Privacy
Privacy Policy
Last updated
What we collect, who else touches it, how long we keep it, and how to make us delete it.
1.What this covers
This policy covers PikoReels: the marketing site at https://pikoreels.com and the application at https://app.pikoreels.com. It explains what we collect, why, and what you can ask us to do with it.
It does not cover the platforms you connect. Once a post is published to a social account, what that platform collects is governed by its own policy.
2.What we collect
Three kinds of data, and nothing collected because it might be useful later.
- Account data: the name, email address and profile image Google returns when you sign in.
- Content data: the prompts you write, the files you upload, and the videos, captions and schedules you create.
- Connection data: the access tokens that let us publish to the social accounts you connect, and the account names those tokens belong to.
- Billing data: your plan, billing period and payment status. Card details go to our payment processor and are never stored on our servers.
- Usage data: which features are used, credits consumed, errors, and standard server logs including IP address and browser.
3.Signing in with Google
Sign-in is Google OAuth only. We receive your basic profile and email address so we can create and identify your account. We do not receive your Google password, and we do not request access to Gmail, Drive or Contacts.
You can revoke our access from your Google account settings at any time. Doing so will stop you being able to sign in.
4.The social accounts you connect
Connecting a TikTok, Instagram Reels, YouTube Shorts account gives us a token that lets us publish on your behalf. We ask for the narrowest permissions that allow posting and reading back basic performance figures for the posts we made.
We do not read your direct messages, and we do not post anything you have not scheduled or approved. Disconnecting an account from the app deletes the stored token.
5.How we use it
To run the product and to keep it working. Specifically: generating what you ask for, publishing on schedule, showing your analytics, billing the right amount, answering support requests, preventing abuse, and meeting our legal obligations.
We do not sell personal data. We do not share it with advertisers. We do not use your content to train our own models.
6.Who else touches it
We use other companies to provide parts of the service, and they only get what they need to do their job. They are bound by contract to protect it and to use it for nothing else.
- Cloud hosting and storage providers, which is where the application and your files run and live.
- AI model providers, which receive the prompts and reference files needed to generate a specific clip or image.
- Our payment processor, which handles the card details we never see.
- The social platforms you connect, which receive the posts you schedule.
- Analytics and error-reporting tools, which receive usage and diagnostic data.
7.Where it is processed
Our providers operate internationally, so your data may be processed in a country other than your own, including the United States. Where the law requires a transfer mechanism for that, we rely on the standard contractual clauses in our agreements with those providers.
8.How long we keep it
Content and account data are kept while your account is open. Delete a project and it is removed from your workspace, then purged from backups within 30 days.
Close your account and we delete your content and connection tokens within 30 days, apart from records we are required to keep, such as invoices for tax purposes.
Server logs are kept for a short operational period and then discarded.
9.Your rights
Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, or send you a copy in a portable format. If you are in the UK, EU, or a US state with a privacy statute, those rights are backed by law and we apply them to everyone rather than checking where you are first.
Write to support@pikoreels.com and we will respond within 30 days. You can also complain to your local data protection authority if you are not satisfied with how we handled it.
11.Security
Data is encrypted in transit and at rest, access to production systems is limited to people who need it, and connection tokens are stored encrypted. No service can promise a breach will never happen. If one occurs and affects your data, we will tell you and the relevant regulator within the time the law requires.
12.Children
PikoReels is not for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
13.Changes to this policy
Updates are posted here with a new date at the top. If a change materially affects how we handle your data we will tell account holders by email before it takes effect.
14.Contact
Privacy questions and rights requests go to support@pikoreels.com.