Privacy policy

What we collect

Account: your email address. Sign-in codes are stored only as a hash and expire after 10 minutes.

What you set up: series names, topics and briefs you write, dialect, voice, style, schedule and promotion answers.

What we make for you: scripts, voice recordings, pictures, captions and videos, plus their titles and the English reading of each script.

Connected accounts: the platform, account identifiers, handle, connection status and publishing results. Our current integration uses Post for Me, which manages platform access tokens. We also keep records needed to connect accounts and publish approved videos. Direct platform connections are planned; if enabled, we will process the permissions and tokens needed for that connection and update this policy.

Payments: your plan, its status and renewal date, and a customer number from Polar. Card details never reach us.

Records we must keep to run the service safely: credit history, cost of each step, posting attempts and results, what you agreed to and when, and your IP address and browser for sign-in security and rate limits.

Why we use it

To make and post the videos you set up and approve; to bill your plan; to keep the service secure and stop abuse; to send service emails (sign-in codes, video ready, credits low, post failed) and, if you leave it on, a weekly summary; and to meet legal duties.

We do not sell your data. We show your videos in our own ads only if you turn this on in Settings.

Who helps us

We use Amazon Web Services in the United States (US East, Virginia) for hosting and storage, Polar as merchant of record for payments, Post for Me to post to your connected accounts, and Resend for email.

To write, voice and illustrate videos, we send the series brief, script and relevant media to the AI providers selected for the task, such as Google, OpenAI and fal. Optional providers include ElevenLabs and Microsoft Azure. Each provider’s own terms say how long it keeps this data and whether it may use it to improve its services.

To count page visits we use PostHog (EU cloud) without cookies. Your IP address and browser details are turned into a daily anonymous code that cannot be traced back to you, and are not stored. We do not use it for advertising.

Our servers are in the United States. These providers may process data in other countries. Their terms and privacy policies describe their own processing.

How long we keep it

We keep account and content data while needed to provide the service. You can request account deletion in Settings. When you delete your account, we delete your personal data: your email, your settings, your series and briefs, your connected accounts and any music you uploaded. Payment records are the exception: we keep them, including the email on them, as the law requires. Deleting usually takes minutes. If a step with our payment or posting partner is delayed, we finish it as soon as that step clears. Database backups keep your data for 7 more days.

We keep the finished AI videos and keep no record that links them to you. If you turned on 'Show my videos' in Settings, we may use them as PilotReels examples and in our ads. Videos made to promote your own business are deleted. Deleting a series removes it from your account; its videos stay saved.

We keep payment, credit, cost, consent, security and abuse records only as long as needed for those reasons or as the law requires. Database backups are kept for 7 days, so deleted data leaves our backups within 7 days after deletion. Polar separately retains payment records under its own policy.

Access to retained records is restricted to service needs.

Your rights

You can download your data (Settings → Download data), correct it, delete it, or object to how we use it. Write to ⁨hello@pilotreels.com⁩ for anything else.

If you live in Egypt you can also complain to the Personal Data Protection Center. If you live elsewhere, your local data authority.

Cookies

One cookie keeps you signed in. Another remembers for 30 days which link brought you to us, so we can credit the partner who shared it. If you sign up, we keep this source (partner code, campaign tags and the site that linked to us) with your account, and we pass the partner code to our payment provider. We use no advertising cookies.

Facebook and Instagram data

For connected Facebook or Instagram accounts, we may store account identifiers, handles, connection details, consent and publishing results. Post for Me currently manages the platform connection. Disconnect the account in Settings or request deletion through Settings or ⁨hello@pilotreels.com⁩. A platform deletion request is handled through the configured deletion callback and status page when that integration is active.

YouTube and Google data

When you connect a YouTube channel, ⁨PilotReels⁩ asks Google for permission to read the channel you choose (its id, name and handle) and to upload the videos you scheduled to that channel. We store the channel id, name and handle, the connection status and the ids and links of the videos we uploaded. We do not read your viewers, comments, analytics or other channels. Google access tokens are encrypted and kept in our publishing service only; they are revoked with Google and deleted when you disconnect the channel or delete your account.

⁨PilotReels⁩’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can also remove ⁨PilotReels⁩’s access at any time at https://myaccount.google.com/permissions.

Children

⁨PilotReels⁩ is for people 18 and over.

Changes

If we change this policy we update the date on this page and tell you by email when the change matters.