Reel Zap Privacy Policy

Effective as of May 11, 2026

1. Introduction

This is the Privacy Policy of Reel Zap, a product of Spooky House Studios UG, with its legal address at Amtsgericht Leipzig, HRB 26050. Reel Zap provides AI clipping and editing platform, turning videos into shorts. This Privacy Policy explains how we process personal data of individuals who use our services, including our platform, websites (e.g. reelzap.app), and other product and Services (“Services”).

At Reel Zap, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below, and you hereby consent that we will collect, use and share your information as described in this Privacy Policy.
Remember that your use of Reel Zap's Services is at all times subject to our Terms of Services, which incorporates this Privacy Policy. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Services.

This Policy applies where we offer our Services, products, and platforms to individual users.  For purposes of this Privacy Policy, Reel Zap is usually the processor of your personal data. We are the controller only if we process data for our own legitimate purposes.

Reel Zap complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Reel Zap has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Reel Zap has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program and to view our certification, please visit https://www.dataprivacyframework.gov/. Reel Zap is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).
As we continually work to improve our Services, we may need to change this Privacy Policy from time to time. Upon such changes, we will alert you to any such changes by placing a notice on the Reel Zap website, by sending you an email and/or by some other means. Please note that if you’ve opted not to receive legal notice emails from us (or you haven’t provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes.

If you are an EU, UK, or Swiss Individual, where we transfer your personal data to third party service providers who perform services for us or on our behalf, we are responsible for the processing of that data by them and shall remain liable if they process your personal data in a manner inconsistent with the DPF Principles, unless we prove that we are not responsible for the event giving rise to the damage.

2. Scope – What Does This Policy Cover?

This Privacy Policy covers how we process treat Personal Data that we gather when you access or use our Services. “Personal Data” means any information relating to an identified or identifiable individual, such as e.g. an individual's name, address, telephone number, or email address. means any information that identifies or relates to a particular individual and also includes information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws, rules or regulations. This Privacy Policy does not cover the practices of companies we don’t own or control or people we don’t manage.

3. What Information Do We Collect, and for What Purposes?

Categories of Personal Data We Collect, Purposes and Legal Basis for Processing according to the GDPR

For your convenience, this chart details the categories of Personal Data that we collect and have collected over the past 12 months:

Category of Personal Data and examplesPurpose and Legal Basis for Processing Based on the GDPRCategories of Third Parties with Whom We Share this Personal DataProfile or Contact Data:Purpose: Account creation, authentication, customer supportLegal Basis: Contractual necessityCommercial Data:Purpose: Maintain logs to detect bugs, security incidents, and deliver the serviceLegal Basis: Contractual necessity and legitimate interestDevice/IP Data:Purpose: Service security, troubleshooting, analyticsLegal Basis: Legitimate interestWeb analytics:Purpose: Remember settings, measure reach, show adsLegal Basis: Consent (except for essential cookies) and legitimate interestSocial Network Data:Purpose: Provide the integration the user requested (e.g. import videos, publish clips), show social-media performance metrics in dashboard, improve creator-tool features & benchmark trendsLegal Basis: Contractual necessity and consentGeolocation Data:Purpose: Detect suspicious log-ins and payment fraudLegal Basis: Legitimate interestInferences Drawn from Other Personal Data Collected:Purpose: Personalizing servicesLegal Basis: Contractual necessityUser-generated content:Purpose: Provide editing & sharing features, improve product and servicesLegal Basis: Contractual necessity, legitimate interest

Special Categories of Personal Data (Art 9 GDPR)

Reel Zap does not request, collect, or intentionally process any “special categories of personal data” within the meaning of Article 9 GDPR — that is, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data for uniquely identifying a person, health information, or data concerning a person’s sex life or sexual orientation. We ask that you do not upload or otherwise share such information when you use the Services. Reel Zap does not collect Sensitive Personal Data, as such term is defined under U.S. State Privacy Laws.

Payment data

When you purchase a subscription or pay for any Reel Zap service, your payment data (card type, last 4 digits, expiry month/year, billing name, address, e-mail and transaction identifiers) are collected and processed by Stripe. Your payment data are handled in line with Stripe’s own privacy policy, which you can review at https://stripe.com/privacy.

Categories of Sources of Personal Data

We collect Personal Data about you from the following categories of sources:

Our Commercial or Business Purposes for Collecting or Disclosing Personal Data

We will not collect additional categories of Personal Data or use the Personal Data we collected for materially different, unrelated or incompatible purposes without providing you notice.

If you are a California resident, please note that we only use or disclose your sensitive personal information for the purposes set forth in section 7027(m) of the CCPA regulations and we do not collect or process sensitive personal information with the purpose of inferring any characteristics about California residents.

4. How Do We Share Your Data?

How We Disclose Your Personal Data

We disclose your Personal Data to the categories of service providers and other parties listed in this section. Depending on laws or regulations that may be applicable to you, some of these disclosures may constitute a “sale” of your Personal Data. For more information, please refer to the state-specific sections below.

Legal Obligations

We may share any Personal Data that we collect with third parties in conjunction with any of the activities set forth under “Meeting Legal Requirements and Enforcing Legal Terms” in the “Our Commercial or Business Purposes for Collecting Personal Data” section above.

Business Transfers

All of your Personal Data that we collect may be transferred to a third party if we undergo a merger, acquisition, bankruptcy or other transaction in which that third party assumes control of our business (in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices. In such case an appropriate joint-controllership or data protection agreements will be entered into, to ensure an appropriate level of data protection.

5. Cookies and Other Tracking Technologies

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs and JavaScript (collectively, “Cookies”) to enable our servers to recognize your web browser, tell us how and when you visit and use our Services, analyze trends, learn about our user base and operate and improve our Services. Cookies are small pieces of data– usually text files – placed on your computer, tablet, phone or similar device when you use that device to access our Services. We may also supplement the information we collect from you with information received from third parties, including third parties that have placed their own Cookies on your device(s). Please note that because of our use of Cookies, the Services do not support “Do Not Track” requests sent from a browser at this time.

We use the following types of Cookies:

You can decide whether or not to accept Cookies through your internet browser’s settings. Most browsers have an option for turning off the Cookie feature, which will prevent your browser from accepting new Cookies, as well as (depending on the sophistication of your browser software) allow you to decide on acceptance of each new Cookie in a variety of ways. You can also delete all Cookies that are already on your device. If you do this, however, you may have to manually adjust some preferences every time you visit our website and some of the Services and functionalities may not work.

To find out more information about Cookies generally, including information about how to manage and delete Cookies, please visit http://www.allaboutcookies.org/ or https://ico.org.uk/for-the-public/online/cookies/ if you are located in the European Union.

Information about Interest-Based Advertisements:

We may serve advertisements, and also allow third-party ad networks, including third-party ad servers, ad agencies, ad technology vendors and research firms, to serve advertisements through the Services. These advertisements may be targeted to users who fit certain general profile categories or display certain preferences or behaviors (“Interest-Based Ads”). Information for Interest-Based Ads (including Personal Data) may be provided to us by you, or derived from the usage patterns of particular users on the Services and/or services of third parties. Such information may be gathered through tracking users’ activities across time and unaffiliated properties, including when you leave the Services. To accomplish this, we or our service providers may deliver Cookies, including a file (known as a “web beacon”) from an ad network to you through the Services. Web beacons allow ad networks to provide anonymized, aggregated auditing, research and reporting for us and for advertisers. Web beacons also enable ad networks to serve targeted advertisements to you when you visit other websites. Web beacons allow ad networks to view, edit or set their own Cookies on your browser, just as if you had requested a web page from their site.

Users in the European Union should visit the European Interactive Digital Advertising Alliance’s user information website http://www.youronlinechoices.eu/.

6. How Long Do We Store Your Information?

We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes for collecting your Personal Data. When establishing a retention period for specific categories of data, we consider who we collected the data from, our need for the Personal Data, why we collected the Personal Data, and the sensitivity of the Personal Data. In some cases we retain Personal Data for longer, if doing so is necessary to comply with our legal obligations, resolve disputes or collect fees owed, or is otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.

For example:

7. How Do We Secure Your Information?

Data security is of great importance to us, and to protect your personal information, we have put in place suitable technical, organizational, physical, electronic, and managerial procedures designed to safeguard and secure personal information collected through our Site. You can review them via Trust Portal. We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data.

Notwithstanding any security measures that we take, it is important to remember that the transmission of data via the Internet may not be completely secure, and we cannot guarantee that the collection, transmission and storage of data will always be secure. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure. Please take suitable precautions when transmitting data via the Internet to us.

You should also help protect your data by appropriately selecting and protecting your password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure. For the details about our security measures, please visit our Trust Portal.

8. Children's Privacy

As noted in the Terms of Services, we do not knowingly collect or solicit Personal Data about children under 16 years of age. I; if you are a child under the age of 16, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 16 years of age, we will delete that information as quickly as possible. If you believe that a child under 16 years of age may have provided Personal Data to us, please contact us at account.deletion@reelzap.app.

9. Subprocessors and Third-Party Websites And Materials

We are not responsible for the privacy or security of, information found on, or any practices employed by any third-party applications, websites, or services linked to or from our Service. Although we may provide links to third-party websites or platforms, or display content, data, applications or materials from third parties, our Privacy Policy does not apply to those third-party sites or materials, and your browsing and interaction on any third-party site, application, or service, including those that have a link on our Services, are subject to that third party's own terms and policies.

The current list of sub-processors can be found at Trust Portal. We reserve the right to engage new sub-processors, provided that they meet a high level of security and data protection. We enter into Data Protection Agreements with all of our sub-processors.

10. Additional U.S. State Disclosures and Rights

U.S. State Privacy Rights

If you reside in certain U.S. states such as California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia you may have certain rights afforded to you (as described below) depending on your state of residence. Please see the ‘Exercising Your Rights under U.S. State Privacy Laws’ section below for instructions regarding how to exercise these rights. Please note that we may process Personal Data of our customers’ end users or employees in connection with our provision of certain services to our customers. If we are processing your Personal Data as a service provider, you should contact the entity that collected your Personal Data in the first instance to address your rights with respect to such data. Please note that your rights may be subject to certain conditions or exceptions in accordance applicable U.S. State Privacy Laws.

If you have any questions about this section or whether any of the following rights apply to you, please contact us at contact@reelzap.app.

“Selling,” “Sharing,” or “Targeted Advertising”

Depending on your state of residence, you may have the right to opt out from the “sale,” “share,” or disclosure of your Personal Data for the purposes of targeted advertising. These or similar terms may be defined differently depending the applicable U.S. State Privacy Law.

You have the right to opt-out of the sale or share of your Personal Data by following the instructions in the “Exercising Your Rights under U.S. State Privacy Laws” section. Once you have submitted an opt-out request, we will not ask you to reauthorize the sale of your Personal Data for at least 12 months.

As described in the “Tracking Tools, Advertising and Opt-Out” section above, Certain Cookies placed by third parties into our Services may allow those third parties to collect your Personal Data for targeted advertising purposes. Under certain U.S. State Privacy Laws, this may also constitute a “sale” and/or “share” of your Personal Data.  For clarity, when we use the term “sell,” we mean for valuable consideration and not for any monetary value.

We sell or share your Personal Data to the following categories of third parties:

Advertising Partners

Over the past 12 months, we have sold or shared the following categories of your Personal Data to categories of third parties listed above:

Over the past 12 months, we have sold or shared the following categories of your Personal Data to categories of third parties listed above:

To our knowledge, we do not sell or share the Personal Data of minors under 18 years of age.

Anti-Discrimination

We will not discriminate against you for exercising your rights under applicable privacy laws.  We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under applicable privacy laws. However, we may offer different tiers of our Services as allowed by applicable data privacy laws with varying prices, rates or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you.

Other State-Specific Privacy Rights

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties’ direct marketing purposes; in order to submit such a request, please contact us at contact@reelzap.app.

Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and across different websites. Our Services do not support Do Not Track requests at this time. To find out more about “Do Not Track,” you can visit www.allaboutdnt.com.

If you are a resident of Nevada, you have the right to opt-out of the sale of certain Personal Data to third parties. Please note that we do not currently sell your Personal Data as sales are defined in Nevada Revised Statutes Chapter 603A.

Exercising Your Rights under U.S. State Privacy Laws

To exercise the rights described in this Privacy Policy, you or your Authorized Agent (if applicable and as defined below), must send us a request that (1) provides sufficient information to allow us to verify that you are the person about whom we have collected Personal Data (such as your Contact or Profile Data), and (2) describes your request in sufficient detail to allow us to understand, evaluate and respond to it. Each request that meets both of these criteria will be considered a “Valid Request.” We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify your identity and complete your request. You do not need an account to submit a Valid Request.

We will work to respond to your Valid Request within the time period required by applicable privacy laws. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

Request to Opt-Out of Sale, Share, and/or Targeted Advertising

As applicable, you may opt-out from any “sales,” “shares,” or targeted advertising through Cookies, by using the following methods:

Request to Access, Delete, Correct

As applicable, you may submit a Valid Request for your right to access, delete, correct, or obtain a copy of your Personal Data described in this Privacy Policy by using the following methods:

If you are a California, Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey Oregon, or Texas resident, you may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf.

Appealing a Denial

If you are a Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, or Virginia resident and we refuse to take action on your request within a reasonable period of time after receiving your request in accordance with this section, you may appeal our decision. In such appeal, you must (1) provide sufficient information to allow us to verify that you are the person about whom the original request pertains and to identify the original request, and (2) provide a description of the basis of your appeal. Please note that your appeal will be subject to your rights and obligations afforded to you under the State Privacy Laws (as applicable). We will respond to your appeal within the time period required under the applicable law. You can submit a Verified Request to appeal by the following methods:

If we deny your appeal, you have the right to contact the Attorney General of your State, including by the following links: Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, and Virginia.

11. International Data Transfers

Reel Zap runs on secure Google Cloud servers located in the United States. By using our Services, you understand that your personal information may be processed and stored on servers, and transferred to third parties, outside your country of residence, including the United States.

If you normally reside in the European Region, the personal data that we collect from you will be further transferred to, and stored at, a destination outside of the EEA (for instance, to our service providers and partners). These transfers are made pursuant to appropriate safeguards, such as standard data protection clauses adopted by the European Commission.

The personal information that you provide to us and that we collect from you will be transferred to, stored at, or processed in, countries outside your country of residence, such as to the United States. Your personal information is also processed by staff operating outside the EEA, UK or Switzerland who work for us or one of our third-party service providers or partners. We process the personal information that you provide to us in countries outside your country of residence in order to provide our Services, perform our contract with you, and provide our website’s functionality.

We also use standard contractual clauses (SCCs) as relevant for certain transfers of personal information to third countries, unless the transfer is to a country that has been determined to provide an adequate level of protection for individuals’ rights and freedoms for their personal information.

We require that third parties to whom we transfer personal data comply with the Data Privacy Framework principles. We use standard contractual clauses (SCCs) to ensure adequate protection for personal data transferred outside the EU, UK, and Switzerland.

Pursuant to the DPF Program, EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you. You may also correct, amend, or delete the personal information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under the DPF, should direct their query to contact@reelzap.app. If requested to remove data, we will respond within a reasonable timeframe.

Moreover, in accordance with the DPF Principles, we provide you with the choice to opt out of the disclosure of your personal information to a third party or its use for a purpose that is materially different from the purpose for which it was originally collected. You can exercise this right by contacting us at contact@reelzap.app or managing your cookie preferences.

Reel Zap is liable in cases of onward transfers of your personal data to third parties.

12. Data Rights of International Users

If you are a user located outside of the United States, the following terms apply. Our goal is to provide all our international users with a consistent and high standard of data protection.

Regardless of your location, we recognize a set of data privacy rights. If you have questions about these rights or need to exercise them, you can contact us at contact@reelzap.app. We will respond to your request within the timeframe required by applicable law, and we may need to verify your identity before processing your request.

Your rights include:

RightWhat it means in practiceAccessGet confirmation that we process your data and receive a copy of the data we hold about you.RectificationHave incomplete or inaccurate data we hold about you corrected.ErasureAsk us to delete your personal data where it is no longer needed, you withdraw consent, or there is no overriding legal basis to retain it.RestrictionAsk us to temporarily stop processing your data (but continue to store it) while we resolve a separate request from you.Data PortabilityReceive the data you provided to us in a structured, machine-readable format or ask us to transmit it to another service.ObjectionObject to our processing of your data for direct marketing or when we base the processing on our legitimate interests.Withdraw ConsentIf we process data based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing done before your withdrawal.Lodge a ComplaintYou have the right to lodge a complaint with the applicable data protection authority about our collection and use of your Personal Data.

Opt-Out & Right to Object to AI Research and Development

If you are based in the European Union or European Economic Area, you are free to opt out of any use of your personal data for our AI research and model-development activities. Under Article 21 GDPR, you may object at any time to such processing. Send an e-mail to contact@reelzap.app with the subject line “AI R&D – Opt-Out” and tell us the identifier (e.g., account e-mail or customer number) under which we hold your data and we will opt your data out of this processing.

Automated Decision Making and Profiling

Depending on the state or country of your residence, you may have the right to opt-out the use of automated decision making technology or from the processing of your Personal Data for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects to you, if applicable. However, we do not process your Personal Data in this manner.

All Other Data Deletion Rights

If you use our services in other jurisdictions or on platforms that grant you the right to request deletion of your data, please send an email to exercise that right at: account.deletion@reelzap.app

13. Additional Jurisdiction-Specific Terms

For users in the following jurisdictions, these additional terms apply.

Age and Parental Consent Requirements

Certain jurisdictions have specific age requirements for using our Services.

Country-Specific Provisions

14. Right to Lodge a Complaint (EU, UK and Switzerland)

In compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF), Reel Zap commits to resolving complaints about our collection or use of your personal information transferred to the U.S. pursuant to the EU-U.S. DPF, the UK extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. EU, UK, and Swiss individuals with inquiries or complaints should first contact Reel Zap EU/EEA GDPR Representative, whose contact details are available in the Section 16 below.

Reel Zap has further committed to refer unresolved DPF Principles-related complaints to a U.S.-based independent dispute resolution mechanism, BBB NATIONAL PROGRAMS. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed by Reel Zap please visit https://bbbprograms.org/programs/all-programs/dpf-consumers for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction

Below are the contact details for the relevant authorities depending on your location:

European Economic Area (EEA) and European Union (EU)

If you are located within the EEA or the EU, you can contact the relevant supervisory authority accessible here.

United Kingdom (UK)

If you are located in the UK, you can contact the Information Commissioner's Office:

Information Commissioner's Office (ICO)

Switzerland

If you are located in Switzerland, you can contact the Federal Data Protection and Information Commissioner:

Federal Data Protection and Information Commissioner (FDPIC)

15. Contacting Us

EU GDPR representative

For users in the EU/EEA, we have appointed the following Firm to provide the services of a EU/EEA GDPR representative in the Union:

White Bison Solutions GmbH

Email: contact@reelzap.app

You can reach out to inquire about all issues related to EU/UK and Swiss privacy and data protection laws.

Contact Information

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data or your choices and rights regarding such collection and use, please do not hesitate to contact us at: