Privacy Policy
Last updated: May 14, 2026
Introduction
Reeloa ("we", "us", or "our") is an AI-powered tool that generates short-form video hooks for TikTok, Instagram Reels, and YouTube Shorts. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it.
By using Reeloa, you agree to the practices described in this policy. If you do not agree, please do not use the service.
Information We Collect
Account information
When you create an account, we collect your email address and, optionally, your full name. This data is stored in Supabase Auth.
Onboarding data
During onboarding we ask for your content niche, sub-niche, and preferred tone of voice. This data is stored in your profile and used to personalise the hook generation output.
Usage data
Every hook generation is saved to your account history. This includes the inputs you provided (topic, platform, niche override) and the 30 hooks produced. This data is stored in our database and is used to power the /history page.
Payment data
Payments are processed entirely by Stripe. We never see or store your card details. We retain your Stripe customer ID and, for subscriptions, your subscription ID in order to manage your plan status.
Analytics data
We use PostHog to capture anonymised event data about how users interact with the product: sign-up, onboarding completion, hook generation, paywall encounters, and checkout events. This data is used to understand usage patterns and improve the service. No personally identifiable information is included in these events beyond a pseudonymous user identifier.
Technical data
Standard server and CDN logs collected by Vercel may include your IP address, browser type, and request timestamps. We do not use this data for profiling.
How We Use Your Information
- To provide the hook generation service and display your history.
- To manage your account, plan, and billing via Stripe.
- To send transactional emails (welcome email, payment receipts) via Resend.
- To analyse usage patterns and improve the product via PostHog.
- To enforce rate limits and prevent abuse via Upstash Redis.
- To communicate service updates or material changes to this policy.
We do not sell your data. We do not use your data for advertising.
Third-Party Services
We rely on the following sub-processors to operate the service. Each has its own privacy policy governing how it handles data.
- Supabase(authentication and database) — supabase.com/privacy
- Stripe(payment processing) — stripe.com/privacy
- Anthropic(AI processing of your generation inputs) — anthropic.com/legal/privacy
- Resend(transactional email) — resend.com/legal/privacy-policy
- PostHog(product analytics) — posthog.com/privacy
- Upstash(rate limiting) — upstash.com/trust/privacy.pdf
- Vercel(hosting and CDN) — vercel.com/legal/privacy-policy
Cookies
We use only essential cookies required to maintain your authenticated session. We do not use advertising cookies or third-party tracking cookies.
PostHog is configured with in-memory persistence only and does not set any analytics cookies in your browser.
Data Retention
Your account data is retained for as long as your account is active. If you request account deletion, your personal data will be removed within 30 days. Backups are purged within 90 days of deletion.
Your Rights
Depending on your location, you may have the following rights under LGPD, GDPR, CCPA, or other applicable laws:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data ("right to be forgotten").
- Export your data in a portable format.
- Object to or restrict certain processing activities.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email us at support@reeloa.com. We will respond within 30 days.
International Data Transfers
Reeloa is operated from Brazil. Our sub-processors may store and process data in the United States and other countries. Where required, we rely on standard contractual clauses or equivalent safeguards to ensure adequate protection for transfers from the EU and UK.
Children
Reeloa is not intended for users under 18 years of age. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, please contact us and we will delete the account promptly.
Changes to This Policy
We may update this policy from time to time. For material changes, we will notify you by email at least 30 days before the changes take effect. Continued use of the service after that date constitutes acceptance of the updated policy.
Contact
Reeloa is operated by Enzo Manzo Carelli.
Address: Rua Regente Feijó, 944, Sala 807B
Email: support@reeloa.com