Privacy Policy

Effective date: 30 August 2026

Version: 1.0

1. Who We Are

ReelAlbum is a personalized event-video service (referred to in this Privacy Policy as “ReelAlbum,” “we,” “us,” or “our”).

For questions about this Privacy Policy or our handling of personal information, contact us at:

ReelAlbum is responsible for the personal information described in this Privacy Policy.

2. About This Privacy Policy

ReelAlbum creates personalized event-video presentations using photographs, text, music, manual editing, and approved artificial-intelligence-assisted production tools.

This Privacy Policy explains how we collect, use, disclose, protect, and retain personal information when you:

  • visit reelalbum.com;
  • start or save an order draft;
  • create or use a ReelAlbum account;
  • upload photographs, music, captions, greetings, or other order material;
  • place, pay for, manage, or cancel an order;
  • receive or download a finished video;
  • contact us or exercise a privacy right;
  • choose to receive marketing communications; or
  • separately authorize public use of a finished video, if such an option is offered.

This Privacy Policy is a notice explaining our practices. It is not a request for blanket consent to every use of personal information. Where a particular activity requires a separate choice or permission—such as newsletter marketing, optional advertising tracking, or public display of a customer video—we present that choice separately.

3. Important Information When You Provide Personal Information

You are not legally required to provide personal information to ReelAlbum. Providing information is generally voluntary. However, some information and material are necessary for us to provide a feature or service you request.

For example:

  • we cannot create and secure your account without the required authentication and contact details;
  • we cannot save or manage an order without the necessary order information;
  • we cannot create a photo-based video without suitable photographs and production instructions;
  • we cannot process payment without the information required by our payment provider; and
  • we may be unable to communicate important production or delivery information if we cannot contact you.

We collect and use information for the purposes described in this Privacy Policy, including account administration, order fulfilment, video production, payment, support, security, legal compliance, and—only where separately permitted—marketing or public-example use.

Information may be disclosed to the service providers and other recipients described in Section 8 where necessary for those purposes.

Subject to Israeli law, you may request access to personal information about you and request correction of information that is incorrect, incomplete, unclear, or not current. More information appears in Section 16.

Shorter notices may also appear directly beside forms, upload controls, authentication choices, and other collection points.

4. Information We Collect

The information we collect depends on how you use ReelAlbum.

4.1 Account and contact information

We may collect:

  • first name and last name;
  • verified email address;
  • telephone country code and telephone number;
  • preferred language and registration language;
  • account and authentication identifiers;
  • information associated with Google authentication or email one-time-code authentication; and
  • account status and profile-completion information.

Authentication providers may provide us with identifiers and basic profile information according to the choices and settings associated with your authentication method. We do not receive your Google password.

4.2 Anonymous sessions and order drafts

You may begin an order before creating a permanent account. To maintain and protect a temporary draft, we may create:

  • an anonymous authentication or session identifier;
  • a temporary order identifier;
  • draft selections and progress information;
  • upload-batch and upload-status information; and
  • timestamps used to save, resume, secure, or delete the draft.

4.3 Order information

We may collect:

  • order number and status;
  • event type and a custom event name, where applicable;
  • selected photograph count and sequence;
  • horizontal or vertical video format;
  • selected opening style;
  • opening title and greeting text;
  • delivery-speed selection;
  • package, optional extras, discounts, and final price;
  • submission, review, payment, production, delivery, cancellation, and refund timestamps; and
  • other instructions you choose to provide for the order.

4.4 Photographs and related information

We may collect and process:

  • photographs uploaded for an order;
  • photographs of the customer and other identifiable people;
  • photographs that include children;
  • original and generated filenames;
  • file type, file size, sequence, and upload status;
  • short captions or text connected with a photograph;
  • checksums and storage identifiers used for upload verification, security, backup, and deletion; and
  • working or AI-assisted versions created during production.

An identifiable photograph may be personal information even when we do not know the depicted person's name.

4.5 Music and audio information

We may collect:

  • an uploaded MP3, WAV, or M4A file;
  • the filename, size, type, and storage identifiers associated with that file;
  • a YouTube or YouTube Music URL supplied as a music preference; and
  • information about any licensed replacement music used for production.

A YouTube or streaming URL identifies a preference and does not itself give ReelAlbum permission to download, copy, or include the referenced recording.

4.6 Payment and accounting information

Our payment provider, PayPal, processes payment information required to complete a transaction.

Depending on the final provider and merchant configuration, we may receive:

  • payer or transaction identifiers;
  • amount and currency;
  • payment, capture, failure, cancellation, or refund status;
  • provider event or webhook identifiers; and
  • information required for receipts, bookkeeping, fraud prevention, dispute resolution, or customer support.

Where the provider-hosted payment flow operates as intended, ReelAlbum does not receive or store complete payment-card credentials.

4.7 Communications

We may collect communications and related information when you:

  • contact customer service;
  • request cancellation, a refund, or a correction;
  • respond to a request for replacement material;
  • request an included or paid revision;
  • submit a privacy request;
  • report a security concern; or
  • otherwise communicate with us about an account or order.

4.8 Technical, security, and audit information

Our systems and providers may automatically process information such as:

  • session and authentication events;
  • date and time of activity;
  • page or route used;
  • browser or device information;
  • IP address and request metadata processed by hosting or security systems;
  • upload, download, and delivery events;
  • consent, notice, representation, and Terms-version records;
  • access-control and audit events; and
  • technical error and security-event information.

We seek to limit logs to information reasonably needed for operation, security, troubleshooting, evidence, and legal compliance. We do not intentionally place private photo content, credentials, private file links, or payment secrets in ordinary application logs.

4.9 Marketing and public-example choices

If these features are offered, we may collect:

  • newsletter or channel-specific marketing choices;
  • consent wording, source, version, time, confirmation, and withdrawal;
  • a minimal suppression record used to honor an unsubscribe request;
  • public-example choices and selected publication channels;
  • releases from identifiable adults or parents/legal guardians; and
  • withdrawal or removal requests relating to public use.

5. Photographs and Information About Other People

Photographs and videos supplied by a customer may contain personal information about relatives, friends, event guests, and children who do not have ReelAlbum accounts and do not interact directly with us.

We process this material to review, create, revise, secure, and deliver the customer's private ordered video and for related support and legal purposes.

Customers should provide material only when they have sufficient rights and authority to provide it for the private ordered service. A customer's ability to order a private video does not automatically authorize ReelAlbum to publish or advertise every identifiable person appearing in that video.

If ReelAlbum offers a public-example program, we may require separate releases from identifiable adults and from a parent or legal guardian of an identifiable child before publication.

If you appear in ReelAlbum customer material and have a privacy concern, contact us using the details in Section 17. We may need information sufficient to identify the relevant material, verify your identity, and assess the request while protecting the customer and other people depicted in the same material.

6. How We Use Personal Information

We may use personal information to:

  • operate, maintain, and secure the website;
  • create and maintain temporary or saved order drafts;
  • authenticate users and create or manage accounts;
  • associate a temporary draft with a verified account;
  • receive, verify, arrange, and store customer uploads;
  • review photographs and other materials for production suitability;
  • create, edit, animate, assemble, revise, and deliver the ordered video;
  • apply customer-selected formats, openings, text, music, and delivery options;
  • calculate prices, discounts, and optional charges;
  • process payments, cancellations, refunds, and partial refunds;
  • issue receipts and maintain accounting or transaction records;
  • send authentication, security, order, production, delivery, cancellation, refund, and support communications;
  • provide customer support and respond to requests;
  • prevent fraud, unauthorized access, misuse, and security incidents;
  • investigate errors, disputes, suspected violations, or security events;
  • enforce the Terms of Use and protect legal rights;
  • comply with applicable legal, regulatory, accounting, or reporting obligations;
  • send marketing only where permitted and, where required, separately authorized; and
  • use a finished video publicly only where the required separate permission and releases have been obtained.

We do not treat account creation or purchase as automatic permission to send advertising.

7. AI-Assisted and Manual Production

ReelAlbum may use approved external production tools to add subtle movement, perform visual treatment, or assist with other parts of video creation. These tools are operated as part of a manually managed production process. ReelAlbum does not currently provide a customer-facing feature that independently creates the complete finished video without human production work.

Customer photographs should be sent only to providers approved for the relevant production use. Before approving a provider, we assess matters such as:

  • what information the provider can access;
  • the permitted processing purpose;
  • retention and deletion;
  • whether customer material may be reused or used for model training;
  • security controls;
  • subprocessors;
  • processing locations and international transfers; and
  • available contractual protections.

The production providers used at launch are:

  • Magnific — creating videos from photographs.

We do not authorize providers to use private customer material for unrelated advertising or independent purposes.

8. Service Providers and Other Recipients

We use the following service providers to operate and deliver ReelAlbum:

  • Vercel — website hosting, delivery, and related technical processing;
  • Supabase — authentication, sessions, database services, and order state;
  • Google Workspace and Google Drive — private storage of customer uploads, production material, emergency backups, and finished-video delivery files;
  • Brevo — transactional email and, where configured, authentication-email delivery and separately authorized marketing;
  • PayPal — payment processing, transaction confirmation, refunds, and fraud or dispute handling;
  • Magnific — the production functions described in Section 7;
  • Google Analytics 4 (GA4) — website usage analytics, when enabled, subject to the purposes and controls described in this Policy.

We may also disclose information:

  • to professional advisers who need it to provide legal, accounting, security, or other professional services;
  • where reasonably necessary to protect customers, ReelAlbum, or others from fraud, security threats, or unlawful activity;
  • where required by law, court order, or a competent authority; or
  • in connection with a lawful business reorganization or transfer, subject to appropriate confidentiality and legal safeguards.

We do not sell private customer photographs or finished videos.

Service providers are expected to process information for defined purposes and under applicable contractual, security, confidentiality, deletion, and supervision requirements.

9. International Processing and Transfers

Some service providers may store or process personal information outside Israel. The actual locations depend on the provider, product, account configuration, and subprocessor arrangements used at the relevant time.

Where Israeli law requires safeguards for transferring personal information outside Israel, we use an applicable legal mechanism and appropriate contractual commitments from the recipient.

If information is transferred to ReelAlbum from the European Economic Area and the applicable Israeli regulations provide additional rights or duties, we will apply those requirements to the relevant information.

10. Payments, Receipts, and Transaction Records

Payment is processed by PayPal. That provider processes information under its own terms and privacy notice for the payment service it supplies.

ReelAlbum may retain transaction references, amount, status, refunds, disputes, and other information required to support the order and comply with applicable bookkeeping, tax, consumer-protection, and legal obligations.

11. Authentication, Order, and Service Communications

We use your contact information to send messages needed to provide or protect the service. These may include:

  • email one-time codes and authentication messages;
  • account and security notices;
  • draft-saved messages;
  • payment and receipt confirmations;
  • photograph-review and replacement requests;
  • production-status updates;
  • cancellation and refund communications;
  • delivery messages and download links; and
  • responses to support or privacy requests.

These operational messages are not treated as newsletter consent. We seek to keep transactional messages focused on the transaction or service rather than adding unrelated advertising.

12. Marketing Communications

If ReelAlbum introduces a newsletter or other marketing program, marketing participation will be optional and separate from account creation, Terms acceptance, purchase, and public-example permission.

We send advertising through email, SMS, WhatsApp, or other regulated channels only where permitted by law and, where required, after obtaining the appropriate channel-specific permission.

You may withdraw a marketing choice at any time using the unsubscribe method in the relevant message or by contacting us. Withdrawing marketing permission does not affect your account, existing order, or ability to purchase ReelAlbum services.

After withdrawal, we may retain the minimum suppression and consent evidence reasonably necessary to honor the request, prevent accidental resubscription, and demonstrate compliance.

13. Public Examples and Advertising Use

Private customer photographs and finished videos are not made public merely because ReelAlbum received or created them.

If ReelAlbum offers an optional public-example program, the permission process will be separate from the Terms of Use and from newsletter consent. The process may provide separate choices for:

  • ReelAlbum's website or portfolio;
  • ReelAlbum's organic social-media accounts; and
  • paid ReelAlbum advertising.

Additional releases may be required from identifiable adults and from a parent or legal guardian of an identifiable child.

If a valid public-use permission is withdrawn, ReelAlbum will assess and process the request according to the applicable release and law. Removal can generally apply prospectively to channels controlled by ReelAlbum. ReelAlbum may be unable to recover copies previously downloaded, captured, or reshared by third parties.

14. Cookies and Similar Technology

ReelAlbum uses essential session, authentication, storage, and security technology to:

  • maintain a temporary or saved order draft;
  • authenticate accounts;
  • protect order ownership;
  • preserve necessary selections;
  • maintain website security; and
  • operate requested website features.

Essential technology is used because the relevant website or order feature cannot operate securely without it.

If we introduce optional analytics or advertising technology, we will update this Privacy Policy to identify the relevant providers, purposes, categories, and available choices. Where consent is required, nonessential technology will remain disabled until the user makes the relevant choice.

15. Security

We use administrative, technical, and organizational measures designed to protect personal information in a manner appropriate to the nature of the information and our processing. These measures may include:

  • authentication and account-verification controls;
  • order-ownership and authorization checks;
  • restricted and role-based access;
  • private storage and non-public customer-media links;
  • upload validation and file limits;
  • separation of customer-visible and server-only operational information;
  • service-provider assessment and contractual controls;
  • security and audit logging;
  • backup and deletion procedures; and
  • incident investigation and response processes.

No website, transmission, storage system, or production process can guarantee absolute security.

If a security event occurs, we investigate and take the steps required by applicable law, including notification to the Israeli Privacy Protection Authority or affected individuals where required.

16. Retention and Deletion

We seek to retain personal information only for as long as it is reasonably needed for the purposes described in this Privacy Policy or as required for legal, accounting, security, evidence, or dispute-resolution purposes.

Our media-retention schedule is:

  • failed or incomplete uploads: normally deleted after approximately one hour without activity, provided an upload is not still actively transferring;
  • unsaved inactive anonymous drafts and their media: normally deleted after approximately one hour without activity;
  • saved unpaid drafts and associated media: normally deleted 30 days after their last activity;
  • photographs removed while arranging an order: deleted when the updated photograph set is finalized or saved;
  • cancelled-order media: deleted promptly after cancellation becomes effective, subject to any necessary short operational or legal handling period;
  • customer photographs, uploaded music, and active production files for a paid order: normally deleted from active production storage 30 days after delivery;
  • the active copy of the finished video and its delivery link: normally deleted or expired 30 days after delivery;
  • emergency backup copies containing customer media: may remain for up to 60 days after delivery before deletion; and
  • staging or test media: retained for no more than seven days; real customer photographs are not intended for use as staging content.

Accordingly:

Uploaded photographs, music, active production files and the active copy of the finished video are normally deleted from active production storage 30 days after delivery. Emergency backup copies may remain for up to 60 days after delivery before deletion.

Please download and securely save your finished video during the stated availability period. ReelAlbum does not provide indefinite archival storage.

Non-media information may be retained longer. This may include:

  • order and transaction records;
  • receipts and accounting records;
  • payment and refund references;
  • Terms-acceptance evidence;
  • notice, representation, consent, release, and withdrawal records;
  • security and audit events;
  • suppression records used to honor marketing withdrawals;
  • cancellation and privacy-request records; and
  • information needed to resolve disputes or comply with law.

The precise retention periods for these records depend on the relevant legal, accounting, security, and evidentiary requirements.

Backup deletion may occur through scheduled aging rather than immediate deletion of an individual backup object. During the limited backup period, backup material remains restricted and is not used for ordinary production or unrelated purposes.

17. Your Rights and Choices

17.1 Access and correction

Subject to applicable Israeli law, you may request access to personal information about you held in a ReelAlbum database.

If information about you is incorrect, incomplete, unclear, or not current, you may request its correction or deletion as provided by applicable law.

17.2 Account closure and deletion requests

You may ask us to close your account or delete information that is no longer needed. We will assess the request under applicable law and our legitimate legal, accounting, security, contractual, and dispute-resolution requirements.

Closing an account does not necessarily require deletion of every transaction, accounting, security, consent, or legal record.

17.3 Marketing choices

You may unsubscribe from optional marketing at any time. Withdrawal does not affect the legality of communications sent before withdrawal or prevent us from sending necessary account, security, order, payment, production, cancellation, or delivery messages.

17.4 Public-example choices

If you have given a separate public-example permission, you may submit a withdrawal or removal request according to the applicable release and law.

17.5 Exercising a right

Submit a request by email to hello@reelalbum.com.

We may request information reasonably necessary to:

  • verify your identity;
  • locate the relevant account, order, photograph, or video;
  • protect other people whose information appears in the same material; and
  • prevent unauthorized access or deletion.

We will respond in accordance with the requirements and timeframes applicable to the request.

You may also contact the Israeli Privacy Protection Authority concerning rights or concerns within its jurisdiction.

18. Children

ReelAlbum accounts and orders are intended for adults aged 18 or older. Children are not intended to create ReelAlbum accounts or place orders.

An adult customer may submit family or event photographs that include children. Such material is treated as private customer material and used for the private ordered service unless the required separate public-use permissions and releases have been obtained.

Customers should consider the child's privacy, dignity, safety, and long-term interests before supplying material and especially before requesting any public use.

19. Third-Party Websites and Services

The website may link to or use services operated by third parties, including authentication, payment, music-reference, and delivery services. Their own privacy notices and terms apply to the services they independently provide.

ReelAlbum is not responsible for the privacy practices of an unrelated third-party website merely because a link appears on ReelAlbum. This does not limit ReelAlbum's responsibility for selecting and managing providers that process information on ReelAlbum's behalf where applicable.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our service, providers, processing, security practices, or legal obligations.

The updated policy will display a new effective date and version. Where appropriate, we may also provide notice through the website, account, or email.

We will not treat an updated Privacy Policy as automatic permission for a materially different optional activity. Where a new or changed activity requires separate consent or permission, we will request it separately.

21. Contact Us

For privacy questions or requests, contact:

ReelAlbum

Privacy email: hello@reelalbum.com

Customer-service email: hello@reelalbum.com