Privacy Policy

1. Who we are

RevshiftReels is operated by WAFFLECUBE MEDIA LTD, a private limited company registered in England and Wales with company number 16860746. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.

For the personal data we collect through RevshiftReels, WAFFLECUBE MEDIA LTD is the controller unless this policy says otherwise. You can contact us at support@revshiftreels.com.

2. Personal data we collect

We collect the following types of personal data, depending on how you use the service:

• Account data, such as your name, email address, login identifiers, account settings, and support messages.
• Billing data, such as subscription plan, checkout status, Stripe customer ID, invoices, payment status, tax details, and limited card metadata where Stripe makes it available. We do not store full card numbers.
• Series and content data, such as niches, prompts, style choices, schedules, scripts, generated videos, captions, music choices, uploaded materials, and dashboard activity.
• Connected account data, such as platform account identifiers, posting permissions, tokens, schedule settings, and posting status if you connect TikTok, Instagram, YouTube, or another platform.
• Technical and usage data, such as IP address, device and browser information, approximate location from technical signals, log data, cookie identifiers, pages viewed, product events, errors, and security events.
• Communications data, such as emails, support requests, feedback, and records of our responses.

3. How we use personal data

We use personal data for these purposes:

• to create and manage accounts, authenticate users, and provide customer support;
• to process subscriptions, invoices, taxes, fraud checks, failed payments, cancellations, and refunds;
• to generate, render, store, download, schedule, and post videos based on your settings;
• to connect with social platforms and carry out the posting actions you configure;
• to send service messages, billing notices, security alerts, and important product updates;
• to debug, secure, monitor, maintain, and improve RevshiftReels;
• to understand usage, measure marketing performance, and improve conversion where lawful; and
• to comply with legal duties, enforce our terms, prevent misuse, and protect our rights.

4. Lawful bases

Under UK data protection law, we rely on the following lawful bases:

• Contract, where processing is needed to provide RevshiftReels, manage your subscription, generate videos, post configured content, and respond to support requests.
• Legal obligation, where processing is needed for tax, accounting, company, fraud-prevention, regulatory, or other legal requirements.
• Legitimate interests, where processing is needed to run, secure, improve, analyse, and protect the service, provided those interests are not overridden by your rights.
• Consent, where required for optional cookies, marketing, or integrations. You can withdraw consent where it applies.

5. AI and content processing

RevshiftReels uses AI, voice, image, rendering, storage, and infrastructure providers to create videos. To do that, we may process and share your prompts, series settings, scripts, visual instructions, generated media, audio, captions, and related metadata with those providers.

Do not submit sensitive personal data, confidential information, or material you do not have permission to use unless it is necessary for your content and you accept that it will be processed through the service and relevant providers.

We do not sell personal data. We do not intentionally use customer content to train a general-purpose public AI model. External providers may process data according to their own terms and our arrangements with them.

6. Who we share data with

We share personal data only where needed for the service or where legally required, including with:

• authentication, hosting, database, storage, security, analytics, email, and support providers;
• payment processors such as Stripe for checkout, subscriptions, invoices, fraud checks, and billing;
• AI, voice, image, rendering, transcription, and media-processing providers used to generate videos;
• social platforms you connect, such as TikTok, Instagram, and YouTube, to post configured content;
• professional advisers, insurers, accountants, banks, auditors, and legal advisers;
• law enforcement, regulators, courts, or public authorities where required or reasonably necessary; and
• a buyer, seller, investor, lender, or adviser if we restructure, sell, merge, finance, or transfer part of our business.

Current or planned providers may include Clerk, Stripe, Neon Postgres, Vercel, AI, voice, image and rendering providers, PostHog, RedTrack, and the social platforms you choose to connect.

7. YouTube API Services

If you connect YouTube, RevshiftReels uses YouTube API Services to upload videos you configure for publishing. For the current YouTube integration, we request permission to upload videos and read-only access to basic channel details so we can show you which channel your uploads go to. We do not request YouTube analytics, view counts, likes, comments, subscribers, or other performance metrics.

We store only what the integration needs: an encrypted YouTube refresh token, your channel ID and channel name, connection status, and records of the uploads we perform for you (such as the YouTube video ID and link). We do not collect your YouTube password. You can disconnect YouTube in RevshiftReels, which revokes the Google token where possible and deletes stored YouTube authorised data from our active app database.

RevshiftReels' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your use of YouTube through RevshiftReels is also subject to the YouTube Terms of Service, the Google Privacy Policy, and Google account permission controls. You can also revoke RevshiftReels access from your Google account at Google security permissions.

8. International transfers

Some providers may process personal data outside the United Kingdom. Where required, we rely on appropriate safeguards such as UK adequacy regulations, standard contractual clauses, the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism.

9. Retention

We keep personal data for as long as needed to provide the service, manage your account, comply with legal duties, resolve disputes, prevent abuse, enforce our terms, and maintain backups and security records.

• Billing, tax, and accounting records are usually kept for up to six years.
• Security, error, and technical logs are usually kept for up to twelve months unless needed for investigation.
• Connected account tokens are kept until you disconnect the account, close your account, or they expire. YouTube tokens are encrypted while stored.
• Generated content and account data are kept while your account is active and then deleted or anonymised when no longer needed.

Backup copies may remain for a limited period after deletion before they are overwritten in the normal backup cycle.

10. Cookies and analytics

We use essential cookies and similar technologies for login, checkout, security, preferences, and core app functionality. We may also use analytics and marketing measurement tools to understand product usage and advertising performance.

Where required, we ask for consent before using optional cookies or similar technologies. You can also control cookies through your browser settings, although blocking essential cookies may stop parts of the service from working.

11. Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls, encrypted transport, provider security features, logging, and limited access based on role.

No online service is perfectly secure. You are responsible for keeping your login details safe and for reviewing permissions you grant to connected accounts.

12. Your rights

Depending on the law that applies and our reason for processing, you may have the right to access, correct, erase, restrict, object to, or receive a copy of your personal data. You may also have the right to withdraw consent where consent is the lawful basis.

You can permanently delete your account at any time from the dashboard settings page. This deletes your series, generated videos, stored files, and connected-account data — including stored YouTube authorised data — from our active app database, and cancels any active subscription.

To exercise other rights, contact support@revshiftreels.com. We may need to verify your identity before responding. Some rights are limited where we need to keep data for legal, billing, security, or dispute reasons.

You can complain to the UK Information Commissioner's Office at ico.org.uk. We would appreciate the chance to resolve your concern first.

13. Children

RevshiftReels is not intended for anyone under 18. If we learn that we have collected personal data from a child, we will take reasonable steps to delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. If a change is material, we will take reasonable steps to tell users. The updated version applies from the date shown at the top of the page.