Privacy Policy

Video to Reels ("we", "us", or "our") — a service operated by HEALING CARE S.R.L., a company incorporated in Romania (see "Legal Entity" below) — provides an AI-powered video editing and social-media publishing platform at videotoreels.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. HEALING CARE S.R.L. is the data controller for the personal data you provide to Video to Reels.

Legal Entity / Data Controller

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, phone number (optional), and profile photo (optional). Authentication is handled through AWS Cognito, and we store your user profile in our database.

1.2 Video Content

When you create and edit videos, we store your project data including overlay configurations, timeline settings, and exported video files. Video content you upload for editing is processed on our servers for rendering purposes.

1.3 Social Account Data

When you connect social media accounts (YouTube, Instagram, TikTok, Facebook, Twitter/X, LinkedIn, Pinterest, Threads), we store OAuth access and refresh tokens encrypted with AWS KMS. We also collect your social account profile information (username, display name, profile image) as provided by each platform's API.

1.4 Usage Data

We collect anonymized usage data including pages visited, features used, and performance metrics. If analytics are enabled (PostHog), we collect interaction events. If error monitoring is enabled (Sentry), we collect error reports.

1.5 AI Interactions

When you use the AI assistant, your messages and current editor state are sent to the AI provider (Anthropic Claude API for cloud mode, or your local Ollama instance for local mode). We do not permanently store AI conversation history on our servers.

2. How We Use Your Information

• To provide and maintain the VideoToReels platform and its features
• To process video rendering and export requests
• To publish and schedule content to your connected social media accounts
• To provide AI-powered editing assistance
• To send you notifications about your account, scheduled posts, and token expiry
• To analyze usage patterns and improve the platform
• To provide customer support
• To detect and prevent fraud and security incidents

3. Social Account Data

We take special care with your social media credentials:

• OAuth tokens are encrypted at rest using AWS Key Management Service (KMS)
• We only request the minimum permissions needed for publishing and analytics
• Tokens are automatically refreshed before expiry when possible
• You can disconnect any social account at any time, which immediately revokes stored tokens
• We never post to your accounts without your explicit authorization

4. Third-Party Services

We use the following third-party services to operate VideoToReels:

• AWS (Amazon Web Services) — Cloud infrastructure, storage (S3), authentication (Cognito), encryption (KMS), rendering (Lambda)
• Anthropic (Claude API) — AI assistant for video editing commands
• OpenAI (Whisper) — Audio transcription for auto-captioning
• Pexels — Stock media search and integration
• PostHog — Analytics (when enabled by you)
• Sentry — Error monitoring (when enabled)
• Stripe — Payment processing for subscriptions
• Social media platforms — Publishing via their respective APIs

Each third-party service has its own privacy policy. We recommend reviewing their policies to understand how they handle your data.

5. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and other applicable laws, you have the following rights:

• Right of Access (Article 15) — You can view your personal data in your account settings
• Right to Rectification (Article 16) — You can update your personal information at any time
• Right to Erasure (Article 17) — You can request deletion of your account and all associated data via Settings > Privacy & Data > Delete My Account
• Right to Data Portability (Article 20) — You can download a copy of your data in JSON format via Settings > Privacy & Data > Download My Data
• Right to Restrict Processing (Article 18) — Contact us to restrict processing of your data
• Right to Object (Article 21) — You can opt out of marketing communications in your notification preferences

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption at rest and in transit (TLS), AWS KMS for sensitive credentials, role-based access control, and regular security audits. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we initiate a data erasure process that removes or anonymizes your personal data within 30 days. Some anonymized data may be retained for analytics and legal compliance purposes.

8. Cookies

We use essential cookies for authentication and session management. Analytics cookies (PostHog) are only used when you have them enabled. You can manage your cookie preferences at any time via Settings > Privacy & Data > Cookie Settings.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.