Privacy Policy

Reelform (“we”, “us”) is operated by Polidori.dev. This policy explains what personal data we collect when you use reelform at polidori.dev (the “Service”), why we collect it, and the choices you have. For any privacy question or request, contact us at admin@polidori.dev.

Account data. Your email address and authentication credentials, managed through our authentication provider (Supabase).

Content you create. The prompts you write, the videos you generate, and the websites Claude builds for you. These are stored so you can return to your projects.

Payment data. Payments are processed by Stripe. We never see or store your full card number — we keep only your Stripe customer reference, plan, and credit balance.

Usage data. Basic technical logs (IP address, browser type, pages visited, timestamps) used for security, debugging, and abuse prevention.

We use your data to:

• provide the Service — generate videos, build sites, and store your projects;
• process payments and manage your credit balance;
• send transactional emails (receipts, account notices);
• keep the Service secure and prevent abuse;
• comply with legal obligations.

We do not sell your personal data, and we do not use your content to train AI models.

To operate the Service, your data is shared with a small number of processors, strictly for the purposes above:

• Anthropic — your prompts are sent to the Claude API to build your websites;
• Higgsfield — your video prompts are sent to generate footage;
• Supabase — authentication, database, and file storage;
• Stripe — payment processing;
• Vercel — hosting and infrastructure.

We use only essential cookies: session cookies that keep you signed in and security cookies used by our payment and authentication providers. We do not use advertising or cross-site tracking cookies.

We keep your account data and projects for as long as your account is active. If you delete your account, we delete your personal data and content within 30 days, except where we must retain records for legal or accounting purposes (e.g. invoices).

Depending on where you live (including under the GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email admin@polidori.dev — we respond within 30 days.

Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to production data is limited to what is strictly necessary to operate the Service.

The Service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy from time to time. Material changes will be announced on this page with an updated date, and — for significant changes — by email.