Privacy Policy

This Privacy Policy explains how MakeMyReel ("MakeMyReel", "we", "us") processes personal data when you use our websites, applications, content calendar, AI tools, APIs, support channels and connected social-media integrations.

MakeMyReel is the controller for the processing described here unless a feature identifies a different controller. Privacy requests can be sent to privacy@makemyreel.ai and general support requests to support@makemyreel.ai.

We process account and workspace data such as your email address, authentication identifiers, subscription and entitlement status, profile settings, legal acceptances and support communications.

We process content and configuration you provide, including prompts, media, brand assets, AI-character profiles, captions, schedules, publishing approvals and automation settings.

We process technical and security data such as IP address, device and browser information, application version, diagnostics, audit events, rate-limit signals and security logs.

When you choose to connect Instagram, Facebook Pages, Threads, TikTok or YouTube, we process the provider account identifiers, profile or Page information, granted permissions, encrypted access and refresh credentials, connection health, publishing destinations and provider responses needed to provide that integration.

The current publishing integrations request only the permissions needed to identify destinations and publish content you approve. Depending on the provider, these may include Instagram professional-account publishing, Facebook Page publishing, Threads publishing, TikTok profile and content posting, or YouTube channel discovery and uploads.

We do not require a personal Facebook profile as a publishing destination. Instagram publishing requires a professional Business or Creator account under the provider's rules. A Facebook Page can be connected separately when you want to publish to that Page.

We use data to authenticate users; provide and secure the service; generate and organize content; connect accounts; display exact publishing destinations; schedule, publish and reconcile approved posts; prevent duplicate delivery; provide support; investigate abuse; and comply with legal obligations.

We rely on performance of a contract to provide requested product features, legitimate interests for security and service improvement, consent where required, and legal obligations where applicable.

We use vetted service providers for hosting, databases, authentication, encrypted credential storage, media processing, AI generation, observability, communications and billing. This currently includes infrastructure such as Vercel and Supabase and may include model or media-processing providers selected for a requested workflow.

Connected social platforms process data under their own terms and privacy policies. We send them only the content, metadata and authorization necessary for the action you request. We do not sell connected-account credentials or use them to publish without an assigned destination and the required product approval flow.

We share personal data only with service providers, connected platforms and professional advisers where necessary to operate, secure or support the service, or where disclosure is required by law. We may also disclose data in connection with a corporate transaction subject to appropriate safeguards.

Where data is processed outside your country, we use appropriate transfer safeguards where required, such as adequacy decisions, contractual safeguards or other lawful transfer mechanisms.

Connected-platform credentials are retained only while the connection is active or while limited safe cleanup of already-accepted provider work is required. Disconnecting or a valid provider deletion request removes credentials and disables associated publishing routes.

A valid data-deletion request also removes or anonymizes provider-derived account identifiers and profile fields. Minimal security, legal, billing and non-reversible audit records may be retained only for their applicable purpose and retention obligation; they cannot be used to reconnect or publish to the deleted account.

Other account, content and operational data is retained only as long as reasonably necessary to provide the service, satisfy your settings, protect the service, resolve disputes and meet legal obligations.

We use safeguards designed to protect personal data, including encrypted transport, access controls, least-privilege service credentials, encrypted provider-token storage, audit trails and credential revocation or erasure workflows. No system can guarantee absolute security.

You can disconnect an individual social account in Social Media Accounts without deleting your MakeMyReel account. You can also delete your MakeMyReel account from the application settings or request access, correction, export, restriction, objection or deletion by contacting privacy@makemyreel.ai.

Depending on your location, you may have additional privacy rights and the right to complain to your local supervisory authority. We may need to verify your identity before fulfilling a request.

MakeMyReel is not intended for children. You must meet the minimum age required by applicable law and by each connected platform.

We may update this policy when our services or legal obligations change. We will publish the updated version with a revised date and provide additional notice where required.

Privacy and deletion requests: privacy@makemyreel.ai. Product support: support@makemyreel.ai.