Back to home

Privacy Policy

How Reeldo AI collects, uses, stores, and protects your personal information.

Last updated: 2026-09-13

Introduction

Reeldo AI ("we", "us", or "our") respects your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share personal information when you use Reeldo AI and related services at https://www.reeldo.ai (the "Service").

Please read this Policy before using the Service. By using the Service, you acknowledge that you have read and agree to this Policy. We may update this Policy from time to time; material changes will be communicated as described in Section 13.


1. Data Controller

The data controller for the Service is:

For registered business address inquiries, contact [email protected].


2. Personal Information We Collect

2.1 Information You Provide

  • Account information: Name, email address, password (stored in hashed form), and profile details you choose to provide.
  • Payment information: Transaction amounts, payment status, and billing email. We do not store full card numbers — card data is processed by our payment processor (see Section 5).
  • Support communications: Emails, support tickets, and feedback you send to us.
  • Uploaded media: Images, videos, audio, text prompts, and other files you upload to generate content.
  • Third-party sign-in: If you sign in with Google or GitHub, we receive basic profile information authorized by you (such as email and name).

2.2 Information Collected Automatically

  • Device and network: IP address, device type, operating system, browser type, and time zone.
  • Usage data: Pages visited, features used, generation activity, session duration, and interaction logs.
  • Log data: Request timestamps, error logs, and performance diagnostics.

We do not intentionally collect precise location data unless you provide it voluntarily in support communications.


3. How We Use Personal Information

PurposeLegal basis (GDPR)
Provide and maintain the ServiceContract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interests
Service notifications (billing, security, policy updates)Legitimate interests
Security and fraud preventionLegitimate interests
Product improvement and analyticsLegitimate interests
Legal complianceLegal obligation
Marketing communications (optional)Your consent

We may aggregate or de-identify data for statistical analysis. Aggregated data cannot reasonably identify you.


4. Cookies and Tracking Technologies

TypePurposeCan disable?
Strictly necessaryMaintain login sessions and core functionalityNo
FunctionalLanguage preferences and UI settingsYes
AnalyticsAnonymous usage statistics to improve the productYes
Marketing (if used)Measure advertising effectivenessYes

Analytics tools we may use:

You can control cookies through your browser settings. Disabling strictly necessary cookies may affect Service functionality.


5. Sharing and Disclosure of Personal Information

We do not sell your personal information, including as "sale" is defined under applicable laws such as the CCPA.

We share information only in these circumstances:

  • Service providers: Cloud hosting, payment processing, email delivery, analytics, and AI model providers, bound by confidentiality and data-processing obligations. Payment card data is processed exclusively by our PCI-DSS compliant payment processor Waffo Pancake and is not stored on our servers.
  • Legal and regulatory requirements: When required by law, court order, or valid government request.
  • Business transactions: In connection with a merger, acquisition, or asset sale, with notice and continued protection obligations.
  • With your consent: For any other purpose with your explicit prior consent.

AI processing: To generate content, your prompts and uploaded media may be transmitted to third-party AI model providers solely to fulfill your generation request. We select providers with appropriate data handling practices.


6. Data Security

We implement measures including:

  • Encryption in transit: TLS / HTTPS for all web traffic.
  • Secure storage: Passwords and sensitive credentials are hashed or encrypted.
  • Access controls: Role-based access on a need-to-know basis.
  • Monitoring: Error logging and periodic security reviews.

If a security incident affects your rights, we will notify you and relevant authorities within 72 hours of discovery where required by law. Please keep your account credentials confidential and do not share them with others.


7. Data Retention

Data typeRetention periodAfter expiry
Account informationWhile account is active; 90 days after deletion requestDeleted or anonymized
Transaction records7 years (tax and accounting compliance)Archived or deleted
Support records3 yearsSecurely deleted
Security audit logs12 monthsSecurely deleted
Uploaded media for generationProcessed for the request; not retained longer than necessary for Service delivery unless you save outputs in your accountDeleted per operational schedule

8. Your Data Rights

Depending on your location, you may have the following rights. Contact [email protected] to exercise them. We will respond within 30 calendar days.

RightDescription
Right to knowUnderstand what data we collect and how we use it
Right of accessObtain a copy of your personal information
Right to rectificationCorrect inaccurate or incomplete information
Right to erasureRequest deletion in certain circumstances
Right to restrict processingRequest limited processing in certain cases
Right to data portabilityReceive your data in a machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent for consent-based processing

If you believe we have not handled your request properly, you may lodge a complaint with your local data protection authority.

You can also update profile information and delete your account through Settings → Profile where available.


9. Marketing Communications & Opt-Out

With your consent, we may send promotional emails about new features, plans, or offers. You may opt out at any time by:

Opting out of marketing does not affect service-essential notifications (billing receipts, security alerts, policy updates).


10. International Data Transfers

Our servers and service providers may be located in the United States, Singapore, and other regions. When we transfer data internationally, we use appropriate safeguards such as:

  • Standard Contractual Clauses (SCCs) with processors where applicable;
  • Transfers only to recipients with adequate protection levels where required.

11. Children's Privacy

The Service is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact [email protected] and we will promptly delete it.


12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate third-party services (such as OAuth sign-in providers). This Policy applies only to information we collect directly. We are not responsible for third-party privacy practices — review their policies before use.


13. Changes to This Policy

If we make material changes, we will notify you at least 15 days before the effective date via in-service notice or email to your registered address, and update the "Last updated" date at the bottom of this page. Continued use after the effective date constitutes acceptance.


14. Contact Us

This Privacy Policy is provided for informational purposes and does not constitute legal advice. Consult qualified legal counsel in your jurisdiction before relying on it for compliance decisions.

Last updated: September 13, 2026 · Reeldo AI · https://www.reeldo.ai