Privacy Policy
Last updated: May 25, 2026
1. Data controller
The controller of personal data of AIReelVideo users is
AIReelVideo, Polish VAT ID (NIP): 6372199254. Data protection contact:
contact@aireelvideo.com. No DPO has been appointed (not required at the current scale).
2. Data we collect
Account: email, hashed password, optional name, role, brand, settings.
Content: articles, prompts, avatars, generated scripts and videos, publishing preferences.
Payments: token history, Stripe transaction IDs (we never see or store card numbers).
Technical: IP address, user-agent, error logs (Sentry), server access logs.
Analytics (after consent): Google Analytics — pages and events.
3. Purposes and legal bases (GDPR Art. 6)
Service delivery — Art. 6(1)(b) (contract).
Accounting and tax obligations — Art. 6(1)(c) (5 years per Polish tax law).
Security, abuse prevention, log monitoring — Art. 6(1)(f) (legitimate interest).
Analytics (Google Analytics) — Art. 6(1)(a) (consent — revocable via "Cookie settings").
Claims enforcement — Art. 6(1)(f).
4. Who we share data with (subprocessors)
| Provider | Purpose | Country | Transfer basis |
|---|
| Google (Gemini API) | article analysis + script generation (LLM) | USA | SCC + Data Privacy Framework |
| Stripe Payments Europe | payment processing (we do not see card numbers) | IE / USA | SCC + DPF |
| Kie.ai | video generation (Sora 2 and related) | USA | SCC |
| fal.ai | video generation (alternative models) | USA | SCC |
| Sentry | application error tracking | EU / USA | SCC + DPF |
| SMTP provider | transactional email delivery | EU | data processing agreement (DPA) |
| VPS provider | application + database hosting | EU | data processing agreement (DPA) |
| Google Analytics (after consent) | site traffic stats | USA | DPF + user consent |
Models running locally on our server (ComfyUI / Flux 2 for avatars, faster-whisper for caption sync) do not send your data outside our infrastructure.
5. Retention
Account: until deletion + 30-day rolling backup window.
Generated videos: 90 days from generation, then deleted (you can download earlier).
Invoices and accounting: 5 years (tax law).
System and Sentry logs: 12 months.
Analytics cookies: see
Cookie Policy.
6. Your rights (GDPR Art. 15-22)
You have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, portability, objection to processing based on legitimate interest, and withdrawal of consent.
Requests:
contact@aireelvideo.com — we respond within 30 days.
You may also lodge a complaint with the
Polish Data Protection Authority (UODO) at uodo.gov.pl.
7. Cookies
Our cookie usage is described in the
Cookie Policy. We only load analytics cookies after your consent.
8. Security
Passwords are stored hashed (bcrypt). Connections are TLS-encrypted. We enforce least privilege, per-user query scoping, log auditing, and monitoring. Dependencies are kept up to date.
9. Changes to this policy
We will notify you of material changes by email or in-app banner at least 14 days in advance. Continued use after changes take effect constitutes acceptance.
10. Contact