The data controller for personal data processed through ReelUpp is [COMPANY LEGAL NAME], [REGISTERED ADDRESS] ("ReelUpp", "we", "us"). Privacy contact: [PRIVACY CONTACT EMAIL].
| Category | Examples | When |
|---|---|---|
| Waitlist data | Email address | When you join the waitlist |
| Account data | Email, password (hashed), account settings | When you create an account |
| Project & export data | Saved project files, exported reels, images you attach to a saved project (e.g. an athlete photo), names and stats you type into graphics | Only when you save or export |
| Billing data | Plan, credit balance, transaction history. Card details are handled by our payment processor, not by us. | When paid plans are available and you purchase |
| Usage & technical data | IP address, browser type, device info, pages visited, feature events, error logs | Automatically, when you use the site |
| Communications | Emails and support messages you send us | When you contact us |
Content you include in saved projects may incidentally contain personal data of other people (for example, athletes visible in footage or names typed into graphics). You are responsible for having the right to use that information, as set out in our Terms of Service.
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the Service: accounts, saving projects, exports, support | Performance of a contract (Art. 6(1)(b)) |
| Waitlist and launch communications you signed up for | Consent (Art. 6(1)(a)) — withdraw anytime via the unsubscribe link |
| Billing, accounting, tax | Legal obligation (Art. 6(1)(c)) |
| Security, fraud and abuse prevention, enforcing usage limits | Legitimate interests (Art. 6(1)(f)) |
| Improving the Service through aggregate usage statistics | Legitimate interests, or consent where analytics cookies are used |
| Marketing emails to customers | Consent, or legitimate interests where permitted (soft opt-in) — opt out anytime |
We do not sell personal data, and we do not use your footage, projects, or reels to train AI models.
We serve users worldwide, and our providers may process data in countries other than yours, including the United States. Where personal data of EU/UK users is transferred to countries without an adequacy decision, we rely on appropriate safeguards, in particular the European Commission's Standard Contractual Clauses (and the UK Addendum), together with our processors' compliance frameworks.
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data; to restrict or object to processing; to withdraw consent at any time; and to lodge a complaint with a supervisory authority. To exercise your rights, email [PRIVACY CONTACT EMAIL]. We respond within the timeframe required by applicable law (one month under GDPR) and may need to verify your identity. We do not discriminate against you for exercising your rights.
The GDPR / UK GDPR applies as described throughout this Policy. Where processing is based on legitimate interests, you can object at any time. You may complain to your local supervisory authority or, in the UK, to the ICO. [IF REQUIRED: EU/UK REPRESENTATIVE NAME AND ADDRESS — Art. 27 GDPR]
The categories of personal information we collect are listed in Section 3; we collect them from you directly or automatically, use them for the purposes in Section 4, and disclose them to the service providers in Section 5. We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. California residents have the rights to know, delete, correct, and to non-discrimination, exercisable via [PRIVACY CONTACT EMAIL], including through an authorized agent.
We process personal data under the legal bases of contract performance, legal obligation, legitimate interest, and consent. Brazilian users may exercise the rights in Article 18 LGPD via [PRIVACY CONTACT EMAIL].
Where local law grants you additional rights (e.g., Canada's PIPEDA, Australia's Privacy Act), we will honor them on request.
The Service is not directed to children and is not intended for use by anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us and we will delete it. Adults who create reels featuring minors are responsible for having appropriate parental consent, as described in our Terms.
We use technical and organizational measures appropriate to the risk, including encryption in transit, hashed credentials, access controls, and the security programs of our infrastructure providers. No system is perfectly secure; report any concerns to [SECURITY CONTACT EMAIL].
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are set only with your consent, which you can change at any time via "Cookie settings" in the footer.
We may update this Policy from time to time. Material changes will be announced through the Service or by email before they take effect. The "Last updated" date at the top reflects the latest version.
[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
Privacy: [PRIVACY CONTACT EMAIL]