Privacy Policy

Who we are

ReelMint Studio (“ReelMint”, “we”) is a video-creation studio at reelmint.io that helps creators plan, generate, edit, and publish short-form videos. This policy explains what data we collect, why, and how you can remove it.

Data we collect

• Account data — your name, email address, and password hash (or your Google account email if you sign in with Google), plus your workspace membership and role.
• Content you create — scripts, scenes, images, voiceovers, and rendered videos you produce in the studio, stored so you can edit and publish them.
• API keys you provide — if you connect your own AI provider keys, they are encrypted at rest and used only to run generations you request. They are never shown back in full or shared.
• Usage and log data — standard server logs (request paths, timestamps, errors) used for reliability and abuse prevention.

Google user data

If you connect a Google account, ReelMint requests only the scopes it needs to do what you ask:

• Sign-in (openid email profile) — verifies who you are and creates your session. We store your email and display name.
• YouTube publishing (youtube.upload) — uploads videos you created in the studio to your own YouTube channel, only when you press publish.
• YouTube channel info (youtube.readonly) — reads your channel name and the status of videos the studio uploaded, so the app can show what was published.
• YouTube Analytics (yt-analytics.readonly) — reads view and engagement metrics for your channel to show performance of your published videos inside the studio.

We store the OAuth refresh token for your connection, encrypted, scoped to your workspace. We do not read your Gmail, contacts, Drive, or any data outside the scopes above. We do not sell Google user data, use it for advertising, or allow humans to read it except with your consent, for security, or where required by law.

ReelMint’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we use data

Solely to provide the service: authenticate you, store and render your projects, run the AI generations you request, publish to channels you connected, and show you analytics. We do not sell personal data or share it with third parties for their own purposes.

When you run an AI generation, the relevant content (e.g. your script text) is sent to the AI provider configured for your workspace (such as Google Gemini, OpenAI, Anthropic, or ElevenLabs) to produce the result you asked for, under that provider’s terms.

Cookies

ReelMint uses a single HttpOnly session cookie to keep you signed in. It expires after 30 days and is removed on sign-out. We do not use advertising or cross-site tracking cookies.

Storage, security, and retention

Data is stored on our servers with access controls per workspace; credentials and provider keys are encrypted at rest, and connections use HTTPS. We retain your data while your account is active. Backups are kept for disaster recovery and expire on rotation.

Revoking access and deleting data

• Disconnect YouTube/Google anytime from your project’s integrations page — this deletes our stored tokens for that connection.
• You can also revoke ReelMint’s access from your Google Account permissions page.
• To delete your account and all associated data (including stored Google user data), email hitesh.u@brilworks.com — we complete deletion within 30 days.

Changes

We will post any changes to this policy on this page and update the date above. Material changes affecting Google user data will be communicated before they take effect.