Privacy Policy | PostMyReels

This Privacy Policy explains what personal data PostMyReels collects, why, who we share it with and what rights you have. PostMyReels is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS], as part of the KissMySkills studio. We are the data controller for the data described here. Contact: hello@kreal51.com.

1. Data we collect

Information you give us

Your name and email address.
Your Instagram handle and links to other social profiles.
Phone number (optional).
Business information: business name, type, location, products, services and offers.
Links to photos and videos you share with us, and brand files such as logos, fonts and colours.
Messages and feedback you send us, including content approvals.

Information from connected accounts

Social account access tokens. These are held by our posting partner (Upload-Post), not stored by us directly. We never ask for or receive your social media passwords.
Post statistics, such as views, likes and reach, used for reporting.

Payment information

Payments are handled by Stripe. We never see or store your full card number. Stripe shares with us limited details such as your name, email, billing country, the amount paid and the last four digits of your card.

Website data

"pmr_arm" value: a first-party cookie or localStorage value that keeps the price you see consistent during our limited pricing test.
Reference id: a random identifier passed to Stripe as client_reference_id, so we can match a payment to the price you were shown. It does not contain your name or contact details.
IP address: used briefly for basic rate limiting on our forms to prevent spam and abuse. It is not stored long-term.

We do not currently use third-party advertising trackers or advertising pixels. If that changes, we will update this policy and ask for consent where required.

2. How we use your data

To create, schedule and post your content (performance of our contract with you).
To process payments, manage subscriptions and issue refunds (contract and legal obligations).
To reply to your enquiries and send service messages (contract and legitimate interest).
To prepare reports on post performance (contract).
To keep pricing consistent during the pricing test and to protect our forms from abuse (legitimate interest).
To show your videos in our portfolio, unless you opt out (legitimate interest).
To meet accounting, tax and legal requirements (legal obligation).

We do not sell your personal data.

3. How lead forms work

When you submit a form on our website, it is sent through a Cloudflare Pages Function to our inbox or webhook. The function applies basic IP-based rate limiting. Your IP address is not stored long-term.

4. Use of AI tools

We use AI tools to help write scripts, design motion graphics and generate voiceovers. To do this, business information and materials you provide may be processed by AI providers listed below. A human reviews all output before you see it. We do not use your materials to train our own models.

OWNER REVIEW: Confirm the data-use and training terms of each AI provider account (API vs consumer plans) before publishing.

5. Who we share data with

We share data only with service providers (sub-processors) that help us run the service:

Stripe – payments and subscriptions.
Cloudflare – website hosting, form handling and security.
Upload-Post – connecting social accounts and posting content.
ElevenLabs – AI voiceover.
Anthropic (Claude) – AI assistance with scripts and content.
Google (Drive / Workspace) – file storage and email.
[NAME] – email and webhook delivery.

Content we post is shared with the social platforms you choose (Instagram, Facebook, TikTok, YouTube) and becomes subject to their own privacy policies. We may also disclose data if required by law.

6. International transfers

Some of our providers process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by these providers.

7. How long we keep data

We keep client data for as long as you use the service and for [RETENTION PERIOD, suggested: 12 months] after cancellation, then delete or anonymise it. Payment and invoicing records are kept for as long as tax and accounting laws require. Lead form submissions from people who do not become clients are kept for [RETENTION PERIOD].

OWNER REVIEW: Set final retention periods for clients, leads and accounting records.

8. Your rights

Depending on where you live, including under the GDPR (EU/UK) and the CCPA/CPRA (California), you have the right to:

access the personal data we hold about you;
correct inaccurate data;
ask us to delete your data;
receive your data in a portable format (export);
object to or restrict certain processing, including portfolio use;
withdraw access to your social accounts at any time, by disconnecting them through the platform or our posting partner, or by asking us;
withdraw consent where processing is based on consent;
lodge a complaint with your local data protection authority.

We do not sell or share personal data for cross-context behavioural advertising, and we will not discriminate against you for using your rights.

9. Cookies and local storage

We use only the first-party "pmr_arm" value described above, which is needed to show you consistent prices. You can clear it in your browser settings at any time; you may then see a different test price.

10. Security

We use reputable providers, encrypted connections and limited access to client files. No system is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

11. Children

Our service is for businesses and is not directed at children under 16. We do not knowingly collect their data.

12. Changes and contact

We may update this policy and will post the new version here with an updated date.

For any data request, email hello@kreal51.com with the subject "Data request". We will respond within 30 days.

[LEGAL ENTITY NAME], [REGISTERED ADDRESS]