Privacy Policy
Last updated: October 29, 2026
This Privacy Policy explains how YC2123 LLC, a Wyoming limited liability company doing business as reelmix ("reelmix," "we," "us"), collects, uses, shares, and protects personal information when you use https://reelmix.ai, https://app.reelmix.ai, https://partners.reelmix.ai, and related services (the "Service").
1. Data Controller
YC2123 LLC (doing business as reelmix)
30 N Gould St, Ste R, Sheridan, WY 82801, United States
Privacy contact: legal@reelmix.ai
We are the controller of personal information processed through the Service, except where we process content on your instructions as described below.
2. Personal Information We Collect
Information you provide:
- Account information: name, email address, password (stored hashed), and sign-in details if you use Google sign-in.
- Billing information: plan, purchase amounts, transaction status, billing country, and tax information. We do not receive or store full payment card numbers; card data is handled by our payment processors.
- Content you upload: product photos, brand assets, images, video, audio, voice recordings, text prompts, and reference links. If you upload photos or voice recordings of yourself, these may include your image and voice.
- Connected social accounts: account handles, access tokens issued by the platform, and publishing settings for accounts you connect.
- Communications: support requests, emails, feedback, and survey answers.
- Affiliate program: if you join our partner program, your payout details and tax forms are collected by our affiliate platform provider.
Information collected automatically:
- Device and network data: IP address, browser type, operating system, device identifiers, and approximate location derived from IP.
- Usage data: pages viewed, features used, actions taken, credits consumed, referral source, and timestamps.
- Log data: server logs, error reports, and content-moderation logs (prompts and outputs flagged by automated filters and related review decisions).
- Cookies and similar technologies: see Section 4.
Information from third parties:
- Performance metrics of content you publish (views, likes, comments) from platforms you connect.
- Referral data from our affiliate platform if you arrived through a partner link.
- Payment and fraud signals from our payment processors.
We do not knowingly collect biometric identifiers. We do not use uploaded images or voice to identify you.
3. How We Use Your Information
| Purpose | Legal basis (where GDPR/UK GDPR applies) |
|---|---|
| Create and manage your account; provide the Service, generate and store your content, publish to your connected accounts | Performance of a contract |
| Process payments, credits, refunds, and taxes | Performance of a contract; legal obligation |
| Screen prompts and outputs for prohibited content, prevent fraud, abuse, and multiple-account abuse | Legitimate interests (safety and security); legal obligation |
| Provide customer support and send service messages (receipts, renewal reminders, policy changes) | Performance of a contract; legitimate interests |
| Measure and improve the Service, fix bugs, and analyze usage | Legitimate interests |
| Send marketing emails about new features and offers | Consent, or legitimate interests where permitted; you can opt out at any time |
| Run our affiliate program and attribute referrals | Performance of a contract; legitimate interests |
| Comply with legal obligations and enforce our Terms | Legal obligation; legitimate interests |
We do not use your uploaded content or generated outputs to train AI models, and we do not permit our AI providers to do so where we can control that setting.
4. Cookies and Similar Technologies
We use:
- Strictly necessary cookies to sign you in, keep your session secure, and process payments.
- Analytics cookies (PostHog) to understand how the Service is used.
- Referral cookies (Affonso) to attribute purchases to partners, for up to 30 days.
Where required by law (for example, in the EU and UK), we ask for your consent before setting non-essential cookies. You can change your choice at any time through the cookie settings link in our website footer or through your browser settings.
5. Sharing and Disclosure
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We share personal information only with:
- Payment processors: Payment card data is processed exclusively by our PCI-DSS certified payment processors, Waffo Pancake (Waffo.com Limited), which acts as merchant of record for orders placed through its checkout, and Stripe, Inc. for certain payment methods. They receive the information needed to process payments, prevent fraud, and calculate taxes.
- AI model providers: prompts, uploaded inputs, and reference media are sent to the AI providers listed on our AI Models & Disclosure page only as needed to generate your outputs.
- Content moderation: prompts and outputs are screened by the Waffo content moderation service (Prompt Sift) and our own filters.
- Cloud infrastructure and storage: hosting, database, and file storage providers that store data on our behalf.
- Social media platforms: content and metadata you choose to publish are sent to the platforms you connect, under their own privacy policies.
- Analytics and communications: product analytics (PostHog) and email delivery providers.
- Affiliate platform: Affonso, to track referrals and pay partners.
- Professional advisors: accountants, auditors, and lawyers, under confidentiality obligations.
- Legal and safety: authorities or other parties when required by law, to respond to legal process, to protect rights and safety, or to report child sexual abuse material as required by law.
- Business transfers: a successor in a merger, acquisition, or sale of assets, subject to this Policy.
All service providers process personal information under contracts that limit use to providing services to us.
6. Data Security
We protect personal information with encryption in transit (TLS), encryption at rest for stored files and databases, access controls based on least privilege, two-factor authentication for administrative access, audit logging, and regular security reviews. No method of transmission or storage is completely secure.
If we become aware of a personal data breach that is likely to affect your rights, we will notify you and the relevant authorities within 72 hours of discovery, where required by law.
7. Data Retention
| Data | Retention |
|---|---|
| Account information | While your account is active, plus 90 days after account deletion |
| Characters, assets, and generated content | While your subscription is active; deleted 30 days after the end of your paid period or immediately after you delete your account |
| Billing and tax records | 7 years, as required by tax and accounting laws |
| Content-moderation logs | 1 year, or longer if needed for an investigation or legal requirement |
| Support communications | 2 years |
| Analytics data | Up to 25 months in identifiable form, then aggregated |
When the retention period ends, we delete or anonymize the data.
8. Your Data Rights
Depending on where you live, you may have the right to:
- Be informed about how we process your personal information;
- Access the personal information we hold about you;
- Rectify inaccurate information;
- Erase your personal information;
- Restrict processing;
- Data portability — receive your data in a portable format;
- Object to processing based on legitimate interests or for direct marketing;
- Withdraw consent at any time where processing is based on consent.
California and other U.S. state residents have the right to know, delete, and correct personal information, to opt out of sale or sharing (we do not sell or share), and not to be discriminated against for exercising these rights.
To exercise any right, email legal@reelmix.ai from your account email or use Settings → Account → Privacy. We respond within 30 calendar days. We may need to verify your identity. You may use an authorized agent. You also have the right to lodge a complaint with your local data protection authority.
9. Marketing and Opt-Out
You can unsubscribe from marketing emails at any time using the link in each email or in Settings → Notifications. Service messages about your account, billing, and security will still be sent.
10. International Transfers
We are based in the United States, and our service providers may process data in the United States and other countries. When we transfer personal information from the EU, UK, or Switzerland, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms.
11. Children's Privacy
The Service is intended only for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. Contact legal@reelmix.ai if you believe a minor has provided us information.
12. Third-Party Links
The Service may link to third-party websites and platforms. Their privacy practices are governed by their own policies.
13. Changes to This Policy
We may update this Policy. For material changes, we notify you by email and in the app at least 14 days before the changes take effect. The date at the top shows the latest version.
14. Contact Us
YC2123 LLC, doing business as reelmix
30 N Gould St, Ste R, Sheridan, WY 82801, United States
Privacy requests: legal@reelmix.ai
General support: support@reelmix.ai