Privacy Policy

Last updated: 2026-10-09

KolReel ("we", "us") provides a service that turns audio recordings and written scripts into videos. This policy explains what personal data we process, why, and your rights. It applies to the website and the application.

1. Who is responsible

The data controller is the operator of KolReel. Contact: info@kolreel.com.

2. What we collect

  • Account data: name, email address, optional username, optional mobile number (used only for SMS two-factor codes), language and time-zone preferences.
  • Content you upload: audio/video recordings, scripts, background images, template settings, and the videos we render from them. Subtitles are generated from your script on our own servers; audio is processed on our own servers for timing and transcription and is not sent to third-party AI services.
  • Billing data: plan, invoices and payment status. Card details are entered on our payment provider's secure page (PayMe) and never touch our servers; we store only a payment token, the card brand and last four digits.
  • Technical data: IP address, browser type, sign-in times and security logs, needed to keep the service secure.
  • Free trial protection: when you sign up we keep a one-way hashed (non-reversible) form of your IP address, a random device identifier stored in your browser, and a summary of basic browser settings (screen size, time zone, language). We use these only to stop the same person from opening many free trials, and delete them after 12 months.
  • Linked accounts: if you link several of your accounts so you can switch between them, we record which accounts belong together. Each account keeps its own subscription, videos and billing.
  • Social sign-in: if you choose Continue with Google, Facebook, Microsoft or TikTok, we receive your name and, where the provider shares it, your email address from that provider (TikTok shares no email, so we ask you for one) to create or open your account. We do not receive your password, friends list or posts, and we do not post on your behalf through sign-in.
  • Connected services: if you connect Google, we store the access/refresh tokens needed to upload videos to your YouTube channel or Google Drive. We request only the scopes needed for uploading and reading your channel name. We never read your other Drive files. The same applies to Dropbox (KolReel sees only its own app folder), OneDrive (a KolReel folder in your drive), Meta (the Pages and Instagram accounts you tick), TikTok (posting to your own account or drafts) and Canva (reading the list of your designs and exporting only the designs you pick into your template; we never change anything in Canva). If you add your own WebDAV server (Studio plan), we store its address, your username and password encrypted, and use them only to upload the videos you choose to save there.
  • AI narration: if you choose an AI voice instead of a recording, the text of your script is sent to the voice provider you selected (OpenAI, ElevenLabs, Google Cloud or Microsoft Azure) to produce the audio, under that provider's terms; no account data is sent with it. The built-in voices run on our own servers and send nothing to third parties. If you save your own provider key in your account, it is stored encrypted and used only for your narrations.
  • Updates subscription: if you subscribe to news, updates or discounts on our home page without an account, we store your email address, the topics you chose and the confirmation and unsubscribe dates. Every email carries a one-click unsubscribe link.

3. Why we process it

To provide the service you asked for (contract), to bill you, to keep the service secure and prevent abuse (legitimate interest), to send transactional emails (sign-in codes, receipts, renewal reminders), and, only with your consent, to send product news and offers, which you can switch off in your account or through the unsubscribe link at any time.

4. Sharing

We use processors that help us run the service: hosting and storage providers, our email delivery provider, our SMS provider (sent.dm) for verification codes, our payment providers (PayMe, and Stripe or PayPal where offered) for payments, Green Invoice for issuing receipts, and the AI voice provider you select for narration (see above). Support requests (tickets, the help chat, and emails to our support address) are first read by an AI assistant provided by Anthropic (Claude), which drafts the first answer from our help articles and, for tickets, a short summary of your own account (plan, usage and recent video status); Anthropic processes this under its commercial terms and does not use it to train its models, and anything the assistant cannot settle goes to a person on our team. To use the help chat without an account we ask for your name and email so we can reply; chat conversations are kept for 180 days and then deleted. Ticking the newsletter box in the chat sends a confirmation email first; nothing else is sent until you confirm. Google receives your videos only when you choose to upload to YouTube or Drive; Meta (Facebook/Instagram) receives a video only when you choose to post it to your Page or Instagram account, and TikTok only when you choose to post it to your TikTok account or send it to your TikTok drafts; Microsoft receives a video only when you choose to save it to your OneDrive, and Dropbox only when you choose to save it to your Dropbox; Canva receives nothing from us, we only read the designs you pick; for each we store the access token you grant for that until you disconnect. If you search the stock library, your search words are sent to Pixabay to fetch results; no account data is sent. If you are on Studio and save your own AI key (Anthropic, OpenAI or Google) and allow the in-app assistant to use it, your assistant messages and the details of your videos, templates and schedule that the assistant needs are sent to that provider under your own account and its terms; we keep the conversation for up to 6 hours to continue it, and you can remove the permission or the key at any time. We do not sell personal data.

Independence. KolReel is an independent product. We are not affiliated with, endorsed by or partners of Google, YouTube, Meta/WhatsApp, TikTok, Microsoft, Dropbox, Canva, OpenAI, ElevenLabs, Pixabay, PayMe, Stripe, PayPal, Green Invoice, sent.dm or any other service we connect to; their names and logos belong to their owners and are used only to identify the integration.

5. Retention

Videos you delete go to a recycle bin for 30 days and are then deleted permanently. Deleting your account removes your files immediately; invoices are kept as required by Israeli tax law (7 years). Security logs are kept for up to 12 months.

6. Your rights

You can access, correct, export or delete your data from your account page, or by emailing info@kolreel.com. You may object to marketing at any time. You may lodge a complaint with the Israeli Privacy Protection Authority or, if you are in the EU/UK, your local supervisory authority.

7. Security

Data is encrypted in transit (TLS). Tokens and credentials are encrypted at rest. Sign-in uses one-time codes instead of passwords, with optional SMS two-factor authentication.

8. Children

The service is not directed at children under 16.

9. Changes

We will post changes here and, for material changes, notify you by email.

v207.2940f5f 2026-10-12