkout session and receive order status to deliver your purchase. See Waffo’s Privacy Policy.
• Your publication choices. Your reels stay private until you choose to publish them. If you publish a showcase, its product details, video and thumbnail become publicly accessible. You can withdraw the showcase from the service. Withdrawal does not erase copies already downloaded, cached or shared by others, and does not delete your private project.
• Legal and safety needs. We may disclose information when required by law, or as necessary to investigate abuse, protect users or the service, or establish, exercise or defend legal claims, subject to applicable law.

We do not sell personal information or use sign-in data for targeted advertising. Public showcase browsing does not authorize access to your private projects or uploaded references.

7. Storage, security and international processing

Our service and its providers may process information outside the country where you live. The location depends on the infrastructure, processing worker and model provider used for the task. Where required, we must apply appropriate safeguards for international transfers.

We use access controls, authenticated project ownership checks, private object storage and time-limited media links to help protect private work. Production connections use HTTPS. Authentication tokens are stored by the authentication system and in browser storage as needed to maintain your session. No internet service can guarantee absolute security.

8. Retention and deletion requests

We retain account and project information while it is needed to provide your account, saved work and requested features. Retention also depends on whether information is needed for security, troubleshooting, legal obligations or resolving disputes. There is no fixed automatic deletion period for all project data.

You can permanently delete your account from Account settings after signing in. When you confirm, your sessions are revoked, your public reels are removed, and your projects and media are cleared in the background. We may keep records needed to meet legal obligations or handle refunds and payment disputes.

To request access, correction, a copy, or deletion of your information, email [email protected] from the address associated with your account where possible. We may need to verify your identity before acting. We respond within the time required by applicable law and explain any lawful reason to retain particular records.

Removing a public showcase, signing out, revoking a login provider, and deleting your ReelYay account are separate actions. Infrastructure backups and provider-held copies may follow their own retention and deletion processes; we cannot remove copies independently saved by other people.

9. Your privacy choices

Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to particular processing, withdraw consent without affecting earlier lawful processing, or complain to a relevant data protection authority. Contact our support address to make a request. You can browse public showcases without signing in; account features require the information necessary to authenticate you.

10. Cookies and browser storage

We use cookies or similar browser storage for authentication, session continuity and security. Our authentication integration uses local storage to retain session-related information; session storage also keeps in-progress creation settings and request identifiers. We also save your language preference in local storage. Clearing this storage may sign you out or remove unsaved drafts. The current application does not include third-party advertising trackers or an advertising cookie system.

When guest previews are available, we store a browser identifier to let you reopen your private preview and use Cloudflare Turnstile to verify creation requests. An unclaimed guest preview becomes unavailable after seven days and is queued for deletion. If you sign in and claim it, the preview is saved to your account.

11. Age requirements

ReelYay is intended for users aged 18 or older and is not directed to children. If you believe a child has provided personal information to us, contact us so we can investigate and address it.

12. Changes and contact

We may update this policy as the service changes. We will update the date on this page and provide appropriate notice of material changes. If a new use of information requires consent, we will obtain that consent before making the change. For privacy questions, contact [email protected].