Privacy Policy

This Privacy Policy explains how ConvoReel ("we", "us") handles personal data when you use our website and AI video agent (the "Service"). For questions or requests, email support@convoreel.com.

1. Data we collect

Account data. Your name, email address, and a securely hashed password. If you sign in with a third-party provider such as Google, we receive your name, email and profile picture from that provider.

Your content. Prompts and chat messages, files you upload (such as logos, images and audio), brand kits, project files, voiceovers, and rendered videos.

Billing data. Your plan, credit balance and transaction history. Card details are collected and stored by Stripe, our payment processor; we never see your full card number.

Usage and technical data. Server logs such as IP address, browser type, pages requested, timestamps, and errors, plus records of credit usage, render jobs and agent activity needed to operate and bill the Service.

Product analytics. Pages visited, buttons clicked, referring site and campaign tags, device and browser type, and key product actions such as signing up, creating a project, rendering a video, and paying. If you accept analytics cookies, we also record sessions on our marketing pages (home, pricing, blog, sign-up) with all form inputs masked. We never record sessions inside the studio or your workspace.

Support. What you send us when you contact support.

2. How we use it

Purpose	Data	Legal basis (EEA/UK)
Create and run your account	Account data	Contract
Make, store and render your videos	Your content	Contract
Take payments and track credits	Billing data	Contract; legal obligation
Keep the Service secure, prevent abuse and fraud	Usage data, content when flagged	Legitimate interests
Fix bugs and improve reliability	Usage data	Legitimate interests
Measure sign-ups, activation and purchases	Product analytics tied to your account ID	Legitimate interests
Analytics cookies and session recordings on marketing pages	Product analytics	Consent
Reply to support requests	Support data	Contract; legitimate interests
Send essential service emails (billing, security, policy changes)	Email address	Contract

We do not use your content to train AI models, and we do not use your data for advertising. We do not send your prompts, uploads or videos to our analytics provider.

3. AI processing

To make your video, your prompts, messages and relevant files are sent to third-party AI model and speech providers that process them on our behalf and return the result. Web research requests are sent to search and content services. These providers act as our processors or under their API terms, and receive only what is needed for the task.

4. Who we share data with

We share personal data only with service providers that help us run the Service:

• Cloudflare — hosting, compute, content delivery and file storage
• Supabase — database hosting
• Stripe — payments and invoices
• PostHog — product analytics and session recordings on marketing pages
• AI model, speech and search providers — generating scripts, scenes, narration and research, as described above
• Google — only if you choose to sign in with Google

We may also disclose data if required by law, to protect the rights and safety of users or the public, or as part of a merger or acquisition (in which case this policy will continue to apply to your data).

We do not sell or rent personal data, and we do not "share" it for cross-context behavioural advertising.

5. Cookies and local storage

• Strictly necessary: cookies prefixed convoreel keep you signed in and secure your session. The studio also keeps small interface preferences in your browser's local storage. These are always on.
• Analytics (optional): if you click Accept on the cookie notice, PostHog stores an identifier in a cookie and local storage so we can tell returning visitors apart and see which pages lead to sign-ups. If you click Decline, PostHog stores nothing on your device and only counts the visit using a privacy-preserving hash calculated on its servers.

To change your choice, clear this site's cookies and local storage; the notice will appear again.

6. International transfers

Our providers may process data in the United States and other countries. Where data from the EEA, UK or Switzerland is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Retention

• Account and content: kept while your account is active. Projects and renders you delete are removed from active storage; temporary working files are cleaned up automatically.
• After you close your account: we delete your account data and content within 30 days, except backups, which roll off within a further 30 days.
• Billing records: kept as long as tax and accounting law requires.
• Server logs: kept for a limited period for security and debugging.

8. Security

We use encryption in transit, hashed passwords, isolated sandboxes for agent work, and access controls on storage. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as the law requires.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights.

To make a request, email support@convoreel.com from the address on your account. We will respond within 30 days. If you are in the EEA or UK, you can also complain to your local data protection authority.

10. Children

The Service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes

We may update this policy. We will post the new version here with a new date, and tell you by email or in the product if the changes are material.