Legal
Privacy policy
Last updated: 2026-09-09
Draft pending legal review. This text is a starting point, not legal advice. A lawyer must review it before contracting with customers.
This is an English translation provided for convenience. If it differs from the Spanish version, the Spanish version prevails.
Data controller
[RAZÓN SOCIAL O NOMBRE COMPLETO], tax ID (NIF) [NIF/CIF], registered at [DOMICILIO FISCAL]. Contact: hello@reelaia.com.
What data we process
- Sample reel and waiting list: the email you leave on the home page and, if you add it, your store’s website, together with the page you came from. We use them to prepare your sample reel and to write to you, and we delete them whenever you ask.
- Reelaia Studio contact: your name, email, brand, ad spend range and the message you leave, together with the page you came from. We use them to prepare the call and to write to you, and we delete them whenever you ask.
- Account: your email and password (encrypted; we never see it).
- Billing: payment details are handled directly by Stripe. We only store a customer ID, your plan and the status of your subscription — never your card number.
- Content you upload: the product photos and the description you write, plus the videos generated from them.
- Usage: technical logs of the generated videos, their status and their errors, so we can support you.
We don’t use analytics or advertising cookies. The only cookies are session cookies, needed to keep you signed in.
Purposes and legal basis
To provide the service you have contracted and to bill for it (performance of a contract, art. 6.1.b GDPR), to meet our accounting and tax obligations (art. 6.1.c), and for the security of the service and the prevention of abuse (legitimate interest, art. 6.1.f).
We don’t use your photos or videos to train AI models.
Who else processes it
We work with these providers, each under its own data processing agreement:
- Supabase — accounts and database (servers in the EU).
- Cloudflare R2 — storage of photos and videos.
- Stripe — payments and billing.
- Vercel — hosting of this website and the visit count, which is anonymous: it uses no cookies and doesn’t store who you are.
- DonDominio — the reelaia.com email, through which we receive the notice of each request.
- Hetzner — servers where the service runs (Germany).
- OpenRouter and, through it, the providers of the AI models that generate the script and the video (including Anthropic, Google, HeyGen and Kling). Your product photo is sent to those models so the video can be generated.
International transfers
Some of those model providers are outside the European Economic Area, including the United States and China. When your photo is processed by one of them, it leaves the EEA. These transfers rely on the European Commission’s standard contractual clauses or on adequacy decisions, depending on the provider. If this is a problem for your company, write to us before signing up.
How long we keep it
For as long as your account is active. If you cancel it, we delete the photos and videos within a reasonable period, and keep billing data for the periods required by tax law (six years in Spain).
Your rights
You can access, rectify or erase your data, restrict or object to its processing, and request its portability by writing to hello@reelaia.com. You can also complain to the Spanish Data Protection Agency (www.aepd.es) if you believe we haven’t handled your request properly.