Privacy Policy

1. Who controls your data

The data controller for the Reeledia website and account system is Błażej Winiarski, based at Dąbrowa Dolna 6, 26-010 Bodzentyn, Poland, operating as unregistered economic activity under Polish law (not a registered sole trader, not VAT-registered). You can reach us for any privacy question at blazejwiniarskibiznes@gmail.com.

This policy covers the Reeledia marketing website, your Reeledia account, and the parts of the desktop application that communicate with our servers (such as license verification). It does not cover third-party services you separately connect (see Section 5), which have their own privacy policies.

2. Data we collect

• Account data: email address, and any name or billing details you provide when you create an account or subscribe. The same account is used to log in both on this website and inside the desktop app.
• Payment data: handled directly by our payment processor, Stripe. We do not receive or store your full card number.
• License & device verification data: the desktop app generates an identifier for your computer (a one-way hash). We store only that hash, to confirm the app is running on a computer authorized under your license.
• Connected social accounts: when you connect a social media account for publishing, we store which platform it is, its username, and a status flag — not its password or access token, which are held by our publishing infrastructure provider under its own security controls.
• Security data: your IP address, kept in short-lived counters (minutes to an hour) that limit repeated login and sign-up attempts, and login sessions (stored as hashes) so you can be signed in and signed out of individual devices.
• Purchase consent record: when you buy, we store the time you accepted the Terms and acknowledged the loss of the 14-day withdrawal right, as evidence of that consent.
• Affiliate data: if you join the affiliate program, your referral activity (clicks, sign-ups, commissions, payouts) and the payout details you give us — recipient name, country, whether you are an individual or a business, a tax ID if you are a business, and your PayPal email or IBAN. The PayPal email / IBAN is stored encrypted. Referred customers are shown to their referrer only as a partly hidden email address.
• Support & communications: anything you send us by email, through the Support page, or when you ask us to call you back (your phone number and the time that suits you).
• Visitor statistics (no cookies): we count page visits with Vercel Web Analytics, which sets no cookies and doesn't track you across sites. It records which page was visited, roughly where from (country), and the browser/device type, without storing your IP address or any personal profile.
• Website analytics & marketing cookies: with your consent, usage data collected via Google Analytics 4 and the Meta Pixel (see Section 6). We may add TikTok Pixel or a session-recording/heatmap tool such as Microsoft Clarity in the future, in which case this section will be updated.
• Server-side purchase measurement (Meta Conversions API): if you accept marketing cookies, after your first payment (including the paid trial and the first full payment after it) our server tells Meta about the purchase: the amount, currency, transaction number, your email address and account id one-way hashed (SHA-256), and the Meta cookie identifiers (_fbp, _fbc), IP address and browser type recorded at checkout. This is used only to measure ad performance; the browser details are deleted after 30 days. Nothing is sent without consent, and withdrawing it in the cookie settings stops further sharing. For collecting and passing on this data we are joint controllers with Meta Platforms Ireland Ltd.
• Marketing emails: if we launch a newsletter, we will only add you to it with your consent, and you can unsubscribe at any time.

3. Why we process your data (legal bases)

• Performance of a contract — account data, payment data, and license verification, so we can provide the Service you subscribed to.
• Legal obligation — billing and accounting records we must keep under Polish tax law.
• Legitimate interest — keeping the Service secure, preventing abuse, and running the affiliate program.
• Consent — analytics/marketing cookies and any marketing emails, which you can withdraw at any time.

4. The AI generation module and your own third-party infrastructure

If you use the AI video generation module, generation jobs and related content may be processed on external computing infrastructure that you connect and control yourself. We are not the data controller for processing that happens on that third-party infrastructure — that provider processes it under their own terms and privacy policy, which you should review separately.

5. Who we share data with

We do not sell your personal data. We share it only with the service providers we use to run Reeledia, including:

• Our payment processor, Stripe, to process subscription payments;
• Google (Google Analytics 4) and Meta (Meta Pixel and Conversions API), for website analytics and ad measurement, with your consent;
• Our email delivery provider, Resend, to send account emails such as address confirmation and password resets — and marketing emails only if you opt in;
• Our hosting providers, Vercel (website and account system) and Neon (database), to run Reeledia;
• Authorities, where required by law.

6. Cookies

The website uses the following cookies:

• Necessary — required for the site to function; always active.
• Analytics — Google Analytics 4, used only with your consent, to understand site traffic.
• Marketing — the Meta Pixel (and potentially TikTok Pixel in the future), used only with your consent, to measure ad performance.
• Referral cookie (reeledia_ref) — set when you open an affiliate link, and kept for 30 days, so the affiliate is credited if you subscribe. It is used only for that purpose.

You will be asked to accept, reject, or customize non-essential cookies via a cookie banner on your first visit, and you can change your choice at any time.

7. International data transfers

Some of our service providers (including Google, Meta, and our payment processor) may process data outside the European Economic Area, including in the United States. Where this happens, we rely on the safeguards required by GDPR, such as the European Commission's Standard Contractual Clauses, as implemented by those providers.

8. How long we keep your data

We keep account data for as long as your account is active, and for a reasonable period afterward in case you return. Billing and invoicing records are kept for as long as required by Polish tax law (generally several years). Analytics data is retained according to the retention settings of the relevant tool (for example, Google Analytics 4's default retention period).

9. Your rights

If GDPR applies to you, you have the right to access, correct, or delete your personal data, to restrict or object to certain processing, to receive a copy of your data in a portable format, and to withdraw consent at any time (without affecting processing already carried out). To exercise any of these rights, contact us at blazejwiniarskibiznes@gmail.com. You also have the right to complain to your local data protection authority — in Poland, this is the Urząd Ochrony Danych Osobowych (UODO).

10. Children

Reeledia is not directed at, and is not intended for use by, children under 16. We do not knowingly collect personal data from children.

11. Security

We use reasonable technical and organizational measures to protect your data, but no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy as the Service evolves (for example, when we add new tools or service providers). We will post the updated version here and, for material changes, try to give you reasonable notice.

13. Contact

Questions about this policy can be sent to blazejwiniarskibiznes@gmail.com.