Privacy Policy

What we collect

• What you create: briefs, scripts, change requests, brand settings (name, colours, logo), files you upload, and the videos and captions we render for you.
• Connected social accounts: when you connect YouTube, Instagram or TikTok, we receive an access token (and, where the platform provides one, a refresh token) plus the account or channel name. We never see your password.
• Usage records:for each video build, change and social post we keep the request description, timestamps, the estimated AI cost, the platform posted to and the link to the post, plus the full text of what was sent to Claude and its reply, so we can bill and support the app that made the request. When an app identifies its users, records carry that app's own user id (never your email).
• App registrations:when a business registers its app, the app's name and website and the name and work email of the person registering it, so we can approve the app and contact them about it and its bill.
• Cookies: only what is needed to keep you signed in (a session cookie) or to keep an embedded studio scoped to its app. We use no advertising or analytics cookies.

How we use it

Only to provide the service: drafting and revising your video, rendering it, letting you download or share it, publishing it to the account you connected when you ask us to, and showing usage and cost reports. We do not sell your data, use it for advertising, or use it to train AI models.

YouTube, Instagram and TikTok

Brandreel uses the YouTube API Services to upload videos to the YouTube channel you connect. We request permission to upload videos and to read your channel name. We use that access only to upload the videos you choose to publish, with the title, description and privacy setting you pick, and we do not read, change or delete anything else on your channel. By connecting YouTube you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. You can revoke Brandreel's access at any time from your Google Account permissions.

For Instagram (through Meta's Instagram API) and TikTok (through its Content Posting API) we likewise only publish the videos you choose, with the caption you approve, to the account you connected. Access can be revoked in the app (Disconnect), in Instagram or Facebook's “Apps and websites” settings, or in TikTok's “Manage app permissions”.

Social access tokens are stored encrypted (AES-256-GCM) on our server, kept separate for each app that uses Brandreel, and are deleted and revoked when you disconnect.

Who processes your data

We share content with these services only to do the work you ask for:

• Anthropic (Claude): writing and revising scripts and captions.
• fal.ai and HeyGen: generating AI video clips, images, music and presenters.
• OpenAI: voiceover and caption timing.
• Pexels: stock footage search (search terms only).
• Amazon Web Services: hosting, and storage of rendered videos in a private S3 bucket.
• YouTube, Instagram and TikTok: only when you publish to them.

How long we keep it

• Projects, uploads and rendered videos: until you delete the reel or version.
• Temporary render files on the server: removed automatically after 7 days.
• Connected social accounts: until you disconnect them.
• Usage and posting records: kept for billing and support, and removed on request (see Data deletion).

Security

Traffic is encrypted with HTTPS, the studio is behind a sign-in, video storage is private and shared only through expiring links or share pages you create, and social tokens are encrypted at rest.

Your choices and rights

You can disconnect accounts, delete reels and versions, and ask us for a copy of your data or to delete all of it. See Data deletion or email hello@getbrandreel.com. Brandreel is not directed at children under 13.

Changes

If this policy changes we will update the date above, and for material changes notify connected users before they take effect.