Privacy Policy

1. Controller

Philipp Kremer (Philaix), Adenauerallee 9, 52066 Aachen, Germany
Email: info@philaix.de

2. Data we process

• Account data: name, email address and password hash for signing in.
• Connected social media accounts: account ID, username, display name, avatar, follower count and access tokens, which are stored encrypted.
• Content you upload: videos, images, audio files and captions for your posts.
• Statistics about your posts and accounts (e.g. views, reach, likes) retrieved through the platform APIs.
• Results of the AI tools, e.g. transcripts and isolated voice tracks.
• API keys: only a hash is stored, never the key itself.

3. Purpose and legal basis

We process this data solely to publish your content on your behalf to the accounts you connected, to run the tools you start and to show you analytics (Art. 6(1)(b) GDPR). We do not sell data and do not use it for advertising.

4. Instagram / Meta

When you connect Instagram, Reelbeam gets access through the Instagram API to your basic profile, the permission to publish content on your behalf, and your account insights. You can revoke access at any time in Reelbeam (“Accounts → Disconnect”) or in the Instagram settings under “Apps and websites”.

5. TikTok

When you connect TikTok, Reelbeam gets access through TikTok Login Kit and the Content Posting API to your basic profile (display name, username, avatar), your profile statistics (followers, likes, video count), the list of your public videos with their counts, and the permission to publish videos on your behalf or upload them as drafts. Reelbeam only publishes what you create in Reelbeam yourself, with the privacy level you choose. You can revoke access in Reelbeam (“Accounts → Disconnect”) or in the TikTok app under “Settings and privacy → Security → Apps and services”.

6. Hosting and service providers

• Hosting of app, database and media: Hetzner Online GmbH, data center in Germany.
• Transactional email (e.g. account approval, password reset): STRATO GmbH, Germany.
• AI tools (transcription, voice isolation): ElevenLabs. A file is only transferred for processing when you start a tool; this may involve a transfer to the United States.

Access tokens are stored encrypted with AES-256-GCM.

7. Website visit statistics

When you open our public pages (e.g. home page, sign-in page, legal pages), our server counts the visit itself – without cookies, without a tracking script, without third-party services and without storing anything on your device. We store the page, the time, the domain of the referring page, campaign parameters from the link (utm_source, utm_medium, utm_campaign), the device type (desktop, smartphone, tablet) and a daily identifier. We derive the identifier from your IP address and browser user agent together with a random value that changes every day; the IP address itself is not stored. The random value is deleted after two days at the latest, after which no visit can be linked to a person. Counted visits are deleted after 12 months. Nothing is counted while you are signed in.

If you request access, we also store your optional answer on how you heard about Reelbeam and the source through which you first reached our site on the same day. The legal basis is our legitimate interest in understanding, with as little data as possible, how visitors find us (Art. 6(1)(f) GDPR).

8. Retention and deletion

When you disconnect an account, we delete its access token immediately. Other data is kept as long as your account exists. See Data Deletion for how to have all data deleted.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a data protection authority. Contact us at info@philaix.de.