Privacy Policy
Draft · last updated November 6, 2026
DRAFT for review. Not yet approved and not legal advice. Highlighted parts are still open.
The short version. We use your photos and story only to make the reel. We delete the photos 7 days after delivery. We don't sell your data, we don't send marketing emails, and the site uses no cookies and no ad trackers. Want something deleted or a copy of your data? Email [email protected].
1. Who we are
Reelegend (reelegend.com) is run by [OWNER OR COMPANY NAME, ADDRESS, COMPANY NUMBER], Israel. We are responsible for your personal data (the "controller"). For anything about your data, email [email protected].
2. Whose data this covers
- You, the buyer: the person who orders the reel.
- The recipient and anyone else who appears in the photos or the story (a partner or a child, for example). We get their data from you, not from them. Section 9 is for them.
- Visitors to the site.
3. What we collect and why
When you order the free cartoon: the recipient's first name, your email address, one to three photos of the recipient, and your confirmation that you have their permission. We use them to draw the cartoon, make the reel and email you about your order.
Their story: your answers about the recipient (places, people, jokes, the occasion), typed or recorded. A recording is sent to our transcription service and turned into text; we don't keep the audio. We keep the text with your order to write the script.
While we work on it: your notes on the cartoon, your changes to the script, your fixes after delivery, the style you picked, the price and whether you paid, and the dates of each step.
Payment: our payment provider [Grow or PayPlus] handles your card details. We never see or store them; we only get a confirmation that you paid.
Your IP address, when you start an order, to limit how many free cartoons can be made from one network each day (each one costs us money). We don't store the address itself: we keep a scrambled code made from it, which can't be turned back into the address and is deleted within two days.
Emails: we email you about your order (the cartoon is ready, the script is ready, the reel is ready, your fixes arrived) and at most two reminders if you stop halfway. We don't send newsletters or marketing.
Visit statistics: to see which parts of the page work, the site counts anonymous events: which page and button, a random ID that lasts only while the tab is open, the country and city (from our hosting provider), the type of device (phone, tablet or computer), the website you came from, the label of the ad or link you came from (for example, which of our ads you tapped), and which version of the page you saw when we test two versions. We don't store your IP address with these events. If you start an order, we note which visit and which ad or link it came from, so we can see which parts of the page and which ads lead to orders. We don't share this with the ad platforms.
4. Legal grounds
- To make and deliver your order, and email you about it: to perform our contract with you.
- The recipient's photos and story: our legitimate interest, and yours, in making a gift you asked for. You confirm that the recipient would be happy to get it (see our Terms), and we delete the photos soon after.
- Limits on free cartoons, the public-figure check, visit statistics and security: our legitimate interest in preventing abuse and improving the site.
- Records of payments: our legal duty to keep accounting records.
You don't have to give us any of this, but we can't make a reel without the photos, the story and an email address.
5. Faces and AI
We use the photos only to draw and animate the person in the reel. We don't build face templates and don't use the photos to identify who the person is.
One automatic check runs on the main photo: an AI model looks at whether it shows a well-known public figure, because we only make reels about private people. If it says yes, we delete the photo right away and the order can't continue. If you think it got it wrong, email us and a person will look at it.
We don't use your photos, story or reel to train AI models. [Confirm in each provider's terms that they don't train on API data.]
6. Who else handles your data
We use these services to run the site and make the reels. Each gets only what it needs for its task, and may use it only for us.
| Service | What for | What it gets |
|---|---|---|
| Cloudflare | Hosting, database, file storage, anonymous visit counts (Web Analytics) | Everything stored on the site |
| fal.ai | Drawing the cartoon, animating the scenes, the public-figure check (through OpenRouter, to a Google Gemini model) | Photos, cartoons, scene descriptions |
| ElevenLabs | Turning voice answers into text, the narrator's voice | Recordings, the script |
| Anthropic (Claude) | Writing the script from the story, reading your cartoon notes | The story, the recipient's first name, your notes |
| Resend | Sending our emails | Your email address, the recipient's first name, your order link and script |
| [Grow or PayPlus] | Payments | What you give it at checkout |
We put the reel together on our own computer. Copies of photos made there are deleted after delivery, and our database backups are kept for 30 days.
We don't sell or rent personal data. We share it with others only if the law requires it, or to protect our rights or someone's safety.
7. Data outside your country
Most of these services are in the United States. When data leaves the EU, the UK or Israel, we rely on the protections the law allows: the EU-US Data Privacy Framework (and its UK extension) where the provider is certified, or the European Commission's standard contractual clauses. [Check each provider's DPA and certification.]
8. How long we keep it
| Data | Kept for |
|---|---|
| Photos you upload | 7 days after delivery. If you don't order the reel, 7 days after your last step. Photos of a public figure: deleted right away. |
| Voice recordings | Not kept by us: transcribed and dropped. |
| The cartoon and the reel | 3 months after delivery (or after your last step, if you didn't order) on your private order page, so you can download them, then deleted. Save the reel to your phone. |
| Order details (name, email, story, script, notes) | 12 months after delivery, or after your last step if you didn't order, then deleted. We keep only the date, the style and the price, as accounting records (in Israel, usually for 7 years). |
| IP address | Not stored. The scrambled code used for the daily limit: up to 2 days. |
| Visit statistics | 13 months |
| Backups | 30 days |
Want something deleted sooner? Email us and we'll delete it, except what we must keep by law.
9. If you are in a reel someone ordered
If a friend or relative ordered a reel about you, we got your first name, photos and story from them. You have the same rights as the buyer: you can ask what we have about you, and ask us to delete the photos, the reel and the story. Email us with the order link or the buyer's name and we'll take care of it.
10. Your rights
Wherever you live, you can ask us to:
- see the personal data we have about you, and get a copy;
- correct it;
- delete it;
- stop or limit using it, or object to how we use it;
- send it to you in a common format, to move it elsewhere.
Email [email protected]. We answer within 30 days. We may ask you to confirm it's you, for example by writing from the email address on the order.
You can also complain to a data protection authority: in Israel, the Privacy Protection Authority; in the UK, the Information Commissioner's Office (ICO); in the EU, the authority in your country. We'd be glad to try to sort it out with you first.
11. Your browser
The site uses no cookies, no advertising trackers and no social media pixels. It saves a few things in your own browser so the site works better:
- the random visit ID for the statistics, the name and email you typed in the form (so they survive a trip to the Terms), and whether you already saw the opening animation. These are deleted when you close the tab;
- your story answers while you write them, on your device only, so you don't lose them. They are deleted once your order is paid;
- which version of the page you saw, when we test two versions;
- the label of the ad or link you first came from, for 30 days, so an order you place a few days later still counts for that ad.
Everything, fonts included, loads from our own site. The one exception is Cloudflare's visit counter (Web Analytics), which uses no cookies and builds no profile of you; Cloudflare already hosts the site. No ad platform or social network sees your visit.
12. Security
The site runs over HTTPS. Each order has a private page with a link that can't be guessed: anyone with the link can see the order, so don't share it. Only we can open the admin area, with a password. If a breach puts your data at risk, we'll tell you and the authorities as the law requires.
13. Children
You must be 18 or older to order. A reel can be about a child only if you are their parent or guardian or have their parent's or guardian's permission (see our Terms).
14. Changes
If we change this policy, we'll update the date at the top. If a change matters to an order in progress, we'll email you.