Privacy policy
Last updated October 12, 2026. Contact: contact@polidori.dev.
When you generate a video, we save private copies of the source video and reference photos with its prompt and settings so you can reopen the chat. These generation copies remain with your account even if you remove the separate upload-library item, and are removed when you delete your account.
To prevent repeat free trials, we use an essential first-party browser cookie and retain hashed email and browser identifiers, trial attempt records, and a pseudonymous account identifier after account deletion. These records are used for trial eligibility and abuse prevention.
Information used by Reelform
We process your name, email, account settings, subscription and credit records, prompts, uploaded footage and references, and generation results to provide the service. Supabase manages account authentication and account data. Passwords are handled by the authentication provider; Reelform does not store readable passwords.
Editing on your device
The studio’s video editor trims, cuts, reorders, and mutes clips in your browser. Footage you edit is not uploaded until you choose to use it for a generation, and edits you download never leave your device.
Aura AI planning
Aura edits are rendered on your device and are not saved to your account. If you choose Plan with AI or Revise AI plan, we send your instructions, clip timing, three small preview frames per clip, and the previous plan when revising to OpenAI to suggest cuts. Full source videos and music are not sent for this feature. We keep request counters associated with your account to enforce usage limits. OpenAI processes these requests under its API data policies.
Saved uploads
Videos you prepare in the studio and reference photos you add are saved privately to your account, in Supabase storage, so you can use them again without uploading them from your device. Only you can see them. Your 60 most recently used videos and 120 most recently used photos are kept; older ones are removed automatically. You can delete any saved upload from Your uploads in the studio, and deleting your account removes them all.
Service providers
Higgsfield processes uploaded videos, reference photos, and prompts to generate transformations, and may automatically screen them for content it does not allow; screened requests can be blocked before a video is created. Stripe handles payments, billing addresses, invoices, and saved payment methods. Reelform receives payment identifiers, status, and limited card details such as the brand and last four digits, rather than full card numbers. Resend provides email delivery. Hosting and infrastructure providers process information needed to run and protect the website. These providers may process data outside your country.
Community videos
Publishing is optional. A published video, title, caption, selected creator name, AI-assisted label, and publication date are public and may be viewed without an account. Your account email, billing information, and private generation prompts are not included in the post. We store your publishing permission and its date. Supabase stores community media separately from private creations; community uploads are not sent to Higgsfield for generation or used by Reelform to train AI models.
You can remove posts from the community or delete your account to remove all your posts. Public listing access ends on removal; previously issued playback links can remain valid for up to five minutes. Unfinished uploads are cleaned up after 24 hours by scheduled maintenance. Public content may have been saved by viewers; removal cannot recall their copies.
Instagram publishing and data deletion
If you connect Instagram, we store your Instagram account ID, username, an encrypted access token, and token expiry to publish Reels you explicitly approve. We send the selected video and caption to Meta and retain publishing status and post links in your account. Your private generation prompts are not sent as captions automatically. Meta receives a temporary link to retrieve the selected video.
For scheduled posts, we store your chosen posting time and publish automatically once that time is reached while your eligible subscription remains active.
You can disconnect Instagram in Account → Instagram to remove the saved credential and cancel posts not yet submitted. A request already sent may still finish. Disconnecting or deleting Reelform does not remove Reels already published on Instagram; manage those in Instagram. You can also remove Reelform’s permissions in Instagram’s Apps and Websites settings.
To delete all Instagram connection and publishing records held by Reelform, delete your Reelform account in Account settings, or email contact@polidori.dev with an Instagram data deletion request. We verify account ownership before handling email requests.
Email preferences
Marketing emails are optional. You can withdraw consent through the unsubscribe link or account settings. Essential security, password-reset, and billing emails are separate from marketing preferences. We record consent and unsubscribe choices, and suppress marketing after delivery failures or spam complaints.
Cookies and similar storage
Reelform uses a small number of first-party cookies. Essential cookies are needed for the site to work and are always on. Analytics runs only if you allow it, and you can change your choice at any time.
| Name | Purpose | Type | Lasts |
|---|---|---|---|
sb-…-auth-token | Keeps you signed in and protects account actions (Supabase). | Essential | Until you sign out or the session expires |
sb-…-code-verifier | Completes a sign-in or email confirmation securely. | Essential | Minutes, during sign-in |
rf_instagram_oauth | Protects the Instagram connection permission flow. | Essential | 10 minutes, or until the connection completes |
rf_consent | Remembers whether you allowed analytics. | Essential | 180 days |
The studio also keeps an in-progress generation in your browser’s session storage so a refresh doesn’t lose it; it is cleared when you close the tab. Checkout and the billing portal run on Stripe’s website, which sets its own cookies under Stripe’s policies.
Analytics
If you allow analytics, we use Vercel Web Analytics and Speed Insights to count visits and measure page performance. They do not use cookies, do not follow you across other websites, and report aggregated data such as pages viewed, referring site, country, device and browser type, and load times. If you choose essential cookies only, or your browser sends a Global Privacy Control signal, these scripts do not load.
Security
Private account data is restricted to its owner, and billing and credit updates are performed by authenticated server processes. No security measure can guarantee absolute protection.
Retention and your choices
Your account settings, credit records, and generation history remain while your account is active. Media download links can expire according to provider retention. Account deletion removes Reelform’s account records and ends the subscription. Providers may retain transaction, security, backup, or legally required records under their own policies. Contact us to request access, correction, or deletion of your personal information.
Your rights
Depending on where you live, including the EU, UK, and California, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent at any time. Reelform does not sell your personal information or share it for cross-context behavioral advertising. To make a request, email contact@polidori.dev; we may need to verify your identity. You can also complain to your local data protection authority.
Age
Reelform is intended for people aged 18 and over. We do not knowingly collect information from children; contact us if you believe a child has created an account.
Changes
We will update this page when our practices change and revise the date at the top. For material changes, we will notify account holders by email.