Privacy Policy

A plain-language overview. The detail is in the sections that follow.

• What we collect: your account details, what you type into the Service (niche, topics, drafts, scripts, chat messages), your plan and credit history, and basic technical logs.
• Why: to run the Service, bill you, keep it secure, and answer your support requests.
• Who helps us: the providers listed in section 5 (hosting, database, payments, AI, social-data, search, and email).
• What we don't do: we do not sell your personal information, show ads, run advertising or analytics trackers, or use your content to train AI models. We never ask for the password to your social media accounts.
• Your rights: you can delete your account and everything in it yourself in Settings, and ask for a copy of your data or a correction by emailing support@reelsurfing.com.

Information you give us

• Account: your email address, your name if you provide it, and a password. Passwords are stored by our authentication provider in hashed form; we cannot read them.
• Profile: the niche or niches you describe, and your answers to the onboarding questions (how long you have made content, your follower range, and how often you post).
• Your work: the channels you choose to track, the videos you analyze or save, and the topics, drafts, research edits, scripts, and chat messages you create in the Service.
• Channel verification (optional): if you choose to prove that you own a channel, the public handle of that channel and the result of the check.
• Support: the content of emails you send us.

Information from sign-in and payment providers

• Google sign-in: if you sign in with Google, we receive your name, email address, profile picture URL, and a Google account identifier. We do not receive your Google password and we do not access your Gmail, Drive, or YouTube account.
• Payments: our payment provider tells us your plan, its status, its renewal dates, and customer and subscription identifiers. We do not receive or store your full card number.

Information collected automatically

• Technical logs: our hosting provider records your IP address, browser type, the pages and API routes requested, and timestamps, for security and troubleshooting.
• Usage records: which credit-consuming actions you took and when (for example “analyzed a video”), so we can show your credit history and prevent abuse.
• Product analytics: pages viewed, and a small fixed set of milestones — that you signed up, chose a plan, were charged, and wrote a script. These are recorded against our internal identifier for your account, never your name or email, and we use them only to see where the Service confuses people. We do not record your screen, and the text of your scripts is never sent.
• Error reports: when something breaks, the error, the page it happened on, and our internal identifier for your account, so we can find and fix it.

We do not collect precise location, contacts, or biometric data. We do not use advertising trackers, we do not sell or share your information for advertising, and we do not build profiles about you for anyone else.

The Service displays and analyzes public information about creators and their videos on YouTube, TikTok, and Instagram: channel names and handles, profile pictures, follower counts, video titles, thumbnails, view and engagement counts, publish dates, and transcripts of what is said in public videos. We obtain it through the platforms' official interfaces where available (including YouTube API Services) and through data providers that collect publicly available information.

• We use it to calculate how a video performed relative to its own channel and to help our users study formats that worked. We do this as part of our legitimate business interest in helping creators study publicly available content.
• We do not collect private messages, private accounts, or anything that requires logging in to a creator's account.
• We store links to thumbnails and profile pictures, not copies of the images. They are loaded from the platforms' own servers (on our home page, through our host's image resizer) and link back to the original.

If you are a creator and want your channel or a video removed from the Service, or want to know what we hold about you, email support@reelsurfing.com with the channel or video URL. We will act on verified requests within 30 days.

AI processing. To produce analyses, research briefs, hooks, and scripts, we send the relevant text to an AI model provider: your topic, niche, drafts, chat messages, the research text, and transcripts of public videos. The provider processes it to return a result to you. We do not use your content to train AI models, and we do not send your name, email address, or payment details to the AI provider.

Marketing. We do not currently send marketing emails. If that changes, we will ask for your consent where the law requires it, and every such email will have an unsubscribe link.

Automated decisions. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

We do not sell personal information. To run the Service we use third-party providers, who process it on our behalf, under contract, and only to provide their service to us. They are, by category: hosting; sign-in and the database that holds your account and your work; checkout, payments and invoicing; the AI models that produce analyses and scripts; sources of public video data and transcripts; web search for the research step; product analytics and error reporting; and the service that sends our account emails. Each receives only what its job needs. A payment provider sees what you enter at its checkout and never sends us your full card number; the AI models see topics, drafts and public transcripts and never your name, email, or payment details.

YouTube data is provided through YouTube API Services, and Google's handling of data is described in the Google Privacy Policy. If you signed in with Google, you can review or remove Reelsurfing's access at myaccount.google.com/permissions.

Other situations

• Legal reasons: we may disclose information if the law requires it, or if we believe in good faith that it is necessary to protect someone's safety, investigate fraud, or defend our legal rights.
• Business transfer: if the Service is sold or merged, your information may transfer to the new operator. We will tell you before it becomes subject to a different privacy policy.
• With your consent: in any other case, only if you ask us to or agree.

Deleting your account. Go to Settings → Subscription → Delete your account. This cancels any subscription so you are not charged again, then permanently deletes your profile, watchlist, analyses, scripts, chat history, credit records, and sign-in from our systems right away. It cannot be undone. If you cannot sign in, email support@reelsurfing.com from the address on your account and we will delete it within 30 days. Technical logs at our hosting provider and the billing records our payment provider must keep are not affected. Cancelling a plan does not delete your account.

We use only what the Service needs to work and to see whether it is working. We do not use advertising cookies, and nothing here follows you to other websites.

These are either strictly necessary for the Service you asked for or are first-party measurement we use only for ourselves, so we do not show a cookie banner. You can clear them in your browser settings; you will be signed out. If you prefer not to be counted at all, most browsers and privacy extensions can block the analytics request, and doing so does not change how the Service works for you.

The Service is offered only in the United States, and most of our providers process data there. Some information may be accessed from, or processed by a provider in, a country outside the United States, whose data-protection laws differ from US law. We require every provider to protect the information by contract and to use it only to provide its service to us.

• All traffic to the Service is encrypted in transit (HTTPS), and our database provider encrypts data at rest.
• Your data is isolated per account: the application only lets a signed-in user read their own records, and all writes go through our server.
• Access keys for our providers are stored as encrypted environment secrets, not in source code.
• Card details are entered on our payment provider's pages and never reach our servers.

No system is perfectly secure. If we learn of a breach that affects your personal information, we will notify you and the relevant authorities as the law requires.

Wherever you live, you can:

• see and change your niche, watchlist, and scripts in the app at any time;
• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong;
• delete your account and data yourself in Settings (section 6); and
• cancel your plan in Settings.

Email support@reelsurfing.com from the address on your account. We may ask for information to confirm it is you, and you may use an authorized agent acting on your behalf. We respond within 45 days, which we may extend once by a further 45 days for complex requests, and we will tell you if we need the extra time. You will not be treated differently for exercising these rights. Depending on where you live, you may have additional rights, described in the next sections.

In the past 12 months we have collected the following categories of personal information, as defined by the California Consumer Privacy Act (Cal. Civ. Code §1798.140), from you directly, from your sign-in and payment providers, and automatically:

• Identifiers: name, email address, account identifiers, IP address.
• Customer records and commercial information: your plan, subscription status, and credit history.
• Internet or network activity: technical logs and your use of features.
• Professional information and inferences: your niche and your onboarding answers, which we use to tailor suggestions.
• Sensitive personal information: your account log-in credentials, used only to sign you in.

We use and disclose these categories for the business purposes in sections 4 and 5. We do not sell personal information, and we do not share it for cross-context behavioral advertising. California residents have the right to know, delete, and correct their personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. To make a request, email support@reelsurfing.com; we verify requests by confirming control of the email address on the account.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has given us personal information, email support@reelsurfing.com and we will delete it.

We will update this policy when our practices change, for example when we add a provider. For material changes we will notify you by email or in the Service at least 30 days before they take effect. The version and date at the top of this page always reflect the current policy. See also our Terms of Service.

For anything about this policy or your personal information — a question, a request, or a complaint — email Reelsurfing at support@reelsurfing.com. Write from the address on your account so we can act on the request without asking you to prove who you are.