Privacy Policy
1. Who we are
ReelMint ("ReelMint", "we", "us") is an AI video, image and audio creation studio at reel-mint.com, an independently operated product. Registered users generate media from prompts and reference material, edit it, and publish or schedule it to their own connected social-media accounts (X, YouTube, Facebook, Instagram, TikTok). ReelMint's operator is the data controller for the data described here. This policy explains what data we collect, how we use and store it, who we share it with, and how you can access or delete it.
ReelMint is a multi-user service. Each user has their own account, and every user's media, connected accounts and activity are isolated from other users. Signup is self-serve: we email you a verification code, and confirming it activates your account.
2. Data we collect
We collect what is needed to provide, bill, secure and improve the service:
- Account information — your email address, a securely hashed password (we never store your password in plain text), an optional display name, your account status, and your plan and credit balance.
- Signup and attribution details — the IP address, device and browser used to create the account, the page you arrived from and any campaign parameters or advertising click identifiers in the link you followed (for example an X ad click id), and a referral code if you used one. We use these to measure where new accounts come from and to detect duplicate or abusive accounts.
- Consent records — each time you agree to our Terms of Service, Acceptable Use Policy, Refund Policy and Privacy Policy (when you create your account, when you sign in after the documents have changed, and when you confirm a purchase) we record the date and time, the version of the documents, your IP address and your browser. We keep these to prove what you agreed to, including to a payment provider in the event of a dispute.
- Billing records — your subscription plan, status and dates, the identifiers our payment providers assign to your customer record and to each transaction, the amount and currency of each purchase, your credit ledger, and the reason you give if you cancel. We never see or store your card number; card details are entered on, and held by, our Merchant of Record (Creem), and cryptocurrency payments are handled by NOWPayments.
- Prompts, settings and reference material — the text prompts, options, photos, voice samples, videos and other material you provide for a generation, and the scripts, scene plans and captions written for you along the way.
- Generated media — the videos, images, audio and thumbnails produced for you, their metadata (model, duration, dimensions, size, credits spent) and the characters, collections, bots, projects and live shows you create.
- Minty conversations — the messages you exchange with Minty, our in-app assistant, and the actions it takes for you, kept so your conversation history is available when you return. Minty is an AI model built to run generations and the studio's tools for you; it cannot see your billing, payments or plan, and anything it says about those, about ReelMint's policies or about anything beyond the generation at hand is machine-generated text that may be wrong. Do not treat it as information from ReelMint; the Billing page and these documents are the source of truth.
- Connected social-account identifiers — the id returned by each platform you connect (X user id, YouTube channel id, Facebook user/Page id, Instagram business-account id, TikTok
open_id), the public display name, and the public profile URL. - OAuth tokens — the access and refresh tokens issued by a platform when you connect an account, stored encrypted at rest and used only to publish on your behalf and to keep the connection alive.
- Publish records — the platform, the post, the resulting external post id, status, and any error a platform returns.
- Usage and technical data — pages and features used, generations run, errors, performance timings, approximate location derived from IP address, and the notifications and transactional emails we sent you.
- Activity log — while you are signed in, we keep a record of the pages you open, the buttons and links you press (their label, not anything you type), the forms you submit, the requests the service carried out or refused for you, and any script error your browser reports, each with the time, the page and whether you were on a phone or a computer. Our staff read it to support you and to understand where the product fails people. Query strings and typed values are never stored. The log is deleted after 90 days, and sooner if you delete your account.
- Linked studios — if you link a private ReelMint studio of your own to your account, we store that studio's address, its name, the email it was offered to and an encrypted access token it issued us, so your account can list and manage that studio's library here. Any video you choose to bring over is copied into your library like an upload. Unlinking deletes the token; copies you brought over stay until you delete them.
- Private studio accounts (Private Studio plan) — if your plan includes a private studio, when your subscription starts we create an account for you on that studio's host (a separate ReelMint instance we operate) with your account email and a copy of your password's one-way hash (never the password itself), and we keep the pairing of the two accounts on both sides. The studio has no sign-in page of its own: it is opened from reel-mint.com through a short-lived link. Each generation you run there sends your account id, the credits to hold and settle and a reference to the job back to reel-mint.com, so one balance covers both; your library there is listed on reel-mint.com so you can bring items over. What you do in the studio is recorded in your activity log on reel-mint.com, and the studio uses the same Google Analytics measurement described in Section 4, exactly as the main site does. The prompts, uploads and results themselves stay on the studio's host under this same policy. Prompts generated on the Private Studio plan are not sent to the content-moderation provider described in Section 8; the AI providers' own safety systems still process them, as on every plan, and nobody at ReelMint reads them or looks at the results unless a report, a provider or platform notice or a lawful request requires it (Section 8, "Content review on report"). Our staff may open your studio as you to provide support, as on the main site.
- Support correspondence — emails you send us and our replies.
3. What we do NOT do
- We do not sell, rent or trade your personal data.
- We do not train AI models on your prompts, reference material or generated media. Our AI providers receive your material only to produce the result you asked for.
- We do not collect your contacts, address book or social graph.
- We do not read your audience, follower, engagement or analytics data from any connected platform. Beyond confirming ownership of the account you connect, we only publish to it.
- We do not show third-party advertising inside ReelMint.
4. Analytics, cookies and advertising measurement
We use a small number of third-party tools to understand how ReelMint is used and whether our own advertising works. They may set cookies or use similar browser storage:
- Session cookie — a strictly necessary, httpOnly cookie that keeps you signed in. Without it the service does not work.
- Google Analytics 4 (Firebase) — anonymous-by-default usage and performance events (page views, feature use, errors, load times) tied to a random client id and, once you sign in, to your internal account id. Google processes this under its own privacy policy. You can opt out with the Google Analytics opt-out browser add-on.
- X (Twitter) conversion measurement — if you reach ReelMint from an X ad, an X pixel on our pages and a server-side conversion event record that the visit led to a sign-up, a trial start or a purchase, so X can attribute the ad. For the server-side event we send X a one-way hash of your email address, the ad click id, and the IP address and browser used at signup. X processes this under its own privacy policy; you can manage ad personalization in your X settings under Privacy and safety. Blocking trackers in your browser prevents the pixel.
- Attribution storage — when you arrive through a campaign link, we keep its parameters in your browser's storage until you create an account, so the account can be credited to the right source.
We do not use advertising cookies to show you ads on other sites, and we do not share your data with ad networks beyond the conversion events described above.
5. How we use your data and on what basis
- To provide the service (performance of our contract with you): running generations, storing your library, publishing to your accounts, billing you, answering Minty, sending transactional email.
- To keep the service safe and lawful (legitimate interest and legal obligation): screening prompts for prohibited content on the plans where our screen runs, reviewing content that is reported to us and preserving records of it, reporting unlawful material involving a minor to the authorities, detecting duplicate and abusive accounts, preventing fraud and payment disputes, keeping records we are required to keep.
- To improve ReelMint and measure our marketing (legitimate interest, and consent where your country requires it): product analytics and ad conversion measurement.
- To tell you about your account (contract and legitimate interest): verification codes, receipts, notices when a generation finishes or a connection needs attention, and important changes to the service or these policies. We do not send marketing email unless you ask for it.
6. How Google and YouTube data is used (Limited Use)
ReelMint's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
ReelMint uses the YouTube Data API only, and only to provide the features you request:
- Identify the YouTube channel you connect.
- Upload the videos you choose to publish to that channel, and add them to a playlist when you ask for one.
- Create and run a live broadcast on that channel when you start a Mint Live or Mint Stage stream.
- Remove a video from the channel only when you delete that published post yourself in ReelMint.
Data obtained from Google/YouTube is used solely to provide these user-facing features. We do not transfer it to third parties except as needed to provide the service or as required by law; we do not use it for advertising; and we do not allow humans to read it except with your consent, for security or to comply with applicable law.
By using ReelMint's YouTube features you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.
7. Where your data lives and how it is secured
- Accounts, billing records, prompts, conversations, connected-account records and publish state: a database on infrastructure we control.
- Uploaded and generated media and thumbnails: storage we control.
- Passwords: stored only as a bcrypt hash, never in plain text.
- OAuth tokens: encrypted in the database; the decryption key is held only as a deployment secret.
- All traffic is served over HTTPS, and the session cookie is httpOnly.
- Our staff may access your account data, including viewing your studio as you see it, to provide support you asked for, to investigate abuse, fraud or a payment dispute, or as required by law.
No system is perfectly secure. We will notify you and any authority we are required to notify if a breach affecting your personal data occurs.
8. Sharing
We do not sell, rent or trade your data. We share it only with the parties below, each of which processes it for the purpose stated:
- Social platforms. The API calls ReelMint makes to a connected platform when you instruct it to publish, schedule or stream.
- AI providers. When you generate, the prompt, settings and any reference media you attach (photos, voice samples, videos) are sent to the third-party AI provider whose model produces the result, over its API. Those providers process that material under their own terms; ReelMint sends nothing beyond what the generation needs (never your email, password or connected-account tokens). Some providers are located outside your country, including in the United States.
- Payment providers. Creem (card payments, as Merchant of Record) and NOWPayments (cryptocurrency) receive what is needed to take your payment and issue your receipt, and hold your payment details under their own policies.
- Content moderation. On every plan except the Private Studio plan, the text of a prompt that will be sent to an image or video model is first sent to Creem's moderation service, with a pseudonymous account reference, which answers whether the prompt may run. It receives the prompt text only — never your name, email or media. Separately, on every plan and every instance, the AI providers' own safety systems examine the prompt, the reference media and the output as part of producing the result; those systems belong to the providers, run under their policies, and ReelMint neither configures nor sees them. Neither screen is a review by ReelMint, and no member of our staff reads prompts or looks at results in the ordinary course of the service.
- Content review on report. When content is reported to us, flagged to us by an AI provider or a social platform, or named in a lawful request, our staff may open the prompt, the reference media, the result and the account's records to decide what happened. We may keep those items as evidence after you delete them, for as long as a claim, a dispute or an investigation may reasonably need them, and we may pass them to the provider, the platform or the authorities. Sexual material involving a minor is reported, with the account's records, to the National Center for Missing & Exploited Children or the authority our law names, without notice to the account.
- Email delivery. A transactional email provider delivers verification codes, receipts and account notices to your address.
- Analytics and measurement. Google and X, as described in Section 4.
- Hosting and infrastructure providers that run our servers and storage.
- Legal. Where required by law, a court order or a lawful request, to enforce our Terms, to resolve a payment dispute, or to protect the rights, safety and integrity of ReelMint, its users or the public.
- A successor of the service, if ReelMint is sold or merged, under this policy.
9. International transfers
ReelMint and the providers above may process your data in countries other than your own, including the United States. Where the law requires, we rely on the providers' standard contractual safeguards for those transfers.
10. Retention and deletion
You stay in control of your data:
- Disconnect an account — remove a connected platform from
Settings; its stored tokens are disabled and can no longer be used. - Delete content — deleting a post, project, character or conversation removes it from your account.
- Clear all my data — from
Settings → Accountyou can remove your library, projects, characters and generations in one step while keeping the account. - Delete your account — from the bottom of your Billing page (Delete my account). This deactivates your account, revokes your sessions and disables your connected accounts; your personal records are deleted or anonymized. Remaining credits are forfeited. You may also email us to request deletion.
We keep billing records, invoices, your acceptance of our Terms, and the records of generations and payments for as long as tax, accounting and payment-dispute rules require, typically up to seven years, even after an account is deleted. Copies of deleted data may persist in logs and backups for a limited period before they are purged. Content you published to a social platform stays on that platform under its rules until you remove it there.
You can additionally revoke ReelMint's stored Google/YouTube data at any time via your Google security settings.
11. Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to receive a copy in a portable form, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. You may also have the right to complain to a data protection authority. To exercise a right, email us from the address on your account; we will verify the request and respond within the time the law allows. We do not discriminate against you for exercising a right.
12. Revoking access
You can revoke ReelMint's access to any connected platform at any time from that platform's own security settings:
- Google / YouTube: myaccount.google.com/permissions
- X (Twitter): x.com/settings/connected_apps
- Meta (Facebook & Instagram): facebook.com/settings?tab=business_tools
- TikTok: tiktok.com/setting/apps
13. Children
ReelMint is a paid service for adults. It is not directed at, nor intended for, anyone under 18, and we do not knowingly collect data from them. If you believe a minor has created an account, email us and we will remove it.
14. Changes to this policy
We will reflect substantive changes on this page with an updated revision date. Continued use of ReelMint after a change constitutes acceptance of the updated policy.
15. Contact
Questions about this policy, or requests to access, correct or delete your data, can be sent to [email protected].