Privacy Policy

1. Preamble and Definitions

This Privacy Policy informs users of the ReelsAI platform about how their personal data is collected, processed, and protected, in accordance with Regulation (EU) 2016/679 of April 27, 2016 (GDPR) and French Data Protection Act No. 78-17 of January 6, 1978.

Definitions

• "Personal data": any information relating to an identified or identifiable natural person
• "AI-generated content": any text, image, video or other media created by the Service's artificial intelligence algorithms
• "Prompt": textual instruction provided by the User to guide AI content generation
• "Third-party AI service": external provider of artificial intelligence capabilities to which prompts are transmitted for processing

2. Data Controller

ReelsAI is the data controller for your personal data under the GDPR.

Data Protection Contact:

contact@miracetiparis.com

Given the nature and volume of processing, the appointment of a DPO is not mandatory under Article 37 of the GDPR. You may nevertheless contact us for any request regarding your personal data.

3. Data Collected

In providing the Service, we collect the following categories of data:

3.1 Registration data

• Email address
• Password (managed and stored by Supabase Auth)

3.2 Payment data

Payment processing is entirely delegated to our provider LemonSqueezy. We only retain:

• LemonSqueezy customer identifier
• Transaction history (amount, date, status)

Important: We never collect or store your credit card numbers, CVV codes, or complete banking information. This data is exclusively processed by LemonSqueezy in compliance with PCI-DSS standards.

3.3 Usage data and prompts

To provide the content generation Service, we collect:

• Text prompts entered by the User
• Generated content (videos, images, texts)
• Generation metadata (date, parameters)
• Credit consumption history

Warning: The prompts you enter are transmitted to our third-party artificial intelligence providers to enable content generation. By registering and using the Service, you expressly consent to this transfer. Please do not include sensitive personal data in your prompts.

3.4 Technical data

• IP address
• Browser type and version
• Performance data and error logs

4. Purposes and Legal Bases for Processing

In accordance with Article 6 of the GDPR, all data processing is based on an appropriate legal basis:

• Contract performance (Art. 6.1.b): Account creation and management, provision of generation service, payment processing
• Legitimate interest (Art. 6.1.f): Fraud prevention, Service security, improvement of our services
• Consent (Art. 6.1.a): Transmission of prompts to third-party AI services, marketing communications

Regarding processing based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Artificial Intelligence Processing

5.1 Nature of AI processing

The Service uses artificial intelligence technologies to automatically generate content (videos, images, texts) from your instructions (prompts).

5.2 Third-party AI services

To provide generation capabilities, your prompts are transmitted to the following providers:

5.3 Consent to AI processing

By registering and using the generation Service, you expressly consent to your prompts and reference images being transmitted to our third-party AI providers located in the United States.

You may withdraw this consent at any time by ceasing to use the content generation features.

5.4 Limitations and User acknowledgment

You acknowledge and accept that:

• AI-generated content may contain errors, inaccuracies, or biases
• Results may not exactly match your expectations or instructions
• AI models cannot guarantee absolute originality of generated content
• You are solely responsible for verifying and using generated content
• ReelsAI cannot be held liable for generated content or its use by you or third parties

6. Subcontractors and Recipients

In accordance with Article 28 of the GDPR, we use the following subcontractors, all bound by data processing agreements:

• Supabase, Inc. (Singapore) – Database, authentication, storage
• LemonSqueezy (United States) – Payment processing
• Replicate, Inc. (United States) – AI video/image generation
• Groq, Inc. (United States) – AI text generation
• Resend, Inc. (United States) – Transactional emails
• Sentry (United States) – Error monitoring and tracking
• Cloudflare, Inc. (United States) – CAPTCHA protection, CDN
• Vercel, Inc. (United States) – Web hosting

Each subcontractor is responsible for GDPR compliance for the processing it performs.

We never sell your data to third parties.

7. International Transfers

Your data is transferred to the United States and Singapore. These transfers are governed by the following mechanisms:

• EU-U.S. Data Privacy Framework (DPF): European Commission adequacy decision of July 10, 2023
• Standard Contractual Clauses (SCC): Commission Implementing Decision (EU) 2021/914 of June 4, 2021

Despite the safeguards in place, you are informed that third countries may have legislation offering a different level of protection than the European Union. By using the Service, you accept these residual risks.

8. Your GDPR Rights

In accordance with Articles 15 to 22 of the GDPR, you have the following rights:

• Right of access (Art. 15): Obtain confirmation of processing and a copy of your data
• Right of rectification (Art. 16): Correct inaccurate or incomplete data
• Right to erasure (Art. 17): Request deletion of your data under legal conditions
• Right to restriction (Art. 18): Temporarily limit processing
• Right to portability (Art. 20): Receive your data in a structured format
• Right to object (Art. 21): Object to processing based on legitimate interest
• Right to withdraw consent: At any time, without affecting the lawfulness of prior processing

To exercise your rights, send a written request to the email address below. We will respond within one month, extendable by two months in case of complexity.

Exercising these rights is free. However, in case of manifestly unfounded or excessive requests, we reserve the right to charge a reasonable fee or refuse to comply (Art. 12.5 GDPR).

9. Security

We implement appropriate security measures to protect your data. Password and authentication security is managed by our provider Supabase Auth.

10. Limitation of Liability

10.1 Exclusion of indirect damages

In no event shall ReelsAI be liable for any indirect, incidental, special, or consequential damages, including but not limited to:

• Loss of profits, revenue, or business opportunities
• Loss of data or file corruption
• Damage to reputation or image
• Business interruption

10.2 Liability cap

ReelsAI's total cumulative liability for any claim arising from or related to the Service shall in no event exceed the sum of one hundred (100) euros.

10.3 AI-specific exclusions

ReelsAI expressly disclaims any liability for:

• Errors, inaccuracies, or biases in AI-generated content
• User's use of generated content
• Third-party claims related to generated content (copyright, trademarks, defamation)
• Unavailability of third-party AI services

10.4 Force majeure

ReelsAI shall not be liable for any failure resulting from circumstances beyond its reasonable control, including: natural disasters, network failures, cyber attacks, government decisions, or unavailability of third-party providers.

11. Indemnification Clause

11.1 Indemnification commitment

You agree to indemnify, defend, and hold harmless ReelsAI, its officers, and service providers from any claim, loss, damage, or expense (including attorney fees) resulting from:

• Your use of the Service
• The content of your prompts
• Content you generate and its use
• Any violation of third-party rights, including intellectual property rights

11.2 Survival

This indemnification obligation shall survive the termination of your account.

12. Cookies

We use essential cookies for service operation (authentication). You can manage them through your browser settings.

13. Minors

Our service is not intended for persons under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us immediately.

14. Modifications

ReelsAI reserves the right to modify this Policy at any time. Modifications take effect upon publication on this page.

Continued use of the Service after modification constitutes acceptance of the modified Policy.

If you do not accept the modifications, you may delete your account.

15. Applicable Law and Jurisdiction

This Policy is governed by French law. In case of dispute, and after attempt at amicable resolution, French courts shall have sole jurisdiction.

16. Contact

For any questions about this privacy policy:
Email : contact@miracetiparis.com