Privacy Policy

1. Who is responsible

The data controller for PromptReel is Andrei Luca, Iași, Romania. For any privacy question or request, contact [email protected] — you can also use the export and deletion tools built into your dashboard (see section 6).

2. What we collect

Account data: your Google email, display name and avatar URL, provided by Google when you sign in.

Usage data: the prompts you write, the images you upload for image-to-video, your generations (including the model used and the output URL), and a complete credit ledger (every grant, debit and refund).

Payment status: your Whop plan and membership events (started, renewed, cancelled). We never see or store your card details — payments are handled entirely by Whop.

Technical data: a session cookie for sign-in and a language-preference cookie. We run no advertising trackers and no third-party analytics by default.

3. Why we process it (legal bases)

To provide the Service you signed up for — accounts, generations, credit accounting and support (contract).

To bill correctly and prevent abuse — payment events, rate limiting and generation caps (contract and our legitimate interest in protecting the Service).

Prompt refinement via an optional language model runs only to improve your result and can be disabled per generation; when enabled, your prompt is sent to the model provider for that purpose (contract).

4. Who receives your data

fal.ai — receives your prompts (and uploaded images) to generate your content; model outputs are stored on fal's infrastructure and referenced by our database.

Whop — processes your payments and membership status as our merchant of record.

Google — provides your sign-in identity.

Optional LLM provider — receives prompts for refinement only when the feature is enabled with an API key.

We do not sell personal data and do not use it for advertising.

5. Retention

Account, generation and credit data are kept while your account is active. Server backups containing this data roll off within 7 days. When you delete your account, your records are removed from the live database immediately; encrypted backup copies age out with the backup cycle.

Billing records retained by Whop follow Whop's retention policy and Romanian accounting obligations.

6. Your rights

Access and portability: use "Export your data" on your dashboard to download everything we hold about you in JSON.

Erasure: use "Delete account" on your dashboard — it permanently removes your account, prompts, generations and credit balance. If you have an active subscription, cancel it on Whop first; deletion does not cancel billing.

Rectification and objection: contact us by email. You also have the right to lodge a complaint with the Romanian supervisory authority, ANPC.

7. Security and international transfers

Traffic is encrypted (HTTPS); database backups are encrypted at rest. fal, Whop and Google process data under their own security programmes and EU adequacy or standard contractual clauses where data leaves the EEA.