Privacy Policy
Last updated: Draft — pending legal review, not yet reviewed by a licensed attorney
1. Who controls your data
The data controller for the Reeledia website and account system is Błażej Winiarski [legal name to be confirmed], based at Dąbrowa Dolna 6, 26-010 Bodzentyn, Poland [business registration status to be confirmed]. You can reach us for any privacy question at blazejwiniarskibiznes@gmail.com.
This policy covers the Reeledia marketing website, your Reeledia account, and the parts of the desktop application that communicate with our servers (such as license verification). It does not cover third-party services you separately connect (see Section 5), which have their own privacy policies.
2. Data we collect
- Account data: email address, and any name or billing details you provide when you create an account or subscribe. The same account is used to log in both on this website and inside the desktop app.
- Payment data: handled directly by our payment processor (expected to be Stripe [to be confirmed]). We do not receive or store your full card number.
- License & device verification data: the desktop app computes a hardware identifier (HWID) by hashing a combination of identifiers from your computer's hardware (such as the CPU, disk, and motherboard). We store the resulting hash, not the underlying hardware identifiers themselves, to confirm the app is running on a computer authorized under your license.
- Security data: your IP address, kept in short-lived counters (minutes to an hour) that limit repeated login and sign-up attempts, and login sessions (stored as hashes) so you can be signed in and signed out of individual devices.
- Purchase consent record: when you buy, we store the time you accepted the Terms and acknowledged the loss of the 14-day withdrawal right, as evidence of that consent.
- Affiliate data: if you join the affiliate program, your referral activity and payout details.
- Support & communications: anything you send us by email, or through our Discord server (governed by Discord's own privacy policy, not this one).
- Website analytics & marketing cookies: with your consent, usage data collected via Google Analytics 4 and the Meta Pixel (see Section 6). We may add TikTok Pixel or a session-recording/heatmap tool such as Microsoft Clarity in the future, in which case this section will be updated.
- Marketing emails: if we launch a newsletter, we will only add you to it with your consent, and you can unsubscribe at any time.
3. Why we process your data (legal bases)
- Performance of a contract — account data, payment data, and license verification, so we can provide the Service you subscribed to.
- Legal obligation — billing and accounting records we must keep under Polish tax law.
- Legitimate interest — keeping the Service secure, preventing abuse, and running the affiliate program.
- Consent — analytics/marketing cookies and any marketing emails, which you can withdraw at any time.
4. The AI generation module and your own third-party infrastructure
If you use the AI video generation module, generation jobs and related content are sent to third-party GPU infrastructure that you connect and control yourself (for example, your own RunPod account running ComfyUI). We are not the data controller for processing that happens on that third-party infrastructure — that provider processes it under their own terms and privacy policy, which you should review separately.
5. Who we share data with
We do not sell your personal data. We share it only with the service providers we use to run Reeledia, including:
- Our payment processor (expected to be Stripe [to be confirmed]), to process subscription payments;
- Google (Google Analytics 4) and Meta (Meta Pixel), for website analytics and ad measurement, with your consent;
- Discord, if you choose to join our community server;
- Our email delivery provider (expected to be Resend [to be confirmed]), to send account emails such as address confirmation and password resets — and marketing emails only if you opt in;
- Our hosting provider [to be confirmed], to run the website and account system;
- Authorities, where required by law.
6. Cookies
The website uses three categories of cookies:
- Necessary — required for the site to function; always active.
- Analytics — Google Analytics 4, used only with your consent, to understand site traffic.
- Marketing — the Meta Pixel (and potentially TikTok Pixel in the future), used only with your consent, to measure ad performance.
You will be asked to accept, reject, or customize non-essential cookies via a cookie banner on your first visit, and you can change your choice at any time.
7. International data transfers
Some of our service providers (including Google, Meta, and our payment processor) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on the safeguards required by GDPR, such as the European Commission's Standard Contractual Clauses, as implemented by those providers.
8. How long we keep your data
We keep account data for as long as your account is active, and for a reasonable period afterward in case you return. Billing and invoicing records are kept for as long as required by Polish tax law (generally several years). Analytics data is retained according to the retention settings of the relevant tool (for example, Google Analytics 4's default retention period).
9. Your rights
If GDPR applies to you, you have the right to access, correct, or delete your personal data, to restrict or object to certain processing, to receive a copy of your data in a portable format, and to withdraw consent at any time (without affecting processing already carried out). To exercise any of these rights, contact us at blazejwiniarskibiznes@gmail.com. You also have the right to complain to your local data protection authority — in Poland, this is the Urząd Ochrony Danych Osobowych (UODO).
10. Children
Reeledia is not directed at, and is not intended for use by, children under 16. We do not knowingly collect personal data from children.
11. Security
We use reasonable technical and organizational measures to protect your data, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this policy as the Service evolves (for example, when we add new tools or service providers). We will post the updated version here and, for material changes, try to give you reasonable notice.
13. Contact
Questions about this policy can be sent to blazejwiniarskibiznes@gmail.com.