DRAFT. Have it checked before publishing; remove this line when final.
Reely Privacy Policy
1. Who we are
Reely is a service of Gear Five B.V., registered with the Netherlands Chamber of Commerce (KvK) under number 93470401, located at {{REGISTERED_ADDRESS}} ("we", "us"). We are the controller for the personal data described here, except where we process data on behalf of a business customer. In that case the customer is the controller and we act as its processor under a data processing agreement.
Contact: {{CONTACT_EMAIL}}
2. What Reely does
Reely helps creators and companies test short-form videos on Instagram. It stores videos and edit history, publishes Trial Reels that the user explicitly approves, and collects insights so the user can learn which videos perform better. Reely never shares a Trial Reel to followers automatically.
3. Data we process
- Account data from Meta: your Facebook Page ID and name, and your Instagram professional account ID and username. We receive these when you connect your account with Facebook Login.
- Access token: the Meta access token that lets Reely act for your Instagram account. It is stored encrypted in a secrets vault and is never shown to users or plugins.
- Media data: IDs, captions, permalinks, media type and publish times of the posts on the connected Instagram account.
- Insights: reach, views, likes, comments, shares, saves and watch-time metrics for your own posts, stored as snapshots over time.
- Video analysis: features derived from your own videos, such as duration, cut rate, speech timing, a transcript of spoken words and text visible on screen.
- Work you create in Reely: experiments, video variants, edit history, files you choose to archive, and lessons.
- Service data: API keys (stored only as a one-way hash) and technical logs needed to operate and secure the service.
We do not request or store your Facebook password, private messages, or data about your followers as individuals.
4. Why we use it (purposes and legal basis)
- To provide the service you asked for: connecting your account, publishing approved Trial Reels, collecting and showing insights, and analysing your videos (performance of a contract).
- To secure and maintain the service and prevent abuse (legitimate interest).
- Optional cross-account learning: only if your organisation opts in, we include your data in aggregated, anonymised statistics (for example "videos of 20–40 seconds reach 1.2× the account median"). We publish such a statistic only when at least 3 organisations and 20 posts contribute. It never contains captions, IDs or per-account numbers (consent, which can be withdrawn at any time).
We do not sell personal data and do not use it for advertising.
5. Who processes it for us
- Supabase (database, file storage and serverless functions), hosted in the EU (Ireland, eu-west-1).
- Meta Platforms, which is the source of your Instagram data and where approved posts are published, under Meta's own terms.
Each organisation's data is kept separate with database row-level security. Connections use TLS.
6. How long we keep it
We keep your data while your account is connected to Reely. If you disconnect your account or ask us to delete it, we delete the access token immediately and all other data within 30 days, except where the law requires us to keep it. Aggregated statistics that cannot identify you or your organisation may be kept.
7. Your rights
Under the GDPR you can ask for access to, correction, deletion or a copy of your data, and object to or restrict its processing. Email {{CONTACT_EMAIL}}. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). To delete your data, see our data deletion instructions.
8. Changes
We will update this page when the service or the law changes, and change the date at the top.