Privacy Policy

1. Scope

This policy applies to information processed through DuoReels (duoreels.com and admin.duoreels.com) and related services.

2. Operator / controller

Venalytics Inc. is the operator responsible for personal information processed through the Service. Contact: contact@duoreels.com.

3. Information we collect

• Account information: name, email, password hash (never plain text).
• Login and authentication data: session tokens (stored hashed), device/user-agent, sign-in events.
• Project and content data: projects, scripts, CSV content, character configurations.
• Uploaded files: logos and brand assets (subject to type/size limits).
• Generated asset metadata: character/duo specifications, hashes, status, variants.
• Billing metadata: plan, subscription status, credits, Stripe customer/subscription/invoice identifiers, amounts, currency, status — never raw card numbers or CVC.
• Affiliate and referral data: affiliate records, referral codes, clicks, attributed signups, commissions, payout details you provide.
• Cookies and referral cookies: session, security, preferences, and affiliate attribution.
• Device, log, and security data: IP address, user-agent, security events, rate-limit events.
• Support and contact data: messages you send us.
• Consent preferences: cookie and marketing-email choices.

4. How we use information

• Provide, operate, and secure the Service.
• Generate character assets and produce reels.
• Process payments and manage subscriptions, credits, and limits (via Stripe).
• Operate the affiliate program: referral tracking, attribution, commissions, and payouts.
• Detect and prevent fraud and abuse, enforce rate limits, and log security events.
• Provide support and respond to requests.
• Comply with legal obligations and enforce our terms.
• Send communications and, where enabled and permitted, analytics and marketing.

5. AI and image-generation providers

To generate character assets, your prompts and character specifications — and, where relevant, uploaded or reference assets — may be processed by third-party AI/image-generation providers acting on our behalf. We send only what is needed to fulfil generation.

6. Payment processors

Stripe processes payment details directly. We store only limited payment metadata (identifiers, amounts, currency, status). We do not receive or store full card numbers or CVC.

7. Legal bases and privacy principles

• Performance of our contract with you (providing the Service).
• Your consent (e.g., marketing, optional cookies).
• Our legitimate interests (security, fraud prevention, product improvement).
• Compliance with legal obligations.

8. How we share information

We do not sell your personal information.

• Service providers (cloud hosting, storage, infrastructure) under confidentiality obligations.
• Payment processor (Stripe).
• AI/image-generation providers (for generation requests).
• Email provider (for transactional and, where applicable, marketing email).
• Analytics providers, where enabled.
• Legal, safety, and security requirements, or in connection with a corporate transaction.

9. International transfers

We and our providers may process information in countries other than yours, including Canada and the United States. Where required, we rely on appropriate safeguards for such transfers.

10. Data retention

We retain personal information as long as reasonably necessary to provide the Service and for legitimate business, security, fraud-prevention, accounting, and legal purposes. See the Data Retention Policy.

11. Your rights and choices

To exercise these rights, use the Privacy & Data page in your account or contact contact@duoreels.com. We handle export and deletion through a request-based workflow with admin review.

• Access and export your data (via the in-app Privacy & Data area).
• Request correction of inaccurate information.
• Request deletion/anonymization of your account (some records may be retained where required).
• Withdraw consent and opt out of marketing email.
• Manage cookie preferences.

12. Cookies and tracking

We use essential cookies and, where enabled, preference, analytics, and marketing cookies. See the Cookie Policy.

13. Affiliate referral tracking

When you arrive through an affiliate referral link, a referral cookie records the affiliate code for attribution for a limited window. See the Cookie Policy and Affiliate Terms.

14. Children and minors

The Service is not directed to children. We do not knowingly collect personal information from anyone under the age required to form a binding agreement. If you believe a minor has provided information, contact us.

15. Security safeguards

We use technical and organizational safeguards including hashed passwords and session tokens, secure cookies, server-side authorization, rate limiting, upload validation, security-event logging, and admin review. No system is perfectly secure.

16. Breach handling

If we become aware of a personal-data breach that creates a real risk of harm, we will take reasonable steps to investigate, mitigate, and notify affected users and authorities where required by applicable law.

17. Do-not-sell statement

We do not sell personal information for money. Where applicable law treats certain sharing (e.g., analytics) as a "sale" or "share", you can limit optional cookies through your cookie preferences.

18. Contact

Privacy questions and requests: contact@duoreels.com.