Privacy Policy

1. Information we handle

Depending on how you use the Service, we and our service providers may handle:

• Account and sign-in information: an account identifier and identity or profile details made available when you sign in with Google or GitHub, such as your email address and name. Authentication is provided through Supabase and the sign-in provider; DopaReel does not ask you to send us your third-party account password.
• Account and service records: API-key hashes, credit balance, waitlist status, API-key creation date, and last-call date associated with your account.
• API and device information: API query parameters (such as requested length, category, and visual filters), and technical information that may be processed by the systems delivering the Service, such as IP address, request time, browser or device details, and diagnostic or security logs. The precise information available can depend on your connection and the configuration of our providers.
• Messages to us: the email address and information you choose to include when contacting support.

The Service also stores and serves video clips. Clips and temporary download links are content, not necessarily personal information about you; access to the clip storage may generate technical request records with the relevant provider.

2. How we use information

We use information to provide and maintain the Service, create and secure accounts, authenticate sign-ins, issue and manage API keys, maintain credit and waitlist records, respond to support requests, diagnose failures, prevent abuse, protect rights and safety, and comply with legal obligations. We may also use information to administer or improve the Service and to communicate important service or policy changes.

API keys are stored as cryptographic hashes rather than in readable form. A newly generated key is shown to you once; keep it private and rotate it if you believe it has been exposed.

3. Cookies and similar technology

Sign-in and session functionality may use essential cookies or similar technologies managed by our authentication stack. These help keep you signed in and protect the Service. Blocking them may prevent account features from working. This policy does not promise that every infrastructure provider uses no additional technical storage or logging; consult the relevant provider policies for their practices.

4. When we share information

We share information only as reasonably needed to operate and protect the Service, including with:

• Service providers: Supabase for authentication and account/database services, Cloudflare R2 for clip object storage, and providers that host, secure, or support the Service. They process information on our behalf or as otherwise described in their own privacy policies.
• Sign-in providers: Google or GitHub when you choose their sign-in option. Their handling of your information is governed by their own policies.
• Legal and safety recipients: authorities, courts, or other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, security, or the Service.
• Business transfers: a successor or transaction counterparty if the Service or its relevant assets are involved in a merger, financing, reorganization, acquisition, or sale, subject to applicable law.

We do not sell personal information for money. We do not use personal information for cross-context behavioral advertising. We do not control the privacy practices of third-party providers, websites, or platforms.

5. Retention and security

We retain information for as long as reasonably needed for the purposes described in this policy, including to provide the Service, maintain account and security records, resolve disputes, and meet legal obligations. Retention periods may differ by data type and provider. When information is no longer needed, we will take reasonable steps to delete or de-identify it, subject to backups, legal requirements, and legitimate security or recordkeeping needs.

We use reasonable measures intended to protect information, but no internet transmission or storage system can be guaranteed to be completely secure. You are responsible for protecting your account credentials and API key.

6. Processing locations

We and our providers may process or store information in the United States or other locations where their systems operate. Those locations may have data-protection rules different from the rules where you live. Where required, we will use appropriate safeguards for cross-border transfers.

7. Your choices and privacy requests

You can stop using the Service and revoke DopaReel's authorization through your Google or GitHub account settings. To request access to, correction of, or deletion of information associated with your account, or to exercise another privacy right available under applicable law, email support@dopareel.dev. Please describe your request and the account email you used. We may need to verify your identity before acting. We will respond as required by applicable law; some information may need to be retained or a request may be limited where the law permits.

Depending on where you live, you may have rights to know, access, correct, delete, obtain a copy of, or restrict certain processing of personal information, and to complain to a regulator. The availability and scope of these rights vary by law. If you believe we have mishandled personal information, contact us at the address above so we can review your concern.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact support so we can review and take appropriate action. If you are under the age at which you can enter a binding agreement where you live, use the Service only with the involvement and permission of a parent or legal guardian where required by law.

9. Changes and contact

We may update this policy by posting a revised version here and changing the effective date. We will provide additional notice of material changes where required by law. Your continued use of the Service after a change is subject to the updated policy, to the extent permitted by law.

All privacy questions, personal data requests, and concerns should be sent to support@dopareel.dev.