Privacy policy

What we collect

Your name and email come from Clerk when you sign in — we never see or store your password. When you add a product, we store what you give us: an app or website listing, uploaded screenshots or photos, and any details you confirm. When you connect a social account (TikTok, Instagram, YouTube, LinkedIn), we store the access token it gives us, encrypted, so we can post on your behalf — never your password for that platform. If you pay for a plan, Stripe handles your card directly; we only ever see a customer ID, not your card number.

How we use it

• To generate hooks, captions and slide copy, your product's details are sent to Anthropic's Claude API — that's how the writing gets made.
• To render your videos and slide images, and to store the results so you can review, export or post them.
• To count clicks on the trackable links we generate, so your Results page shows real numbers.
• To run your account: billing, plan limits, and showing you your own content.

We don't sell your data, and we don't use your product's content to advertise anyone else's.

Who else sees it

Only the services that make the product work, each acting on our instructions:

• Clerk — sign-in and account identity.
• Supabase — our database and file storage.
• Anthropic — generates your posts' text from your product's own details.
• OpenAI — reads your film's lines aloud if you pick an AI voice, and listens to recorded voices (yours, or a customer's testimonial) to time their words and write the transcript.
• Amazon Web Services — renders your films and carousels.
• ScreenshotOne — when your site has few usable photos, takes a screenshot of its public homepage (the page any visitor sees) to show in your film.
• Stripe — billing, if you're on a paid plan.
• Whichever social platforms you explicitly connect — only once you've authorized that connection, and only to post what you approve.
• Shopify — if you connect a store (see below).
• Klaviyo, Meta Ads and TikTok Ads — if you connect them, to send them a film (see below).
• Resend — sends our emails. Inngest — runs scheduled posts and emails at their time. Sentry — tells us when something breaks (never your content).

Your content stays yours

You own what you upload and what gets generated from it. Every post we write is grounded in your own listing or screenshots — we don't invent claims, and we don't fabricate reviews or testimonials.

If you connect a social account

Connecting TikTok, Instagram, YouTube or LinkedIn gives us only what we need to post for you: your account's name or id (to show you which account is connected) and permission to upload videos. We use it only when you press Post or schedule a post, and only for the film you chose. We don't read your followers, messages, comments or other posts, and we don't post anything you haven't approved. Disconnect in Settings at any time and the stored access is deleted at once; you can also remove our access from the platform's own settings.

If you connect a Shopify store

When you install our Shopify app, Shopify gives us access to your store's products (names, descriptions, photos and prices) and its discounts, and lets us add a film to a product page when you ask. We never read your customers or orders. If you pay for a plan through Shopify, Shopify takes the payment; we only ask Shopify which plan you're on. When you add a product to your store we may email you a link to make its film (turn these off in Settings), and we show your store's live discounts so you can make a special from one. The access Shopify gives us is stored encrypted. Remove the app in Shopify and we stop using it at once; Shopify then asks us to delete what we hold about your store, and we do.

If you connect Klaviyo, Meta Ads or TikTok Ads

Connecting Klaviyo lets us add images and email templates to your account: when you press Send to Klaviyo, we upload that film's GIF and make one template with it. Connecting Meta Ads lets us see your ad accounts and Facebook Pages (their names, so you can pick one), add videos and ad creatives, and read your ads' results; connecting TikTok Ads lets us see your ad accounts' names, add videos and cover images to your library, and read your ads' results. When you press Send, we upload those films (on Meta, one creative each). For the ad test packs you send, we read each ad's spend, how often it was shown, its link clicks and its purchases, to show which version is winning — never your customers or your audiences. We never make campaigns or ad sets, or set a budget. We only make or pause ads when you press Swap them in: the new round goes into the ad set or ad group your winner ran in and the last round is paused, so what you spend doesn't change. We never read your Klaviyo profiles or lists. The access is stored encrypted; Disconnect in Settings and it's deleted at once (Klaviyo's is also revoked). When you open a film's email GIF, we keep it beside the film so it loads in emails; it's gone when the film is.

If you share a film as a link

When you share a film you made as a link, we keep what it's made from (its lines, the photos it uses and the choices you made) for 30 days so anyone with the link can watch it — no account needed. Stop sharing removes it at once. Anyone can report a shared film to us. We count how often a shared film is opened, without keeping viewers' IP addresses.

If a brand asks you for a testimonial

A brand using Reelfox can send you a private link to record a short video about them. Before you record, we show you exactly what you're agreeing to and keep that wording, with the time you agreed, your first name, and your answer to whether the brand paid or gifted you anything. Your answers (video and voice) and a transcript of them go only to that brand, which decides whether to use them. We don't keep your IP address with it. Your private withdraw link deletes your video and voice at once and tells the brand you've withdrawn; anything it already posted is its to take down.

Security

Your files live in private storage — nothing is public unless you post it yourself. Every database table is locked down so only you can read or write your own rows. Social platform tokens are encrypted before they're ever stored.

How we learn what to improve

We record how the product is used, on our own servers only: pages opened, which styles, colours and music are tried and kept, which lines get rewritten (which line, never what you wrote), what was made and whether it worked, and the country and kind of device (phone, tablet, computer) it came from. We never store IP addresses, and we don't use third-party analytics, session recordings or tracking cookies. Visitors who aren't signed in are counted with a one-way code that changes every day, so we can't follow anyone from one day to the next. This stays with us, is never sold, and is included when you download or delete your data.

Cookies

We use Clerk's cookie to keep you signed in, and if you make a free film without an account, one cookie that keeps that film yours until you sign up. No third-party advertising or tracking cookies.

Your data, your call

From Settings, you can download everything we hold about you, or delete all of it, at any time — no support ticket required.

Changes

If this policy changes in a way that matters, we'll say so here with a new date.

Questions

Email support@reelfox.ai. How to delete your data, with or without an account: data deletion. The rules for using Reelfox: terms.