Privacy Policy

Who we are

Reelto is an independent video-making service. This policy explains the current preview experience and the planned paid generation workflow. Video generation and payments are not yet available. You can contact support from your signed-in account.

Data we collect now

If you create an account, we collect your name, email address, login credentials or your chosen OAuth provider's account identifier, and technical session information. Better Auth manages sign-in and sessions. We also process basic usage and device information needed to operate and protect the site.

When you select a photo on the homepage today, the preview is created inside your browser. The file is not sent to our server by that preview. To preserve a selection through sign-in, the browser may keep a local photo draft that is valid for 30 minutes. This draft does not create a generation job. Do not select a photo if you do not have the subject's permission.

When generation opens

The planned service will accept authorized JPG, PNG, or WebP photos, up to 8 MB each. The server will validate their actual image format and size. Originals and prepared reference copies will be placed in private object storage under your account. Prepared copies are supplied directly to Volcengine Ark for MV generation through short-lived authorized URLs. The provider will process these references to create a video using an original or commercially licensed reference scene. We will record your job status, the output video, and credit transactions. Our target retention is seven days for input photos, including prepared copies, and 30 days for output videos, after which the files will be deleted. These periods will be verified in production before uploads open.

Image safety checks

When you upload a portrait for creation, Reelto sends the original image, or a resized inspection copy, to SeeAPI's NSFW Filter 2.0 for a content check. The image is submitted directly by our server; it does not need a public image URL. Previously uploaded originals are checked again before a new generation request is accepted, with identical checks reused where available.

An image that does not pass must be replaced. If the checking service is unavailable, generation is paused. These checks happen before a video job is created or generation credits are reserved. SeeAPI processes submitted images under its own data-handling terms. Image checks do not automatically publish your photos or videos.

Prepared image references

After the original passes the content check, Reelto creates a separate reference copy with sparse, translucent dots. Large images are resized to a maximum dimension of 2048 pixels, orientation is applied, and metadata is removed from the copy. The original remains unchanged in private storage. New MV generation requests send the dotted references directly to Ark, with instructions to remove the added dots and preserve the recognizable appearance. This flow does not classify photos as real or virtual people and does not require a Reelto portrait enrollment step. Ark still applies its own input checks and can reject the request. This is a generative reconstruction: dot removal and an exact match to the original appearance are not guaranteed. Older jobs retain their original reference workflow.

Portrait verification and asset enrollment

The current direct-reference MV workflow does not start an H5 identity or liveness session. If you previously used, or separately choose to use, the portrait enrollment workflow, Ark collects verification material directly; Reelto does not receive your live verification video or identity documents. For those enrollments, we store the group and asset identifiers linked to your account and source file, along with their processing status. Temporary verification links and tokens are encrypted on our server and cleared after successful verification or when an expiry check runs. An enrollment submission does not itself create a paid video job.

Ark separately stores and processes enrolled portrait assets. The planned deletion periods for our private storage do not automatically delete Ark’s asset library. Provider retention, withdrawal and deletion handling must be confirmed before enrollment is opened to customers. You may contact account support to request removal of eligible portrait files and associated provider assets.

Payments

If purchases are enabled later, Stripe will process card payments. We receive order identifiers, amounts, status, and limited billing information required for support and accounting. We do not store full card numbers. Purchased credits and related transactions are recorded in our account database.

Use and sharing

We use account data to authenticate users, protect the service, answer support requests, and provide generation and billing features when available. We share only the data needed by hosting, storage, email, Stripe, and the selected AI provider. We do not sell portraits or generated videos. We may disclose data when legally required or to prevent fraud and abuse.

Security and control

Generation files will use private storage and owner-scoped access. We will not place uploaded portraits in a public directory. You may request access to or deletion of eligible personal data through account support. Some order records may need to be retained for tax, fraud, or legal obligations. No internet system can guarantee absolute security.

Changes

We will update this page before the paid service opens if provider, storage, retention, or other material practices change. The date above shows the latest published version.