Privacy policy

Who we are

Simple Reels is a service run by Simple Reels Limited (United Kingdom; company number 17504037, registered office 58 Broton Drive, Halstead, CO9 1HB, England) that creates short videos for businesses and, when a customer asks it to, publishes them to the customer's own social media accounts.

What we collect

Your account: your email address and the workspace you belong to.

Your content: the brand details, series settings, topics, images and other files you add, and the scripts, images, voiceovers and videos the service creates for you.

Connected accounts: if you connect TikTok, Instagram, Facebook or YouTube, we store the access tokens those platforms give us, encrypted, plus the account name and the posts we publish for you.

Usage: which videos were made, when, and what they cost to produce, so we can show your usage and bill correctly.

How we use it

Only to run the service for you: to make your videos, show them to you for approval, publish them where you tell us to, and keep your account working. We don't sell your data and we don't use it for advertising.

We may also use anonymised or aggregated information about how videos are made and perform (not your contact details) to improve Simple Reels, including training our own models.

Who processes it for us

Supabase (database, sign-in and file storage, EU region), Railway (hosting), Anthropic (writing scripts), fal.ai (images and video clips), ElevenLabs (voiceovers), Airtable (only if you connect a topic source), Meta, Google and TikTok (only when you publish to them), and later a payment provider for subscriptions. Each receives only what it needs for its part of the work.

How we protect your data

Everything travels encrypted (HTTPS/TLS) between your browser, our servers and the services we use, and our database and file storage are encrypted at rest.

Access tokens for your connected accounts (including Google/YouTube) get a second layer: we encrypt them ourselves with AES-256-GCM before storing them, and the key is kept separately from the database. They are only decrypted at the moment we publish a video you approved.

Each business's data is kept apart: database rules (row-level security) let people see only their own workspace, and your videos and files sit in private storage that is opened only through short-lived links.

Only the few people who run Simple Reels can reach the systems and only when needed to support you. Secret keys are kept in our hosting's protected settings, never in code.

Our database is in the EU. If a security problem ever affected your data, we would tell you and the authorities as the law requires.

YouTube and Google

When you connect a YouTube channel, Simple Reels uses YouTube API Services. By connecting, you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy (https://policies.google.com/privacy) applies to Google's handling of your data.

We use Google access only to upload the videos you approved to the channel you chose, and to read that channel's name so you can see which channel is connected. We don't read your viewing history or other private data, and we don't share Google user data with anyone or use it for advertising or to train AI.

Your Google access tokens are stored encrypted and deleted when you disconnect. You can disconnect in Accounts at any time, or revoke Simple Reels' access in your Google account at https://myaccount.google.com/permissions.

How long we keep it

For as long as your account is open. When you close it, we delete your content and connected-account tokens within 30 days, except records we must keep by law (for example invoices).

Your rights

You can ask to see, correct, export or delete your data, and you can disconnect a social account at any time from the app or from the platform's own settings. If you are in the UK or EU you can also complain to your data protection authority.

Cookies

We use only the cookies needed to keep you signed in and remember your language. No tracking or advertising cookies.