Last updated: October 8th, 2026
This Privacy Policy explains how ReelBolt ("we", "us", or "our") collects, uses, discloses, and protects information in connection with the ReelBolt public marketing website and the hosted ReelBolt Service. Please read it carefully. If you have questions, contact us using the details in Section 13.
The ReelBolt website and Service are operated by:
This policy covers two things: (a) the public marketing website you are currently reading — the pages served at the root domain, such as the homepage, features, pricing, about, and contact pages — and (b) the hosted ReelBolt Service and the accounts you use to sign in to it. The two are related but have different data practices: the marketing website is essentially informational and handles contact-form submissions and site analytics, while the Service processes account, billing and usage data, and the project files you upload, in order to perform the work you ask it to do.
We collect the following categories of data:
We only process personal data where we have a valid lawful basis to do so. The list below summarizes the purpose and legal basis for each category described in Section 3.
We use a small number of storage mechanisms, summarized below. We do not set any cookie before you make a choice in the cookie banner. Your initial choice itself is remembered in your browser's local storage, not a cookie.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| rf-cookie-consent | Local storage (not a cookie) | Strictly necessary: remembers whether you accepted or rejected analytics cookies, so we don't ask again on every visit. | Persistent, until you clear it or change your choice |
| _ga | Cookie (Google Analytics) | Analytics: distinguishes unique visitors. Set only after you accept. | Typically 2 years |
| _ga_<container-id> | Cookie (Google Analytics) | Analytics: persists session state for a specific Google Analytics property. Set only after you accept. | Typically 2 years (session cookie variants: 24 hours) |
You can change your mind at any time: reopens the consent banner so you can accept or reject analytics cookies again.
We do not sell your personal data. We share limited data with the service providers below, each acting on our behalf under appropriate contractual terms:
| Sub-processor | Provider | Purpose |
|---|---|---|
| Payment | Paddle or FastSpring (merchant of record) | Processes payments as the merchant of record |
| Cloud hosting | Hetzner (Falkenstein, Germany) | Hosts the website and the Service, and processes server access logs |
| Storage | Cloudflare R2 | Stores uploaded content and generated files |
| Cloudflare | Delivers contact-form submissions and transactional email | |
| AI model providers | DeepSeek (our primary chat model today), OpenAI (ChatGPT), Azure OpenAI, Anthropic, MiniMax, Higgsfield, and Fish Audio | Process data sent for ReelBolt-supplied inference when a workflow runs |
| Analytics | Google Analytics (Google Ireland Ltd) | Processes the analytics data described in Section 3, but only once you have given consent |
The AI model providers listed above are the model providers you may be routed through when ReelBolt supplies the AI for a run. If you connect your own AI provider account ("bring your own provider"), that traffic goes to your own provider under your own agreement with it — not to the providers listed above.
If you install and pair the ReelBolt desktop runner, we collect a device identifier, the runner's operating system, and its hardware and software capabilities, so that the Service can send it work it can perform. The runner does not access files on your computer other than the files it is sent for a job. You can unpair a device at any time.
Some of the processors listed in Section 6 may process data outside of your own country or region. Where that happens, we rely on the following transfer mechanism to ensure your data continues to receive an adequate level of protection: the European Commission Standard Contractual Clauses.
We keep contact-form submissions for 3 years, after which they are deleted or anonymized unless a longer period is required to resolve an ongoing enquiry or comply with a legal obligation. Server access logs are retained for 90 daysfor security and troubleshooting purposes, after which they are automatically purged. Analytics data is retained according to Google Analytics' own configured retention settings for our property.
Account content — your uploaded files and the videos the Service generates from them — is retained for 3 years, after which the account and its content are deleted. You may ask us to remove your content sooner under Section 10.
Depending on where you live, you may have some or all of the following rights over your personal data:
To exercise any of these rights, contact us using the details in Section 13. We will respond in accordance with applicable law.
The website and the Service are directed at businesses and professionals evaluating or using ReelBolt. They are not directed at, and we do not knowingly collect personal data from, children. If you believe a child has provided us with personal data, please contact us so we can delete it.
We may update this policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date at the top of this page when we do. Material changes will be highlighted in a more prominent way where appropriate.
If you have questions about this policy or how we handle your data, contact us at:
Where this document still shows a bracketed token (like [COMPANY_LEGAL_NAME]), it stands in for a fact only the business owner can supply — a legal name, an address, or a retention period — and it must be completed with real, accurate information before this site is used to serve real users.