Privacy & Cookies Notice

This Privacy & Cookies Notice ("Notice") explains how RevReels ("RevReels," "we," "us," "our") collects, uses, shares, and protects information when you use our website, applications, and services (collectively, the "Service").

If you have questions or want to exercise your privacy rights, contact us at [email protected].

RevReels is operated by xAutomations (pending incorporation). For purposes of data protection laws (including the EU General Data Protection Regulation "GDPR"), xAutomations is the "data controller" for the personal data described in this Notice unless stated otherwise.

We collect information in three main ways: (a) information you provide, (b) information collected automatically, and (c) information from third parties.

2.1 Information you provide

• Account information: name, email address, password (stored in hashed form), and account preferences.
• Billing information: purchase history, credit purchases, invoices/receipts. Payment card details are generally processed by our payment processor(s) and are not stored by us in full.
• User content (uploads): images you upload (e.g., listing photos), branding assets (logos), text you add, and project metadata you create (project names, notes).
• Communications: messages you send to us (support requests, feedback, survey responses).

2.2 Information collected automatically

When you use the Service, we may automatically collect:

• Device and usage data: IP address, browser type, device identifiers, operating system, timestamps, pages/screens viewed, actions taken (e.g., uploads, exports), and referring URLs.
• Log data: error logs, performance data, and diagnostics.
• Approximate location: derived from IP address (city/region-level), not precise GPS location.

2.3 Information from third parties

• Payment processors (e.g., Paddle): confirmation of payment, billing status, fraud signals, and subscription/transaction identifiers (if applicable).
• Analytics and product tooling providers: usage insights and event data (depending on what is enabled).
• Third-party AI/API providers: processing metadata necessary to provide outputs (see Section 6).

We use information to:

• Provide the Service: create accounts, process uploads, generate clips and outputs, deliver downloads, and manage credits.
• Process payments and prevent fraud: handle transactions, verify payment, detect abuse, and manage disputes/chargebacks.
• Maintain and improve the Service: monitor performance, debug issues, optimize reliability, and improve features.
• Communicate with you: respond to support inquiries, send service messages (e.g., receipts, security alerts), and provide product updates.
• Security and compliance: enforce our Terms, protect users, prevent misuse, and comply with legal obligations.
• Memberships & Subscriptions: manage subscriptions, recurring billing, renewals, and credit allocations associated with subscription plans.

If you are in the EEA/UK, we process personal data under the following legal bases:

• Contract: to provide the Service you request (e.g., generating outputs, managing credits).
• Legitimate interests: to secure, maintain, and improve the Service; prevent fraud; and understand usage (balanced against your rights).
• Consent: where required for non-essential cookies and similar technologies (see Cookies section).
• Legal obligation: where we must comply with applicable laws, tax rules, or lawful requests.

For analytics, marketing, and similar tracking technologies, we rely on consent where required by applicable law.

We share information only as needed to operate the Service, including with:

5.1 Service providers (processors)

We may share data with vendors that help us provide the Service, such as:

• Payment processing: Paddle or other payment processors.
• Cloud hosting and storage: infrastructure providers that store uploads/outputs and run the Service.
• AI/API providers: third-party services used to generate clips/outputs.
• Analytics and monitoring: tools used to understand performance and usage.
• Customer support: email/helpdesk tools.

These vendors are authorized to use personal data only to perform services for us and are required to protect it.

Third-party providers may process data according to their own privacy policies and terms. We are not responsible for third-party privacy or data handling practices beyond our contractual obligations.

5.2 Legal and safety

We may disclose information if we believe it is reasonably necessary to:

• comply with law, regulation, legal process, or governmental request;
• enforce our Terms;
• detect or prevent fraud or security issues;
• protect the rights, property, or safety of RevReels, our users, or the public.

5.3 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate safeguards.

RevReels generates outputs using automated processing, including third-party APIs and infrastructure.

6.1 Our position on training

We do not currently plan to use your uploaded images or outputs to train our own general-purpose AI models.

6.2 Third-party training uncertainty

Because we rely on third-party providers, we cannot guarantee that these providers will not use data submitted through their services for their own service improvement, model training, or similar purposes under their terms.

If you require strict guarantees regarding training or downstream use of content, you should not upload content to the Service.

We do not guarantee that Outputs will be unique, free of third-party rights, or suitable for regulatory or advertising compliance without user review.

We keep personal data only as long as necessary for the purposes described in this Notice, including legal, accounting, and security needs.

7.1 Account data

We retain account and transaction records as needed to operate the Service and comply with legal obligations.

7.2 User content and outputs

After account deletion: we may retain uploads and outputs for up to 90 days, then delete them, subject to legal obligations and technical limitations.

Active accounts: to manage storage and operating costs, we may delete or remove access to outputs (including rendered videos) after a period of time even if your account remains active. You are responsible for downloading and backing up outputs you want to keep.

Exporting or downloading Outputs does not guarantee long-term storage or hosting availability within the Service.

8.1 EEA/UK rights

If you are in the EEA/UK, you may have the right to:

• access your personal data;
• correct inaccurate data;
• delete data ("right to be forgotten");
• restrict or object to certain processing;
• request data portability;
• withdraw consent where processing is based on consent.

You may also lodge a complaint with your local data protection authority.

8.2 Other regions (including the United States)

Depending on where you live, you may have rights to access, delete, or correct certain personal data. We will respond to verified requests as required by applicable law.

8.3 How to exercise rights

Email [email protected] with your request. To protect you, we may need to verify your identity before fulfilling certain requests.

8.4 California and Similar U.S. State Privacy Rights

Residents of certain U.S. states (such as California, Virginia, Colorado, Connecticut, and Utah) may have rights under applicable state privacy laws, including rights to access, delete, or correct personal data and to opt out of certain types of data sharing for targeted advertising.

We will honor verified requests in accordance with applicable law.

We may process and store information in countries outside your country of residence, including locations where our vendors operate.

If you are in the EEA/UK and your data is transferred to countries that may not provide an equivalent level of data protection, we use appropriate safeguards (such as Standard Contractual Clauses or equivalent measures) where required.

We implement reasonable technical and organizational measures designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We regularly review and update security practices in light of evolving threats and industry standards.

The Service is not intended for children under 18. We do not knowingly collect personal data from children.

The following sections explain how RevReels uses cookies and similar technologies.

Cookies are small text files stored on your device. We also use similar technologies (such as pixels and local storage) that help us provide and improve the Service.

We may use:

13.1 Strictly necessary cookies

Required for core functionality such as logging in, security, fraud prevention, and basic site operations. These do not require consent in the EU/EEA.

13.2 Functional cookies

Help remember preferences (e.g., language, settings). These may require consent in some jurisdictions.

13.3 Analytics cookies

Help us understand how the Service is used (e.g., pages visited, features used) so we can improve it. These generally require consent in the EU/EEA.

13.4 Marketing cookies

Used to measure ad performance and show relevant ads. If used, these require consent in the EU/EEA.

You can control cookies in several ways:

• Cookie banner/settings: where available, you can accept, reject, or customize non-essential cookies.
• Browser controls: you can block or delete cookies through your browser settings. Note that blocking some cookies may affect functionality.
• Device settings: some mobile devices provide controls for tracking and ad personalization.

If you are in the EU/EEA/UK, we will request your consent before placing non-essential cookies where required by law.

You can change or withdraw your cookie consent at any time through the cookie settings tool (where available).

We may update this Notice from time to time. If changes are material, we will provide notice by posting an updated version in the Service or by other appropriate means. The "Effective Date" at the top indicates when this Notice was last updated.

For privacy questions, requests, or concerns, contact: [email protected]