Privacy Policy

1. Who we are

Goreel (“we”, “our”, “us”) operates the Goreel content service at goreel.app. Contact: hello@goreel.app

2. What we collect

• Account information: your email address. You sign in with a one-time code or link sent to your email. We never store a password.
• Business profile: business name, type, location, phone number, products and prices, target audience, posting schedule, content preferences, and the photos and logos you upload.
• Social media connections:when you connect TikTok or Instagram, the access granted by that platform, used to publish posts you approve and to read your account’s statistics.
• Account statistics:from your connected TikTok and Instagram accounts we read post and audience statistics: views, reach, likes, watch time and completion, and your audience’s gender, country and city split, traffic sources and new vs returning viewers. These are totals for your account, not details about individual viewers. We use them to show you how you are doing and to plan better posts.
• Generated content: images, videos, narration, captions and drafts made for your account, and the notes you leave when you reject a draft.
• Payments and tokens: your subscription status, token purchases and token balance. Card and bank details are handled by our payment provider; we do not see or store them.
• Referrals:your referral code and, if you used someone’s code, which business referred you.
• Usage data: which drafts you approve, reject or download, posting times, error logs, and, if you allow them, notification subscriptions for your device. Our website uses Google Analytics to count visits and see how people find and use goreel.app.

3. How we use it

• To make, schedule and publish content for your business
• To show you how your posts and audience are doing
• To sign you in, take payments and manage your account and tokens
• To improve the quality of the content we make for your type of business
• To send you emails and, if you allow them, notifications (a draft is ready, a post was published, billing)

We do not sell your data.

4. Third-party services

We share data with the following services, only as needed to run Goreel:

• Neon — database (your account, business profile and posts).
• Cloudflare — file storage and delivery (your photos and videos).
• Vercel and Railway — host the Goreel app and the service that makes your content.
• Anthropic (Claude) — plans posts and writes captions and scripts. Your business details, products and photos are included.
• OpenAI — makes images from your photos and business details.
• fal.ai — makes video clips from your photos and transcribes narration to time the video.
• ElevenLabs — turns video scripts into spoken narration.
• Post for Me and Buffer — publishing partners that send your approved posts to TikTok and Instagram and return your account statistics.
• TikTok and Instagram — receive your published posts. Their own privacy policies govern data they collect on their platforms.
• Bachs — processes subscription and token payments.
• Resend — sends our emails.
• Google — sign-in with Google (if you choose it) and Google Analytics on our website.

5. TikTok and Instagram data

We use your TikTok and Instagram connections only to publish posts you have approved, to check that they went live, and to read your account and audience statistics as described above. We do not read your messages or your followers’ personal details, and we never post anything you have not approved.

You can disconnect an account at any time in Goreel, or in TikTok’s or Instagram’s authorised-apps settings.

6. Data retention

We keep your data while your account is active. You can delete your account yourself at any time in the app, under Profile, then Delete account. This immediately deletes your business profile, products, photos, videos, posts, connected-account details and sign-in, cancels any scheduled posts and disconnects TikTok and Instagram. If you prefer, email us and we will do it for you within 30 days. We keep a record of past payments and token history (amounts and dates, without your name or business details) for our accounts.

7. Your rights

You may at any time:

• Request a copy of the data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your account and all associated data
• Disconnect your social media accounts
• Turn notifications off

To exercise these rights, email hello@goreel.app. We will respond within 14 days.

8. Security

Data is encrypted in transit (TLS) and stored by providers that encrypt it at rest. Access to your data is limited by database row-level security, so each account can only see its own business.

9. Changes

We will email you at least 14 days before any material change to this policy takes effect.