Privacy Policy

Welcome to the Privacy Policy of beREEL.pro.

If you have questions about this Privacy Policy, contact us using the details at the end of this document.

By accessing or using our Platform, you acknowledge the processing of your Personal Data as described here. If you do not agree, please discontinue use of the Platform.

This Privacy Policy explains how we handle personal information when you use beREEL.pro — our AI-powered social video platform for creating, editing, scheduling, and publishing on-brand short-form content.

For information about our marketing website (if separate from the app), a dedicated website privacy notice may apply there. This Policy focuses on the Platform and related services.

1. Who we are

We process Personal Data in connection with the beREEL.pro Platform.

Our identification details:

• Platform: https://bereel.pro
• Privacy contact: privacy@bereel.pro
• Legal entity: [Insert registered company name and address]

Depending on the activity, we act as:

• Data Controller — for example when you sign up directly, manage your own account, subscribe through a third-party payment processor, participate in the referral program, or contact support as an individual customer.
• Data Processor — when we process Personal Data on behalf of an Organization (your employer or client) that provides you access to a workspace. In those cases, the Organization decides why and how your data is used for its business; we process it only to deliver the Platform under our agreement with that Organization.

2. Your relationship with beREEL.pro and who is the Data Controller

beREEL.pro is a multi-tenant SaaS platform. Each Organization gets its own workspace with members, brand settings, media library, integrations, and plan limits. Workspace data is logically separated and is not exposed to other customers except as needed to operate shared infrastructure securely.

If you use the Platform through an Organization (for example as an invited team member), your Organization is typically the Data Controller for Personal Data processed in that workspace — including content you create, channels you connect, and publishing activity tied to the Organization’s account.

In that situation:

• This Privacy Policy describes how we, as Data Processor, handle Personal Data on the Organization’s instructions.
• The Organization’s own privacy policy or employment/data policies may also apply to you. Ask your Organization administrator if you need their privacy contact or internal policies.
• Processing terms between us and Organizations are governed by our Terms & Conditions and any data processing agreement we offer upon request.

If you sign up independently (for example as a founder creating your own Organization), we are generally the Data Controller for account, billing, and direct communications with you — and a Processor for content you store on behalf of your Organization’s end users once you invite them.

3. Definitions

Organization

The customer entity that registers on the Platform, creates a workspace, manages billing, and invites Users.

Organization workspace

The isolated workspace under an Organization account, containing Company DNA, generated media, library assets, calendar posts, integrations, and team settings.

User / Organization User

An individual authorized to access an Organization workspace with their own Account.

Account

The identification and authentication details used to register and sign in, including email/password or Google sign-in.

Platform / Licensable Software

The beREEL.pro website, web application, and related APIs (where enabled on your plan), accessible over the internet from supported browsers and devices.

Our Services

Features we provide through the Platform, including Company DNA and onboarding, AI video and image generation, Reels Studio, the media library, captions and voice, calendar scheduling, social channel integrations, analytics, team workspaces, plan entitlements, and the credit wallet.

Platform Content

Material uploaded, generated, or configured in the Platform — such as product photos, brand assets, prompts, generated reels and stills, captions, voice tracks, calendar drafts, and integration settings.

Personal Data

Information relating to an identified or identifiable natural person, as defined under applicable data protection laws (including the GDPR — Regulation (EU) 2016/679).

Data Controller

The entity that determines the purposes and means of processing Personal Data. Often your Organization when you access the Platform through a work account.

Data Processor

Us, when we process Personal Data on behalf of a Data Controller to provide the Platform.

Privacy Policy / Policy

This document.

T&C

Our Terms & Conditions, which govern use of the Platform.

Third-Party Services

External providers integrated with or used to operate the Platform, such as AI model providers, payment processors, social networks, email delivery, and hosting.

4. Categories of Personal Data we process

To provide Our Services we may process the following categories of Personal Data.

Identification and contact data

• Name
• Email address
• Organization name and workspace details
• Profile and role information within an Organization

Authentication and session data

• Hashed password (for email sign-in)
• Session tokens and account identifiers managed by our authentication system
• Google account identifiers when you choose “Continue with Google”
• IP address and user-agent, where recorded for security, session management, or abuse prevention

Usage and activity data

• Approximate activity signals such as last active time and active minutes (from a privacy-light presence heartbeat that does not record page URLs, clicks, or content viewed)
• Feature usage tied to plan entitlements (for example generation counts, storage use, schedules created)
• Credit wallet transactions and referral attribution metadata
• Support requests and correspondence with us

Content and generation data (Platform Content)

• Website URLs and public pages crawled during onboarding or Company DNA extraction
• Uploaded images, videos, logos, and reference files
• Prompts, generation settings, agent outputs, captions, voice selections, and Reels Studio edits
• Library metadata and exported media
• Calendar drafts, scheduled posts, and publishing status

This content may include Personal Data if you or your Organization upload it (for example photos of people, employee names in scripts, or customer testimonials). You and your Organization are responsible for having a lawful basis to provide such content.

Integration and publishing data

When you connect social channels, we may process:

• OAuth tokens and account identifiers for connected social platforms
• Connected Page/profile names and IDs
• Post permalinks and performance metrics returned by those platforms (for example reactions, comments, shares, views where available)

Integration secrets are stored using secure secret-management practices and are used only to provide the features you enable.

Billing and financial data

• Third-party payment processor customer and subscription identifiers
• Plan, invoice, and payment status metadata
• Purchase and credit-grant history

Payment card details are processed directly by our third-party payment processor. We do not store full card numbers on our systems.

Referral program data

If you use referral links:

• Referral code clicks and attributions
• Hashed IP and user-agent signals for fraud prevention (not stored as raw IP in attribution records where hashing is used)
• First-touch referral cookie data (see Section 11)

Technical and security data

• Error logs and operational events needed to maintain and secure the Platform
• Admin audit events where applicable (for example plan changes or support actions)

What we do not do by default: the Platform does not use third-party advertising trackers or sell Personal Data. We do not build cross-site advertising profiles from in-app activity. Our presence heartbeat is intentionally limited and does not track which pages you visit inside the app.

5. Categories of data subjects

We process Personal Data relating to:

• Users who register for or are invited to an Organization workspace
• Organization owners and administrators who manage billing, members, and integrations
• Prospective customers who contact us or click referral links before signing up
• Referral program participants (referrers and referred Organizations)

If you are a User invited by an Organization, we typically do not process your payment card data unless you personally manage billing for that Organization.

6. Purposes of processing

We process Personal Data for the following purposes.

Platform registration, access, and connectivity

• Create and manage Accounts
• Authenticate Users and maintain sessions
• Invite and manage Organization members
• Verify eligibility (including age-related requirements where applicable)
• Operate multi-organization and workspace access controls

Providing Our Services

• Extract and maintain Company DNA from your inputs and, where you provide a URL, publicly available website pages
• Generate, edit, caption, and store video and image content
• Operate Reels Studio, the Library, and export flows
• Schedule and publish content to connected social channels
• Display analytics based on data returned from connected platforms
• Enforce plan entitlements, quotas, and credit consumption
• Process referrals and grant promotional credits according to program rules

Security, reliability, and improvement

• Monitor for abuse, fraud, and policy violations (including referral fraud controls)
• Maintain logs needed to diagnose errors and protect the Platform
• Improve features and performance using aggregated or operational data
• Test and develop the service in accordance with applicable law

Customer support

• Respond to inquiries, complaints, and technical requests
• Assist Organizations and Users with account or integration issues
• Escalate issues to relevant subprocessors where necessary

Billing and account management

• Process subscriptions and payments through third-party payment processors
• Manage upgrades, downgrades, cancellations, and invoicing metadata
• Administer credit grants and referral rewards

Marketing and communications (where applicable)

• Send service-related messages (for example account verification, password reset, billing notices, security alerts)
• With your consent or where permitted by law, send product updates or onboarding tips

You can opt out of non-essential marketing emails using the unsubscribe method provided in the message or by contacting us.

Legal compliance and enforcement

• Comply with legal obligations and respond to lawful requests from authorities
• Enforce our Terms & Conditions
• Establish, exercise, or defend legal claims

7. Legal basis for processing (GDPR)

Where the GDPR applies, we rely on one or more of the following legal bases:

Contract

Processing necessary to register your Account, provide the Platform, perform a subscription, or deliver features you request.

Consent

Where required — for example optional marketing emails, certain integrations you connect, or non-essential cookies on our marketing site. You may withdraw consent at any time; withdrawal does not affect prior processing and may limit related features.

Legal obligation

Processing necessary to comply with applicable laws (for example tax, accounting, or regulatory requirements).

Legitimate interests

Processing that is necessary for our or a third party’s legitimate interests, provided your rights do not override those interests. Examples include securing the Platform and preventing fraud or abuse; improving and developing Our Services; providing customer support; and communicating about similar services to existing customers (where permitted).

You may object to processing based on legitimate interests where applicable law gives you that right.

Automated decision-making. We do not use Personal Data to make solely automated decisions that produce legal or similarly significant effects on you without appropriate safeguards. AI features generate content at your direction; a human in your Organization typically reviews outputs before publication.

8. Categories of recipients

We share Personal Data only as needed for the purposes above.

Your Organization

If you access the Platform through an Organization, administrators and other authorized members may see information necessary for collaboration (for example your name, email, and workspace activity).

Sub-processors and service providers

We use trusted third-party providers who process Personal Data under our instructions and appropriate contractual safeguards. These may include providers for:

• AI and media generation — prompts, reference images, video workloads, and voice synthesis where those features are used. Only the data needed to perform the requested generation is sent.
• Payments — subscription billing and checkout. Card data is handled by the payment processor under its own privacy policy.
• Email — transactional messages such as password resets and invitations.
• Social and publishing — OAuth, publishing, and metrics where you connect social accounts.
• Infrastructure and operations — cloud hosting, databases, object storage, secure credential management, and professional advisers where required.

We may also disclose Personal Data if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale subject to appropriate protections.

International transfers

Some subprocessors may process data outside the European Economic Area (EEA). Where required, we implement appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or equivalent mechanisms, and we require subprocessors to protect Personal Data in line with applicable law.

9. Data subject rights

If you are in the EEA, UK, or another jurisdiction with similar rights, you may have the following rights regarding your Personal Data:

• Access — confirm whether we process your data and receive a copy
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion where applicable
• Restriction — request limited processing in certain circumstances
• Data portability — receive data you provided in a structured, machine-readable format where applicable
• Objection — object to processing based on legitimate interests or direct marketing
• Withdraw consent — where processing is based on consent

How to exercise your rights

• If we are the Controller: contact us at privacy@bereel.pro. We will respond within one month where required by law, possibly extended for complex requests.
• If your Organization is the Controller: contact your Organization administrator first. We will assist the Organization in responding to requests as required by our agreement and applicable law.

You also have the right to lodge a complaint with your local supervisory authority.

10. Data security and storage

We implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, alteration, disclosure, loss, or destruction. Measures include access controls, encryption in transit (HTTPS), hashed credentials, secure storage of integration secrets, and operational monitoring.

Data is stored in managed third-party cloud infrastructure, including databases and object storage for media. Organization workspaces are logically separated at the application and database layer.

No method of transmission or storage is completely secure. Please use strong passwords, limit who can access your Organization, and review AI-generated and published content before it goes live. We are not responsible for the security practices of Third-Party Services you choose to connect.

When subprocessors process data outside the EEA, we apply appropriate transfer safeguards as described in Section 8.

11. Cookies and similar technologies

On the Platform (app)

We use cookies and similar technologies for essential purposes:

The Platform does not use advertising cookies or third-party audience measurement inside the app by default.

On our marketing website (if applicable)

If we operate a separate marketing site, we may use strictly necessary cookies to run the site and remember cookie choices. Optional analytics or marketing measurement cookies, if any, load only after you accept them in a cookie banner. You can change that choice from the site footer where offered.

12. Retention

We retain Personal Data only as long as necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

General principles:

• Contract data — retained for the life of the Account/subscription and a reasonable period afterward for support, billing, and dispute resolution
• Consent-based data — retained until you withdraw consent, subject to other lawful grounds
• Legal obligation data — retained for mandatory statutory periods (for example tax or accounting records)
• Security and fraud logs — retained for a limited period appropriate to the risk

When Personal Data is no longer needed, we delete or anonymize it so you can no longer be identified, except where retention is required for legal, accounting, or enforcement reasons.

Organizations may delete workspace content through Platform features where available. Account deletion requests should be sent to privacy@bereel.pro (or your Organization administrator if they control your account).

13. Children

The Platform is not directed at children below the minimum age required to use information society services in their jurisdiction. We do not knowingly collect Personal Data from children without appropriate authorization. If you believe a child has provided us Personal Data without consent, contact us and we will take appropriate steps.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you by email or through a notice in the Platform before the changes take effect.

Continued use after the effective date constitutes acceptance of the updated Policy, to the extent permitted by law. We encourage you to review this page periodically.

15. Contact us

Questions about this Privacy Policy or our data practices:

• Email: privacy@bereel.pro
• Platform: https://bereel.pro
• Legal entity: [Insert registered company name and address]

For Terms governing use of the Platform, see our Terms & Conditions.