Privacy Policy

1. Introduction

ReelyArt LLC ("ReelyArt", "we", "our", "us") respects your privacy. This Privacy Policy explains what data we collect, how we use it, with whom we share it, and what rights you have regarding your personal information when you use the ReelyArt platform.

By using ReelyArt, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Platform.

2. Information We Collect

Account Information

• Email address and username
• Profile information you choose to provide
• Authentication data (managed via Supabase Auth)

Billing & Subscription Data

• Subscription plan type and billing cycle
• Payment method type (e.g., card brand, last 4 digits) — provided by Stripe, not stored by us
• Transaction history and invoice records
• Credit balance, credit type (subscription vs. permanent), and usage history

Content Data

• Images and files you upload to the Platform
• AI-generated visuals, designs, and project files
• Prompts and inputs submitted to AI generation features
• NFT and Web3 project metadata fetched via OpenSea API when using Lab features

Usage Data

• IP address and general location (country/region)
• Browser type, device type, and operating system
• Pages visited, features used, and interaction data
• Error logs and performance diagnostics

3. How We Use Your Information

We use collected data to:

• Create and manage your account and subscription
• Process payments and manage credit balances
• Deliver AI generation features using your inputs and uploaded content
• Save, display, and export your projects and generated content
• Communicate with you regarding your account, billing, or support requests
• Improve platform performance, reliability, and user experience
• Detect and prevent fraud, abuse, and policy violations

We do not sell your personal data to third parties.

4. AI Processing

Your uploaded content, prompts, and inputs are transmitted to third-party AI systems to deliver generation features. The specific providers we use are:

• OpenAI — language understanding, prompt processing, and image generation. Processes text prompts and reference images you provide.
• Google — multimodal image generation and image revision. Processes images and prompts for generation and editing features.
• Replicate — image and video generation and background removal. Processes prompts and reference images for background and animated content features, and processes images you submit for background removal.

Your content is transmitted to these providers solely to fulfill your generation request. We do not use your uploaded content or generated outputs to train AI models, and our service agreements with these providers restrict such use.

5. Third-Party Services

We use the following trusted third-party services to operate the Platform:

• Stripe — payment processing and subscription management. Handles all card data in compliance with PCI DSS standards.
• Supabase — database, file storage, and authentication infrastructure. Hosted in the eu-central-1 region (Frankfurt, Germany).
• Vercel — platform hosting, CDN, and edge delivery.
• OpenSea API — NFT collection and wallet metadata used in Lab features. No personal wallet data is stored by us.
• OpenAI, Google, Replicate — AI generation infrastructure (see Section 4).

Each provider processes data only to the extent necessary to support Platform functionality and is bound by their own privacy policies and data processing agreements.

6. Payment Data

All payment transactions are processed by Stripe, Inc. We do not store, have access to, or transmit your full credit card number, CVV, or bank account details. Stripe processes and stores payment information in accordance with PCI DSS Level 1 compliance standards.

We store only non-sensitive billing references such as your Stripe customer ID, subscription status, and invoice history for account management purposes.

By making a purchase, you also agree to Stripe's Privacy Policy.

7. Cookies & Sessions

ReelyArt uses essential session cookies and local storage to maintain your authenticated state, managed through Supabase Auth. These are required for the Platform to function correctly.

• We do not use third-party advertising or behavioral tracking cookies.
• Session data is stored securely and cleared upon logout or session expiry.
• With your consent, we use anonymized analytics (no persistent cookies) to understand general usage patterns and improve the Platform.

For a complete breakdown of the cookies and tracking technologies we use, including how to manage your preferences, see our Cookie Policy.

8. Data Location

User data — including account information, project files, uploaded images, and generated content — is stored on Supabase infrastructure located in the eu-central-1 region (Frankfurt, Germany).

This means your data is hosted within the European Union and subject to EU data protection standards under GDPR. AI generation requests are transmitted to third-party providers (see Section 4) which may process data outside the EU under appropriate data transfer safeguards.

9. Data Retention

• We retain your account data for as long as your account is active.
• Upon account deletion, all personal data — including profile information, designs, generated content, uploaded files, and usage history — is permanently and immediately deleted. This action is irreversible.
• Billing and transaction records may be retained for up to 7 years for legal and tax compliance purposes.
• You may delete your account at any time directly from your Account page. No email request is required.

10. Your Rights

Depending on your location, you have the following rights regarding your personal data:

GDPR (EU / EEA Users)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten") — exercisable directly via the Account page
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

CCPA (California Residents)

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell personal data)
• Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at info@reely.art. We will respond within 30 days.

11. Age Requirement

ReelyArt is intended for users who are 13 years of age or older. Users between 13 and 16 in the European Union require verifiable parental or guardian consent under GDPR Article 8.

We do not knowingly collect personal data from children under 13. If we become aware that a user under 13 has created an account, we will delete the account and associated data promptly. If you believe a minor has submitted data without consent, please contact us at info@reely.art.

12. Security

• We implement reasonable technical and organizational security measures including encrypted data transmission (HTTPS), access control policies, and secure credential management.
• Payment data is handled exclusively by Stripe and never passes through our servers.
• No system is completely immune to security risks. We encourage you to use strong, unique passwords and notify us immediately of any suspected unauthorized access.

13. Changes to This Policy

• We may update this Privacy Policy periodically. Material changes will be communicated via email or an in-platform notice.
• Continued use of the Platform after the effective date of any changes constitutes acceptance of the updated policy.

14. Contact

For privacy-related inquiries, data requests, or concerns, contact ReelyArt LLC at: info@reely.art