Privacy Policy

1. Information We Collect

• Account data. Your email address and authentication identifiers when you sign up or sign in (including via Google).
• Instagram data. When you connect your Instagram account, we access profile details, media, and insights you authorize through Meta’s Graph API in order to power your feed and analytics.
• Usage & preferences. Settings such as your theme, feed layout, and tracked accounts, stored to personalize your experience.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the ReelSpy service.
• Authenticate you and keep your account secure.
• Sync and display Instagram content and performance insights.
• Remember your preferences across sessions.

3. Instagram & Meta Platform Data

ReelSpy uses Meta’s Graph API. Access tokens are stored securely and used only to perform the actions you request. We do not sell your Instagram data. You can disconnect your Instagram account at any time from Settings, which removes the stored token.

4. Service Providers (Sub-processors)

We rely on the following third-party processors to run ReelSpy. Each receives only the data needed for its function, under its own security and privacy commitments:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and delivery.
• Cloudflare R2 — storage for videos you upload for publishing.
• Stripe — payment and subscription processing (we never store your card details).
• Anthropic and NVIDIA — AI models that generate scripts and suggestions from the inputs you provide.
• Groq and Hugging Face — speech-to-text transcription of reels you choose to transcribe.
• Meta (Instagram & Facebook) and Google (YouTube & sign-in) — platforms you connect and publish to via their APIs.
• Resend — transactional email (e.g. publish-failure notifications).

We do not sell your personal data, and we do not share it with third parties except the processors above or where required by law.

5. Cookies

We use essential cookies for authentication and to remember your consent and preferences. For details, see our Cookie Policy.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You can delete your account at any time from Settings. Deletion permanently removes your profile and all associated data — tracked accounts, reels, scripts, automations, uploaded videos, and event logs — and revokes any connected Meta access token. This action is immediate and cannot be undone.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can export a machine-readable copy of your data and delete your account yourself from Settings, or contact us to exercise any of these rights.

8. Security & Breach Notification

We protect access tokens and other sensitive data with server-only access controls and encryption in transit. No system is perfectly secure; in the event of a personal data breach that is likely to affect you, we will notify affected users and the relevant authority without undue delay, consistent with applicable law.

9. Data Protection Contact (UAE PDPL)

ReelSpy processes personal data in line with the UAE Personal Data Protection Law (PDPL). For data-protection requests or questions — access, correction, export, deletion, or objection — contact our data protection point of contact at privacy@reelspy.dev.