Privacy Policy

Last Updated: January 26, 2026

At SnapReel ("we," "us," or "our"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered video generation platform.

By using SnapReel, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Email address, name, password, and optional profile picture
  • Payment Information: Billing details processed securely through Stripe (we do not store credit card numbers)
  • Content Data: Text prompts, uploaded images, generated videos, project descriptions, and scripts
  • Communication Data: Messages sent to our support team or feedback provided

1.2 Automatically Collected Information

  • Usage Data: Project creation patterns, feature usage, credit consumption, and generation preferences
  • Device Information: Browser type, operating system, IP address, and device identifiers
  • Cookies and Tracking: Authentication tokens (JWT), session data, and preference settings (see our Cookies Policy)
  • Log Data: Access times, pages viewed, and actions performed within the platform

1.3 Third-Party OAuth Information

When you sign in using Google or Apple, we receive basic profile information including your name, email address, and profile picture as permitted by the OAuth provider.

2. How We Use Your Information

We use your information for the following purposes:

  • Service Delivery: Process your prompts through AI models, generate videos, manage your projects, and provide customer support
  • Account Management: Create and maintain your account, authenticate users, and manage subscriptions and credits
  • Payment Processing: Process subscription payments, credit purchases, and refunds through Stripe
  • Service Improvement: Analyze usage patterns, optimize AI generation quality, and develop new features
  • Communication: Send transactional emails (verification, password resets), subscription updates, and optional marketing communications (with consent)
  • Security: Detect fraud, prevent abuse, ensure platform security, and comply with legal obligations
  • Legal Compliance: Comply with applicable laws, regulations, and legal processes

3. Third-Party Services and Data Sharing

We work with trusted third-party service providers to deliver our platform. Your data may be shared with:

Replicate (AI Processing)

Your text prompts and image descriptions are processed through Replicate's AI models (Meta Llama 3, Imagen 4) to generate scripts and images. Replicate may temporarily process this data according to their privacy policy.

ElevenLabs (Text-to-Speech)

Script text is sent to ElevenLabs to generate AI voiceovers for your videos. Audio generation is processed according to ElevenLabs' privacy practices.

Amazon Web Services (AWS S3)

Generated videos, images, and uploaded assets are stored securely on AWS S3 in the ap-southeast-2 region. Files are served via CloudFront CDN for optimal performance.

Stripe (Payment Processing)

Payment and billing information is processed through Stripe. We do not store full credit card details on our servers.

MongoDB Atlas (Database)

User accounts, project metadata, and application data are stored in MongoDB Atlas with enterprise-grade security and encryption.

Upload-Post.com (TikTok Automation)

For TikTok video posting automation, we use Upload-Post.com as a third-party service. When you connect your TikTok account, Upload-Post manages the OAuth connection and posts videos on your behalf according to their privacy policy.

Meta/Facebook (Instagram Integration)

For Instagram Reels posting, we integrate with Meta's Instagram Graph API. When you connect your Instagram account, we access your account username, profile, and posting permissions to publish videos on your behalf.

Note: We do not sell your personal information to third parties. Data is only shared with service providers necessary for platform operation, and they are contractually obligated to protect your information.

4. Social Media Integration and Automation

SnapReel enables automated posting of your AI-generated videos to social media platforms. When you connect your social media accounts, you authorize us to:

4.1 TikTok Integration

We integrate with TikTok through Upload-Post.com, a third-party service that manages OAuth authentication and video publishing. When you connect your TikTok account:

  • Data Accessed: Your TikTok username and posting permissions
  • Data Stored: Connection status and Upload-Post user identifier (we do not store your TikTok password or access tokens directly)
  • Actions Performed: Publishing AI-generated videos with your specified captions to your TikTok account based on your automation schedule
  • Third-Party Processing: Upload-Post.com securely manages the OAuth tokens and handles video uploads according to their privacy policy

4.2 Instagram/Facebook Integration

We integrate with Instagram through Meta's official Instagram Graph API. When you connect your Instagram account:

  • Data Accessed: Your Instagram username, profile picture, account type, and posting permissions
  • Data Stored: OAuth access tokens (encrypted), token expiration dates, and Instagram user ID
  • Actions Performed: Publishing AI-generated videos as Instagram Reels with your specified captions based on your automation schedule
  • Token Refresh: We automatically refresh expired tokens to maintain your connection

4.3 Your Consent and Control

  • Explicit Consent: By connecting your social media account, you explicitly authorize SnapReel to post content on your behalf
  • Automation Control: You control when and what content is posted through your automation settings
  • Disconnect Anytime: You can disconnect your social media accounts at any time through your account settings, which immediately revokes our posting access
  • Data Deletion: When you disconnect an account, we delete the associated tokens and connection data within 30 days

Important: We only access the minimum data necessary to provide the automation service. We never access your private messages, follower lists, or personal content beyond what is required for video publishing.

5. Data Retention

  • Account Data: Retained while your account is active and for 30 days after account deletion (to allow recovery)
  • Project Content: Videos, images, and scripts are stored indefinitely while your account is active unless you manually delete them
  • Transaction Records: Billing and payment history retained for 7 years for tax and legal compliance
  • Log Data: Server logs and usage analytics retained for 90 days
  • Deleted Content: Permanently removed from our servers within 30 days of deletion
  • Social Media Tokens: Access tokens are deleted immediately when you disconnect an account or within 30 days of account deletion

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

Access and Portability

Request a copy of your personal data in a structured, machine-readable format.

Correction

Update or correct inaccurate information in your account settings.

Deletion

Request deletion of your account and personal data (subject to legal retention requirements).

Objection and Restriction

Object to certain data processing activities or request restriction of processing.

Withdraw Consent

Withdraw consent for optional data processing (e.g., marketing emails) at any time.

California Privacy Rights (CCPA)

California residents have additional rights including disclosure of data categories collected and the right to opt-out of data sales (note: we do not sell personal information).

To exercise these rights, contact us at privacy@snapreelai.com. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption: All data in transit is protected using TLS/SSL encryption
  • Authentication: Passwords are hashed using bcrypt; sessions use secure JWT tokens stored in HTTP-only cookies
  • Access Controls: Strict internal access controls limit who can view your data
  • Infrastructure: Hosted on secure cloud infrastructure (AWS, Vercel, MongoDB Atlas) with regular security audits
  • Monitoring: Continuous monitoring for suspicious activity and security threats

While we take reasonable precautions, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

8. International Data Transfers

Our services are operated globally. Your data may be transferred to and processed in countries other than your country of residence, including the United States, Australia (AWS ap-southeast-2), and other locations where our service providers operate. These countries may have different data protection laws than your jurisdiction. By using our service, you consent to the transfer of your information to these locations.

9. Children's Privacy

SnapReel is not intended for users under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will take steps to delete such information.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage. For detailed information about our use of cookies, please see our Cookies Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new policy on this page with an updated "Last Updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@snapreelai.com

Support: support@snapreelai.com

Data Protection Officer: dpo@snapreelai.com

Your Privacy Matters to Us

We're committed to transparency and protecting your data. If you have questions, we're here to help.

Contact Support