1. Who handles your information
The operator identified above is responsible for personal information handled through Tidereel. This policy describes the current service; it is not a claim of certification or verified compliance with every privacy regime.
2. Information we collect
- Account details such as email, display name, login identifiers and authentication records.
- Topics, scripts, prompts, generated content, uploaded media, brand settings and exported files saved to the service.
- Workspace membership, invitations, review notes and approvals.
- Subscription identifiers, payment status, purchased add-ons, usage and referral records. Our payment provider processes payment details; Tidereel does not store full card numbers.
- If you use your own face: your photo, live selfie, consent name, consent confirmations and verification result. Face comparison analyses likeness and may involve sensitive or biometric-related information.
- Technical information needed for operations and troubleshooting, including request or error logs, usage events and a first-party device identifier used to detect self-referral.
- Content moderation decisions, account actions and support correspondence.
- If you join the launch list on the Coming Soon page: your email, used once to tell you we have launched, then deleted [CONFIRM].
3. Why we use it
We use information to operate accounts, generate and edit videos, store media, manage workspace access, process payments, apply plan limits and referral benefits, check content and likeness consent, prevent abuse and investigate problems. We also use relevant records to handle complaints and meet applicable legal obligations. Providing media to an AI feature authorises processing needed for that feature; do not submit confidential client or personal information unless you have permission.
4. Service providers and sharing
These companies process information for us (subprocessors):
- Supabase — Database, sign-in and file storage. Data: Account details, projects, scripts, uploaded and generated media, billing and usage records. Location: United States (us-east-1).
- OpenAI (via the Lovable AI gateway) — Scripts, images, safety checks and face checks. Data: Topics, prompts, scene text and images sent for the feature you use. Location: Chosen by the provider; inference location is the provider's choice.
- Google (Gemini, via the Lovable AI gateway) — Narration voice. Data: Narration text. Location: Chosen by the provider; inference location is the provider's choice.
- D-ID — Talking presenter clips (only when real presenters are switched on). Data: Presenter picture and narration audio. Location: Chosen by the provider [CONFIRM].
- Stripe — Payments, invoices and refunds. Data: Name, email, card details (held by Stripe, never by TideReel), purchase history. Location: United States and other Stripe regions.
- Resend — Account and billing emails. Data: Email address and the email's contents. Location: United States [CONFIRM].
- Lovable (hosting and job runner) — Runs the website, server and scheduled jobs. Data: Requests passing through the service; no separate copy of your content. Location: Global edge network [CONFIRM].
- External scheduler — Triggers scheduled jobs (publishing, exports, reminders). Data: No personal data — it only calls TideReel's job addresses. Location: [CONFIRM: provider name and location].
AI providers decide where their models run; we can't guarantee a specific country for AI processing. Google processes Google sign-in when you choose it.
Workspace members can view project information permitted by their role. Referrers see referral counts, not the referred customer’s email through the invite page; authorised administrators may access referral and account information for support and abuse review. Real social integrations, when enabled, transmit the video and post information you choose to the selected platform; sandbox accounts do not send it.
We may disclose information when required by law or reasonably necessary to address unlawful activity or protect people. This policy does not promise that downstream AI providers never retain data or use it for training; their applicable terms and configurations must be considered before sending sensitive material.
4a. We don't train models on your content
TideReel does not use your topics, scripts, uploads or generated videos to train AI models, and does not sell or license them to anyone who does. We send your content to AI providers only to run the feature you asked for, under their business (API) terms, which state that API data is not used for training by default [CONFIRM].
5. Cookies and browser storage
We store only what is needed to keep you signed in and credit referrals (up to 30 days for a referral code). There are no advertising or analytics cookies. The full list is on the Cookies page.
6. Where data is stored
Your account, projects and media are stored by Supabase in the United States (us-east-1). Payment, email and AI providers may process information in other countries, as listed above. Information therefore leaves Australia; we take reasonable steps so these providers protect it [CONFIRM].
7. How long we keep it
- Account, projects, scripts and media: Until you delete them or your account.
- Data export downloads: 24 hours, then deleted.
- Operational event logs: 90 days.
- Usage reservations that never finished: Released within an hour.
- Email delivery log (address stored only as a one-way code): [CONFIRM: period].
- Billing records, receipts and refunds: 7 years for tax purposes, without your name or email after account deletion [CONFIRM].
- Usage, moderation and admin audit ledgers: Kept without your name or email after account deletion, for billing disputes and abuse prevention [CONFIRM: period].
- Backups held by Supabase: Up to the provider's backup window [CONFIRM].
When you delete your account, billing, usage, moderation and audit records are kept but your name, email and account id are replaced with an anonymous marker.
8. Security and your choices
The service uses access controls for accounts, projects and private media. No online system can guarantee absolute security. Keep your credentials secure and carefully choose workspace members and content you share publicly.
You can edit available account information, remove project media and delete your saved face through the app. Settings → Privacy lets you export all your data (a 24-hour download link) or delete your account yourself. You can request access, correction, deletion or information about handling of your personal information using the contact details above. We may need to verify your identity and may retain information where legally required; requests will be considered under applicable law.
9. Complaints and updates
Contact the operator above about a privacy concern so it can be investigated. Where applicable, you may also contact the Office of the Australian Information Commissioner at oaic.gov.au. This does not assert that every provision of the Privacy Act applies to the operator.
We will update this policy when information handling materially changes and communicate significant changes as appropriate. See also the Terms of Service and Referral Terms.