Privacy Policy

Effective date: 19 October 2026

Version: 1.3

1. Who We Are

ReelAlbum is a personalized event-video service (referred to in this Privacy Policy as “ReelAlbum,” “we,” “us,” or “our”).

For questions about this Privacy Policy or our handling of personal information, contact us at:

ReelAlbum is responsible for the personal information described in this Privacy Policy.

ReelAlbum is operated from Israel and the service is designed and marketed primarily for customers in Israel. Because the website is accessible online, people outside Israel may visit it or submit an order. The privacy rules that apply can depend on the circumstances, including ReelAlbum's activities and the location of the person concerned.

2. About This Privacy Policy

ReelAlbum creates personalized event-video presentations using photographs, video clips, text, music, manual editing, and approved artificial-intelligence-assisted production tools.

This Privacy Policy explains how we collect, use, disclose, protect, and retain personal information when you:

  • visit reelalbum.com;
  • start or save an order draft;
  • create or use a ReelAlbum account;
  • upload photographs, video clips, music, captions, greetings, or other order material;
  • place, pay for, manage, or cancel an order;
  • receive or download a finished video;
  • contact us or exercise a privacy right;
  • choose to receive marketing communications; or
  • separately authorize public use of a finished video, if such an option is offered.

This Privacy Policy is a notice explaining our practices. It is not a request for blanket consent to every use of personal information. Where a particular activity requires a separate choice or permission—such as newsletter marketing, optional advertising tracking, or public display of a customer video—we present that choice separately.

3. Important Information When You Provide Personal Information

You are not legally required to provide personal information to ReelAlbum. Providing information is generally voluntary. However, some information and material are necessary for us to provide a feature or service you request.

For example:

  • we cannot create and secure your account without the required authentication and contact details;
  • we cannot save or manage an order without the necessary order information;
  • we cannot create a photo-based video without suitable photographs and production instructions;
  • we cannot process payment without the information required by our payment provider; and
  • we may be unable to communicate important production or delivery information if we cannot contact you.

We collect and use information for the purposes described in this Privacy Policy, including account administration, order fulfilment, video production, payment, support, security, legal compliance, and—only where separately permitted—marketing or public-example use.

Information may be disclosed to the service providers and other recipients described in Section 8 where necessary for those purposes.

Subject to Israeli law, you may request access to personal information about you and request correction of information that is incorrect, incomplete, unclear, or not current. More information appears in Section 17.

Shorter notices may also appear directly beside forms, upload controls, authentication choices, and other collection points.

4. Information We Collect

The information we collect depends on how you use ReelAlbum.

4.1 Account and contact information

We may collect:

  • first name and last name;
  • verified email address;
  • telephone country code and telephone number;
  • preferred language and registration language;
  • account and authentication identifiers;
  • information associated with Google authentication or email one-time-code authentication; and
  • account status and profile-completion information.

Authentication providers may provide us with identifiers and basic profile information according to the choices and settings associated with your authentication method.

If you choose Google sign-in, including the Google sign-in prompt offered during the order flow, we use Google Identity Services and Supabase Auth to verify your sign-in and establish your ReelAlbum account session. We do not receive your Google password.

4.2 Anonymous sessions and order drafts

You may begin an order before creating a permanent account. To maintain and protect a temporary draft, we may create:

  • an anonymous authentication or session identifier;
  • a temporary order identifier;
  • draft selections and progress information;
  • upload-batch and upload-status information; and
  • timestamps used to save, resume, secure, or delete the draft.

4.3 Order information

We may collect:

  • order number and status;
  • event type and a custom event name, where applicable;
  • selected photograph and video-clip count and sequence;
  • horizontal or vertical video format;
  • selected opening style;
  • opening title and greeting text;
  • delivery-speed selection;
  • package, optional extras, discounts, and final price;
  • submission, review, payment, production, delivery, cancellation, and refund timestamps; and
  • other instructions you choose to provide for the order.

4.4 Photographs and related information

We may collect and process:

  • photographs and video clips uploaded for an order;
  • photographs of the customer and other identifiable people;
  • photographs that include children;
  • original and generated filenames;
  • file type, file size, sequence, and upload status;
  • short captions or text connected with a photograph;
  • checksums and storage identifiers used for upload verification, security, backup, and deletion; and
  • working or AI-assisted versions created during production.

An identifiable photograph may be personal information even when we do not know the depicted person's name.

Where the order flow offers video uploads, you may also upload video clips, select the start and end time of the segment to include, and choose whether to include its original sound. We process the source file, selected timing, sound preference and related captions to prepare your ordered video.

4.5 Music and audio information

We may collect:

  • an uploaded MP3, WAV, or M4A file;
  • the filename, size, type, and storage identifiers associated with that file;
  • a YouTube or YouTube Music URL supplied as a music preference; and
  • information about any licensed replacement music used for production.

A YouTube or streaming URL identifies a preference and does not itself give ReelAlbum permission to download, copy, or include the referenced recording.

4.6 Payment and accounting information

Our payment provider, PayPal, processes payment information required to complete a transaction.

Depending on PayPal’s payment flow and the merchant-account configuration, we may receive:

  • payer or transaction identifiers;
  • amount and currency;
  • payment, capture, failure, cancellation, or refund status;
  • provider event or webhook identifiers; and
  • information required for receipts, bookkeeping, fraud prevention, dispute resolution, or customer support.

Where the provider-hosted payment flow operates as intended, ReelAlbum does not receive or store complete payment-card credentials.

4.7 Communications

We may collect communications and related information when you:

  • contact customer service;
  • request cancellation, a refund, or a correction;
  • respond to a request for replacement material;
  • request an included or paid revision;
  • submit a privacy request;
  • report a security concern; or
  • otherwise communicate with us about an account or order.

4.8 Technical, security, and audit information

Our systems and providers may automatically process information such as:

  • session and authentication events;
  • date and time of activity;
  • page or route used;
  • browser or device information;
  • IP address and request metadata processed by hosting or security systems;
  • upload, download, and delivery events;
  • consent, notice, representation, and Terms-version records;
  • access-control and audit events; and
  • technical error and security-event information.

We seek to limit logs to information reasonably needed for operation, security, troubleshooting, evidence, and legal compliance. We do not intentionally place private photo content, credentials, private file links, or payment secrets in ordinary application logs.

4.9 Marketing, newsletter and Media Permission choices

If these features are offered, we may collect:

  • newsletter or channel-specific marketing choices;
  • the applicable wording and version, language, date and time, and confirmation method;
  • the order and customer connected with a Media Permission choice;
  • the Media Permission percentage and monetary discount applied;
  • whether the permission is pending payment, active or withdrawn;
  • marketing publications or campaigns that used the permitted material;
  • withdrawal and removal requests and the actions taken; and
  • a minimal record needed to honor an unsubscribe or withdrawal request and demonstrate compliance.

We do not collect additional device fingerprints or long-term IP-address records solely to prove Media Permission unless we identify a proportionate need and an appropriate retention period.

5. Photographs and Information About Other People

Photographs and videos supplied by a customer may contain personal information about relatives, friends, event guests, and children who do not have ReelAlbum accounts and do not interact directly with us.

We process this material to review, create, revise, secure, and deliver the customer's private ordered video and for related support and legal purposes.

Customers should provide material only when they have sufficient rights and authority to provide it for the private ordered service. A customer's ability to order a private video does not automatically authorize ReelAlbum to publish or advertise every identifiable person appearing in that video.

When a customer gives Media Permission, ReelAlbum relies on the customer's confirmation that the customer has obtained the permissions required from every identifiable person shown or heard in the permitted material, including any permission required from a parent or legal guardian of a child.

If you appear in ReelAlbum customer material and have a privacy concern, contact us using the details in Section 17. We may need information sufficient to identify the relevant material, verify your identity, and assess the request while protecting the customer and other people depicted in the same material.

6. How We Use Personal Information

We may use personal information to:

  • operate, maintain, and secure the website;
  • create and maintain temporary or saved order drafts;
  • authenticate users and create or manage accounts;
  • associate a temporary draft with a verified account;
  • receive, verify, arrange, and store customer uploads;
  • review photographs and other materials for production suitability;
  • create, edit, animate, assemble, revise, and deliver the ordered video;
  • apply customer-selected formats, openings, text, music, and delivery options;
  • calculate prices, discounts, and optional charges;
  • process payments, cancellations, refunds, and partial refunds;
  • issue receipts and maintain accounting or transaction records;
  • send authentication, security, order, production, delivery, cancellation, refund, and support communications;
  • provide customer support and respond to requests;
  • prevent fraud, unauthorized access, misuse, and security incidents;
  • investigate errors, disputes, suspected violations, or security events;
  • enforce the Terms of Use and protect legal rights;
  • comply with applicable legal, regulatory, accounting, or reporting obligations;
  • send marketing only where permitted and, where required, separately authorized; and
  • use a finished video publicly only where the required separate permission and releases have been obtained.

We do not treat account creation or purchase as automatic permission to send advertising.

7. AI-Assisted and Manual Production

ReelAlbum may use approved external production tools to add subtle movement, perform visual treatment, or assist with other parts of video creation. These tools are operated as part of a manually managed production process. ReelAlbum does not currently provide a customer-facing feature that independently creates the complete finished video without human production work.

Customer photographs should be sent only to providers approved for the relevant production use. Before approving a provider, we assess matters such as:

  • what information the provider can access;
  • the permitted processing purpose;
  • retention and deletion;
  • whether customer material may be reused or used for model training;
  • security controls;
  • subprocessors;
  • processing locations and international transfers; and
  • available contractual protections.

The production providers used at launch are:

  • Magnific — creating videos from photographs.

We do not authorize providers to use private customer material for unrelated advertising or independent purposes.

8. Service Providers and Other Recipients

We use the following service providers to operate and deliver ReelAlbum:

  • Vercel — website hosting, delivery, and related technical processing;
  • Supabase — authentication, sessions, database services, and order state;
  • Google Workspace and Google Drive: private storage of customer uploads, production material, emergency backups, and finished-video delivery files;
  • Google Identity Services: Google sign-in, including the sign-in prompt offered during the order flow, used with Supabase Auth to establish account sessions;
  • Brevo — transactional email and, where configured, authentication-email delivery and separately authorized marketing;
  • PayPal — payment processing, transaction confirmation, refunds, and fraud or dispute handling;
  • Magnific — the production functions described in Section 7;
  • Google Analytics 4 (GA4) — website usage analytics, when enabled, subject to the purposes and controls described in this Policy.

We may also disclose information:

  • to professional advisers who need it to provide legal, accounting, security, or other professional services;
  • where reasonably necessary to protect customers, ReelAlbum, or others from fraud, security threats, or unlawful activity;
  • where required by law, court order, or a competent authority; or
  • in connection with a lawful business reorganization or transfer, subject to appropriate confidentiality and legal safeguards.

We do not sell private customer photographs or finished videos.

Service providers are expected to process information for defined purposes and under applicable contractual, security, confidentiality, deletion, and supervision requirements.

9. International Processing and Transfers

Some service providers may store or process personal information outside Israel. The actual locations depend on the provider, product, account configuration, and subprocessor arrangements used at the relevant time.

Where Israeli law requires safeguards for transferring personal information outside Israel, we use an applicable legal mechanism and appropriate contractual commitments from the recipient.

If information is transferred to ReelAlbum from the European Economic Area and the applicable Israeli regulations provide additional rights or duties, we will apply those requirements to the relevant information.

10. Payments, Receipts, and Transaction Records

Payment is processed by PayPal. That provider processes information under its own terms and privacy notice for the payment service it supplies.

ReelAlbum may retain transaction references, amount, status, refunds, disputes, and other information required to support the order and comply with applicable bookkeeping, tax, consumer-protection, and legal obligations.

Agreed additional work may be charged through a separate PayPal payment request. We keep its payment and any refund record separately from the original order payment. A refund of an additional payment does not by itself refund the original order payment.

11. Authentication, Order, and Service Communications

We use your contact information to send messages needed to provide or protect the service. These may include:

  • email one-time codes and authentication messages;
  • account and security notices;
  • draft-saved messages;
  • payment and receipt confirmations;
  • photograph-review and replacement requests;
  • production-status updates;
  • cancellation and refund communications;
  • delivery messages and download links; and
  • responses to support or privacy requests.

These operational messages are not treated as newsletter consent. We seek to keep transactional messages focused on the transaction or service rather than adding unrelated advertising.

12. Marketing Communications

You may choose to join the ReelAlbum newsletter through the separate form in the website footer. Newsletter participation is optional and separate from account creation, waiting-list participation, Terms acceptance, purchase, and public-example permission. The form records the consent wording and version, time, source, email address, and resolved English or Hebrew language list.

Joining the availability waiting list does not subscribe you to the newsletter. Each purpose requires its own consent.

We send advertising through email, SMS, WhatsApp, or other regulated channels only where permitted by law and, where required, after obtaining the appropriate channel-specific permission.

You may withdraw a marketing choice at any time using the unsubscribe method in the relevant message or by contacting us. Withdrawing marketing permission does not affect your account, existing order, or ability to purchase ReelAlbum services.

After withdrawal, we may retain the minimum suppression and consent evidence reasonably necessary to honor the request, prevent accidental resubscription, and demonstrate compliance.

13. Optional Media Permission and Advertising Use

Private customer photographs, video clips and finished videos are not made public merely because ReelAlbum received or created them. Buying the service, accepting the Terms or subscribing to the newsletter does not give ReelAlbum Media Permission.

Media Permission is a separate optional checkout choice. It applies only after the customer has actively agreed, placed the order and completed payment successfully.

When active Media Permission applies, ReelAlbum may use the finished ReelAlbum video and the photographs or video clips appearing in it on ReelAlbum's website, social-media pages and paid digital advertising. ReelAlbum may make reasonable adaptations needed for those formats, as explained in the Terms of Use.

This may include using the permitted material by itself or with other material to create a new promotional video or image, changing the order of photographs or video clips, and removing or replacing music or other audio.

The customer confirms that they have permission from every person who can be identified in the permitted material and that they have the copyright, performer and other rights needed to give ReelAlbum the permission.

ReelAlbum may choose not to publish any permitted material. If ReelAlbum publishes it, we may use service providers and advertising or social-media platforms to prepare, display and manage the publication.

The customer can withdraw Media Permission according to the Terms of Use. After we process the request, we stop starting new marketing uses and stop or remove uses under our control where reasonably possible. We may be unable to remove material independently copied, cached, downloaded, shared or republished by other people or services.

14. Cookies and Similar Technology

ReelAlbum uses essential session, authentication, storage, and security technology to:

  • maintain a temporary or saved order draft;
  • authenticate accounts;
  • protect order ownership;
  • preserve necessary selections;
  • maintain website security; and
  • operate requested website features.

Essential technology is used because the relevant website or order feature cannot operate securely without it.

When you first visit the website, the cookie popup offers two choices: necessary cookies only, or all cookies. Necessary cookies cannot be disabled because they are required for requested website functions and security. We remember your choice for up to 12 months so that we do not ask on every visit.

If you choose all cookies on the Production website, ReelAlbum may load Google Analytics 4 to understand how people use the website. GA4 may process page URLs and titles, navigation and referral information, browser and device information, interaction events, timestamps, and approximate geographic information derived from network information. We do not intentionally send newsletter email addresses, account contact details, uploaded photographs, uploaded audio, or finished videos to GA4.

GA4 may set cookies including _ga and a property-specific _ga_<container-id> cookie. Google currently describes a default expiry of up to two years for these cookies, although browsers or devices may apply shorter limits.

Optional analytics does not load before you choose all cookies. Advertising storage, advertising personalization, and Google advertising signals remain disabled. You can change your choice at any time through Cookie settings in the footer. Choosing necessary cookies only stops future optional analytics loading and the website attempts to remove GA4 cookies it can access.

15. Security

We use administrative, technical, and organizational measures designed to protect personal information in a manner appropriate to the nature of the information and our processing. These measures may include:

  • authentication and account-verification controls;
  • order-ownership and authorization checks;
  • restricted and role-based access;
  • private storage and non-public customer-media links;
  • upload validation and file limits;
  • separation of customer-visible and server-only operational information;
  • service-provider assessment and contractual controls;
  • security and audit logging;
  • backup and deletion procedures; and
  • incident investigation and response processes.

No website, transmission, storage system, or production process can guarantee absolute security.

If a security event occurs, we investigate and take the steps required by applicable law, including notification to the Israeli Privacy Protection Authority or affected individuals where required.

16. Retention and Deletion

We seek to retain personal information only for as long as it is reasonably needed for the purposes described in this Privacy Policy or as required for legal, accounting, security, evidence, or dispute-resolution purposes.

Our media-retention schedule is:

  • failed or incomplete uploads: normally deleted after approximately one hour without activity, provided an upload is not still actively transferring;
  • unsaved inactive anonymous drafts and their media: normally deleted after approximately one hour without activity;
  • saved unpaid drafts and associated media: normally deleted 30 days after their last activity;
  • media removed while arranging an order: no longer part of the order when removal is successfully saved, with stored copies removed in the background as described below;
  • cancelled-order media: deleted promptly after cancellation becomes effective, subject to any necessary short operational or legal handling period;
  • uploaded media, production files and the finished-video copy: removed from active storage after 30 days from order closure, while retained during agreed revisions;
  • emergency backup copies containing customer media: removed after 60 days from order closure; and
  • test media: retained for no more than seven days; real customer photographs are not intended for use as test content.

When a removal is successfully saved, the file is no longer part of your order. We remove its stored copies in the background, with safeguards for active uploads and files still in use. Storage cleanup may be delayed while a transfer finishes or a temporary failure is retried.

We retain the order’s working files and finished video while completing agreed revisions. Once the order is closed because no further revisions are expected, the 30-day active-storage period begins. After this period, we remove the uploaded media, production files and finished-video copy from active storage. The separate emergency backup is removed after 60 days from closure.

Files removed from active storage may remain temporarily recoverable through our storage provider’s Trash and recovery processes. ReelAlbum does not provide indefinite archival storage. Please download and securely save each delivered video within 30 days of receiving it.

Non-media information may be retained longer. This may include:

  • order and transaction records;
  • receipts and accounting records;
  • payment and refund references;
  • Terms-acceptance evidence;
  • notice, representation, consent, release, and withdrawal records;
  • security and audit events;
  • suppression records used to honor marketing withdrawals;
  • cancellation and privacy-request records; and
  • information needed to resolve disputes or comply with law.

The precise retention periods for these records depend on the relevant legal, accounting, security, and evidentiary requirements.

Backup deletion may occur through scheduled aging rather than immediate deletion of an individual backup object. During the limited backup period, backup material remains restricted and is not used for ordinary production or unrelated purposes.

17. Your Rights and Choices

17.1 Access and correction

Subject to applicable Israeli law, you may request access to personal information about you held in a ReelAlbum database.

If information about you is incorrect, incomplete, unclear, or not current, you may request its correction or deletion as provided by applicable law.

17.2 Account closure and deletion requests

You may ask us to close your account or delete information that is no longer needed. We will assess the request under applicable law and our legitimate legal, accounting, security, contractual, and dispute-resolution requirements.

Closing an account does not necessarily require deletion of every transaction, accounting, security, consent, or legal record.

17.3 Marketing choices

You may unsubscribe from optional marketing at any time. Withdrawal does not affect the legality of communications sent before withdrawal or prevent us from sending necessary account, security, order, payment, production, cancellation, or delivery messages.

17.4 Media Permission choices

If you gave Media Permission, you may withdraw it according to the Terms of Use. Requests are submitted by email to hello@reelalbum.com. We may ask for information needed to identify the customer and order and to process the request safely.

17.5 Exercising a right

Submit a request by email to hello@reelalbum.com.

We may request information reasonably necessary to:

  • verify your identity;
  • locate the relevant account, order, photograph, or video;
  • protect other people whose information appears in the same material; and
  • prevent unauthorized access or deletion.

We will respond in accordance with the requirements and timeframes applicable to the request.

You may also contact the Israeli Privacy Protection Authority concerning rights or concerns within its jurisdiction.

18. Children

ReelAlbum accounts and orders are intended for adults aged 18 or older. Children are not intended to create ReelAlbum accounts or place orders.

An adult customer may submit family or event photographs that include children. Such material is treated as private customer material and used for the private ordered service unless the required separate public-use permissions and releases have been obtained.

Customers should consider the child's privacy, dignity, safety, and long-term interests before supplying material and especially before requesting any public use.

19. Third-Party Websites and Services

The website may link to or use services operated by third parties, including authentication, payment, music-reference, and delivery services. Their own privacy notices and terms apply to the services they independently provide.

ReelAlbum is not responsible for the privacy practices of an unrelated third-party website merely because a link appears on ReelAlbum. This does not limit ReelAlbum's responsibility for selecting and managing providers that process information on ReelAlbum's behalf where applicable.

20. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our service, providers, processing, security practices, or legal obligations.

The updated policy will display a new effective date and version. Where appropriate, we may also provide notice through the website, account, or email.

We will not treat an updated Privacy Policy as automatic permission for a materially different optional activity. Where a new or changed activity requires separate consent or permission, we will request it separately.

21. Contact Us

For privacy questions or requests, contact:

ReelAlbum

Privacy email: hello@reelalbum.com

Customer-service email: hello@reelalbum.com