Privacy Policy

Reelway (“Reelway”, “we”, “us”) provides a video production management platform for creative studios: client and project management, editing pipelines, frame-accurate client reviews, and invoicing (the “Service”). This policy covers the Reelway website, the Reelway web application, and any Reelway integration with third-party platforms, including Meta Platforms, Inc. products.

Reelway plays two roles. For account and billing data about the people who sign up, we are the controller. For content a studio puts into its workspace — its clients’ contact details, videos, comments, and invoices — the studio is the controller and Reelway is a processor acting on the studio’s instructions. If you are a studio’s client or reviewer and want to exercise rights over that content, please contact the studio first; we will help them respond.

Information you give us.

• Account details: name, email address, password (stored only as a salted hash), workspace name and address, profile photo, and role.
• Team invitations: the email addresses and roles of teammates you invite.
• Workspace content: clients, projects, videos, uploaded footage and cuts, YouTube links, comments and annotations, tasks, invoices, budgets, and recorded payments.
• Email settings: if you configure your own SMTP server, the host, port, username, and credentials needed to send email on your behalf.
• Support messages and anything else you send us.

Information from client reviewers. People who open a review link are not required to create an account. We collect the name they enter, their timestamped comments and drawings, and their approval or download actions.

Information collected automatically.

• Device and log data: IP address, browser type, operating system, pages and API requests, timestamps, and error reports.
• Authentication data: session and refresh tokens that keep you signed in.
• Usage data: features used and actions taken in the app, used for security, support, and product improvement.

Payment information. Subscription payments are processed by our payment provider, Kashier. We receive payment status, order and transaction references, amount, and plan, but we do not receive or store full card numbers.

Information from Meta and other platforms. If you choose to sign in with, or connect, a Meta product (for example Facebook Login), we receive only the permissions you approve — typically your name, email address, and profile picture, plus a platform user ID. We use this data only to authenticate you and operate the features you requested, never to build advertising profiles. See Meta platform data.

• Provide, operate, secure, and maintain the Service, including creating workspaces and authenticating users.
• Store, stream, and deliver the videos and files you upload, and run client review links.
• Process subscriptions and send invoices, receipts, and payment notifications.
• Send service messages — invitations, review notifications, security alerts, and changes to our terms.
• Provide support and respond to your requests.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Understand how the Service is used so we can improve it.
• Comply with legal obligations and enforce our Terms of Service.

Legal bases (where laws such as the GDPR apply): performance of our contract with you, our legitimate interests in running and securing the Service, compliance with legal obligations, and your consent where we ask for it. You can withdraw consent at any time.

We do not sell personal data, we do not share it for cross-context behavioral advertising, and we do not use your workspace content to train AI models.

We share personal data only in these situations:

• Within your workspace. Owners, administrators, and team members can see content according to their role. Anyone you send a review link to can see the video and comments that link exposes.
• Service providers that process data for us under contract: cloud hosting and object storage for files, email delivery, and payment processing (Kashier). They may use the data only to provide their services to us.
• Third-party platforms you connect, such as Meta or YouTube, limited to what the integration needs.
• Legal and safety. When required by law, court order, or valid government request, or to protect the rights, safety, and security of users, the public, or Reelway.
• Business transfers. In a merger, acquisition, or sale of assets, subject to this policy or notice to you of any material change.

Where Reelway connects to Meta products, we follow the Meta Platform Terms and Developer Policies. Specifically:

• We request only the permissions needed for a feature you use, and only after you grant them.
• We use Meta user data only to provide and improve the experience you asked for inside Reelway.
• We do not sell Meta user data, share it with data brokers or advertising networks, or use it for surveillance or to make decisions about eligibility for credit, employment, insurance, or housing.
• We share Meta user data only with service providers described above, as required by law, or with your consent.
• We keep it only as long as needed to provide the feature, and delete it when you disconnect, delete your account, or ask us to.

You can remove Reelway’s access at any time in your Facebook account under Settings → Apps and Websites. To have the data we hold deleted, follow the steps on our Data Deletion page.

We use only what is needed to run the Service: authentication tokens that keep you signed in and protect against fraud, and local-storage entries that remember preferences such as light or dark theme. We do not use third-party advertising or cross-site tracking cookies. Because these are strictly necessary, they are not optional, but you can clear them in your browser settings (you will be signed out).

We keep account and workspace data while your account is active. When a workspace is deleted, we remove its content from production systems within 30 days and from backups within a further 90 days, except where we must retain limited records (such as invoices, payment records, and security logs) to meet legal, tax, accounting, or dispute-resolution obligations. Review links stop working when they expire (7, 14, or 30 days) or when revoked.

We protect data with encryption in transit (HTTPS/TLS), hashed passwords, short-lived access tokens, role-based access control, tenant isolation between workspaces, and access-restricted storage. No system is perfectly secure. If we learn of a breach affecting your personal data, we will notify you and the relevant authorities as the law requires. Please use a strong, unique password and tell us promptly if you suspect unauthorized access.

Reelway and its providers may process data in countries other than your own. Where we transfer personal data across borders, we rely on appropriate safeguards such as contractual protections and provider commitments, as required by applicable law.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy;
• correct inaccurate or incomplete data (most of it can be edited directly in your profile and studio settings);
• delete your data and account;
• restrict or object to certain processing, and withdraw consent;
• data portability; and
• lodge a complaint with your local data protection authority.

To exercise a right, email [email protected] or use the Data Deletion page. We may need to verify your identity first and will respond within the time the law requires (generally within 30 days). We will not discriminate against you for exercising your rights.

The Service is built for businesses and is not directed to children. You must be at least 18 years old, or the age of majority where you live, to create a workspace. We do not knowingly collect personal data from children under 13. If you believe a child has given us data, contact us and we will delete it.

We may update this policy as the Service or the law changes. When we make material changes, we will update the “Last updated” date and notify account holders by email or in the app before the changes take effect.

Questions, requests, or complaints about privacy? Email [email protected]. For data deletion requests, see Data Deletion. Our Terms of Service also apply to your use of Reelway.