Privacy Policy

We collect only what we need to run the studio.

We do not ask for, and you should not put into the studio, government ID numbers, health records or other sensitive personal data. We do not use advertising trackers or third-party analytics cookies.

• To provide the service (contract): sign you in, write and draw your episodes, hold and settle credits, render videos, and publish them when you ask.
• To take payment and prevent fraud (contract and legitimate interest): process subscriptions and top-ups, issue refunds, and apply rate limits and spending limits to stop abuse and runaway costs.
• To keep the service safe and working (legitimate interest): fix errors, secure accounts, keep an audit log, and enforce our Acceptable Use Policy.
• To improve your results (contract and legitimate interest): when you connect a channel, we compare your videos’ performance against your own baseline to suggest topics, hooks and styles.
• To meet legal duties (legal obligation): keep tax and payment records, and respond to lawful requests.
• To talk to you (contract and legitimate interest): receipts, security notices, and replies to your messages. We do not send marketing email without your consent.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising. We do not use your stories, images or voice output to train our own models.

To write and draw an episode, we send the relevant parts of your content to AI model providers. That includes your idea, Story Bible, script text, character descriptions and reference images, the text to be spoken, and generated audio sent for word timing. We send what each step needs, not your whole account, and never your email or payment details.

These providers process your content only to return results to us, under commercial terms. See also our AI disclosure.

If you connect YouTube, we ask Google for these permissions and use them only for the reasons below.

Reellytic’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we use Google user data only to provide the features you asked for. We do not sell it, use it for advertising, or transfer it except as needed to provide those features, to comply with law, or as part of a merger with notice to you. No person reads it unless you ask for support, we need to investigate abuse, or the law requires it. Your Google refresh token is encrypted before it is stored.

You can disconnect YouTube at any time in the studio under Publish, and you can revoke access from your Google account permissions. Disconnecting deletes the stored tokens.

If you connect an Instagram Business or Creator account, we request three permissions:

• instagram_business_basic, to identify the connected account.
• instagram_business_content_publish, to post the Reel you approved.
• instagram_business_manage_insights, to read performance numbers for the Reels you posted through Reellytic.

We use this data only to provide those features. Access tokens are encrypted before they are stored. You can disconnect in the studio under Publish or remove Reellytic in your Instagram app settings. Meta’s own privacy terms also apply to data on Instagram.

We share data only with service providers who help us run Reellytic, with the platforms you choose to publish to, and where the law requires it.

• Service providers for sign-in, database and file storage, hosting and rendering, payments, and AI models. They may use the data only to provide their service to us. For a current list of the providers that handle your data, email privacy@reellytic.com.
• Publishing platforms, YouTube and Instagram, receive the video, title, caption and settings you approve, only when you publish.
• Legal and safety. We may disclose data to comply with a legal obligation, protect people from harm, or enforce our terms.
• Business changes. If we are involved in a merger, acquisition or sale of assets, data may transfer to the new owner, who must honor this policy. We will tell you first.

Videos you create are private to your account. Nothing is public until you publish it to a platform yourself.

Payments are handled by Stripe. You enter your card details on Stripe’s page, and we never see or store them. Stripe also hosts the billing page where you update your card, see invoices and cancel your plan. We keep the purchase and subscription record (plan, billing period, currency, amount, status, renewal date, refund status and Stripe references) so we can add or remove the right credits, stop renewals when you cancel, and meet tax and accounting duties. Stripe’s own privacy policy applies to the data it handles.

We use only the cookies and browser storage needed to keep you signed in, protect the connection flow to YouTube and Instagram, and remember your light or dark theme and accent color. We do not use advertising or analytics cookies. Details are in our Cookie Policy.

• Account, stories and generated media: for as long as your account is open, so your series and episodes stay available. You can ask us to delete them at any time.
• Connected account tokens: until you disconnect or we receive a revocation from the platform.
• Purchase and credit records: for as long as the law requires for tax and accounting, even after your account is deleted.
• Audit, error and rate-limit records: kept for security and debugging for as long as they are useful, and not used for anything else.
• Backups: deleted data can remain in provider backups for a short period before it is overwritten.

After you ask us to delete your account, we complete the deletion within 30 days. See how to delete your data.

Depending on where you live (for example the EEA, the UK, California and other US states), you may have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• delete your data;
• object to or restrict some processing, and withdraw consent where we rely on it;
• receive your data in a portable format;
• not be discriminated against for using these rights.

To use a right, email privacy@reellytic.com from the address on your account. We may ask you to confirm it is you, and we reply within the time the law allows (usually one month). If you are unhappy with our answer, you may complain to your local data protection authority. We would appreciate the chance to fix it first.

Automated decisions

AI writes and draws your episodes, but we do not make decisions about you that have legal or similarly significant effects by automated means.

Our providers operate in several countries, including the United States, so your data may be processed outside the country where you live. Where the law requires it, we rely on approved safeguards such as the European Commission’s Standard Contractual Clauses or the UK addendum to them.

We protect data with encryption in transit, encryption of platform tokens before they are stored, ownership checks on every request for your media and jobs, rate limits, and an audit log of sensitive actions. No system is perfectly secure. Read more on our security page, and report a concern to security@reellytic.com.

Reellytic is for people aged 16 and over. We do not knowingly collect data from younger children. Some stories you make may be for young audiences, but you, the adult, are the user. If you believe a child has given us data, email privacy@reellytic.com and we will delete it.

We will update this page when our practices change and change the “Last updated” date. For significant changes we will also tell you by email or in the studio before they take effect.

Email privacy@reellytic.com. For anything else, see our contact page.