Privacy Policy

Last updated: September 26, 2026

This Privacy Policy explains how ReelGenie (“ReelGenie”, “we”, “our”, or “us”) collects, uses, discloses, and safeguards personal information when you use our website, web application, and related services (collectively, the “Services”).

ReelGenie is a product of doola.ai and is operated by WooSoo Pty Ltd, Sydney, NSW, Australia.

1. Scope

This Policy applies to information processed through reelgenie.app, including landing pages, account registration, team workspaces, connected social account workflows, and billing-related flows.

2. Information We Collect

We collect information in the following categories:

• Account and profile information: name, email address, authentication provider metadata, profile image, and team/workspace membership data.
• Team and collaboration data: team names, role assignments, invitation records, account-group configurations, and workspace settings.
• Publishing content: finished images and videos you submit, post metadata, publishing targets, schedules, and editing actions needed to review and publish content.
• Connected platform data: social account identifiers, access scopes, publishing metadata, and tokens required for authorized integrations (tokens are encrypted at rest).
• Google / YouTube integration data: if you connect YouTube, we collect the Google account and YouTube channel data needed to authorize the integration, upload content you request, and retrieve limited channel/video metadata relevant to ReelGenie publishing workflows.
• Usage and diagnostics data: product analytics events, page interactions, feature usage, error logs, and device/browser telemetry.
• Billing and subscription data: billing customer identifiers, subscription status/tier, usage counters, and payment workflow metadata. Payment card data is processed by our payment processor and is not stored by ReelGenie.
• Marketing attribution data: campaign/UTM parameters and referral data used for conversion attribution.

For billing and plan limits, see our Pricing Policy and Terms of Service.

3. How We Use Information

We use personal information to:

• Provide, maintain, and secure the Services.
• Authenticate users and enforce role-based team/workspace access.
• Operate social publishing workflows and process connected platform actions.
• Store, preview, and prepare the finished media and metadata you submit for authorized publishing.
• Process subscriptions, manage billing state, and prevent abuse/fraud.
• Measure product performance, conversion, reliability, and user experience.
• Communicate service updates, account notices, and support responses.
• Comply with legal obligations and enforce our terms and policies.

4. Legal Bases (Where Applicable)

Depending on your location, we rely on one or more legal bases, including:

• Performance of a contract (to provide the Services you request).
• Legitimate interests (security, analytics, product improvement, fraud prevention).
• Consent (for certain analytics/cookies or optional communications).
• Legal obligations (compliance, dispute handling, and lawful requests).

5. Cookies and Similar Technologies

We use essential technologies needed for core site/app functionality and optional analytics technologies for traffic and conversion measurement. Analytics tracking on landing pages is consent-based where required. You can manage preferences through the cookie banner and browser controls.

6. How We Share Information

We may disclose information to:

• Infrastructure and hosting providers (for authentication, databases, storage, and application delivery).
• Payment processors (for subscription and billing operations).
• Connected platform APIs (for authorized social publishing and related account actions).
• Security, analytics, and support vendors under contractual safeguards.
• Legal and compliance recipients when required by law or to protect rights, safety, and platform integrity.

We do not sell personal information or share personal information for cross-context behavioral advertising as defined under certain privacy laws.

7. Data Retention

• Saved posts, original media, Favourites and performance observations: retained while your account remains active so you can review, reuse and reconcile deliveries. Removing a post from the library is a soft deletion and does not erase its originals or delivery history. Request permanent erasure through our support/data-request channel.
• Plugin operation audit records: retained for 90 days, then eligible for automated daily deletion. New records contain operation status and the identifiers/revisions needed for reconciliation, rather than copies of captions, creative briefs, reference instructions or authentication secrets. Backlogs or failed cleanup runs can delay physical deletion.
• Plugin OAuth transaction and token records: connection requests are valid for 15 minutes, authorization codes for 5 minutes, access tokens for 1 hour and refresh tokens for 30 days. Expired records become eligible for automated deletion 24 hours after expiry. Revoking a connection immediately blocks its tokens; connection identity and consent settings remain until removed or an account-data request is fulfilled.
• Connected-account credentials: retained while the connection is active for authorized publishing and refresh. Disconnecting prevents further use; request account-data erasure for removal of retained connection records.
• Billing and security records: retained for the duration required by the applicable accounting, legal or dispute obligation. We explain any applicable exception when responding to an erasure request; these records are separate from plugin creative content.

For access or permanent-erasure requests, contact contact@doola.ai. We verify ownership before acting. Removal from ReelGenie does not remove copies already delivered to a connected social platform or retained by the host under its own policies.

8. Google and YouTube User Data

If you connect YouTube, ReelGenie may process Google user data such as your channel identifier, channel name, profile image, OAuth scopes, encrypted access and refresh tokens, upload metadata you provide, and performance data for videos published through ReelGenie.

• We use this data only to authenticate your account, upload or manage YouTube Shorts you request, refresh authorization, and retrieve limited metrics or channel details needed to operate the integration.
• We do not sell Google user data, and we do not use Google user data obtained through Google APIs to train generalized AI or machine learning models.
• We do not share Google user data with third parties except as needed to provide the requested integration, comply with law, or protect the security and integrity of ReelGenie.

9. Security

We implement administrative, technical, and organizational safeguards designed to protect personal information. Security measures include access controls, authentication checks, encryption in transit, and encryption-at-rest for sensitive integration credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

For sensitive integration data, our protections include encrypted transport, encryption-at-rest for stored credentials, authenticated role-based access controls, server-side secret management, and time-limited signed URLs when delivering stored media to connected platforms for publishing.

10. International Data Transfers

Your information may be processed in jurisdictions different from your own. Where required, we use appropriate transfer safeguards and contractual protections for cross-border processing.

11. Your Rights and Choices

Depending on applicable law, you may have rights to:

• Access, correct, or delete personal information.
• Request portability or restriction of certain processing.
• Object to certain processing activities.
• Withdraw consent where processing relies on consent.
• Appeal a denied rights request (where applicable).

To submit a request, contact us at contact@doola.ai. We may verify your identity before processing requests.

12. Children’s Privacy

The Services are not directed to children under 13 (or older minimum age where required by local law), and we do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by other appropriate means. The “Last updated” date reflects the effective revision.

14. Contact

If you have questions about this Privacy Policy or our data practices, contact contact@doola.ai.

Back to homepage