Legal
Privacy Policy
Version 1.2.0 — effective September 5, 2026
Your data stays yours. The patterns help everyone.
This Privacy Policy explains what we collect, how we use it, and your rights. It applies to the Reel Rate™ iOS app and reelrate.io.
Information We Collect
Information you give us
- Account info: email, name, business name, location
- Business data: clients, projects, quotes, contracts, invoices, time entries, financial records
- Payment info: processed by Stripe and Apple — we never see your card numbers
- Content: anything you upload (images, documents, notes)
Information collected automatically
- Device info: model, OS version, app version, locale
- Usage analytics: feature usage patterns, performance metrics, crash reports
- IP address and user agent (for security and audit logs)
Information from integrations
If you connect QuickBooks, Xero, Stripe Connect, or similar services, we receive only the data you authorize to share.
How We Use Your Data
- To provide and improve the service
- To process your subscriptions and payments
- To send transactional emails (invoices, signature notifications, account alerts)
- To power AI features — see AI Usage Disclosure
- To compile aggregate, anonymized market intelligence (see below)
- To comply with legal obligations
Market Intelligence Data
What helps one creative helps all of them. Reel Rate™ learns from how creatives price their work. When you use the app — building a quote, marking a proposal won or lost, logging paid work — we record de-identified pricing signals: project type, region, and amounts. Never your name, your client’s name, or the text of your documents. Before any signal is stored, your account identifier is replaced with a one-way keyed hash, and only aggregates drawn from at least five different contributors are ever published as benchmarks.
Contributing these de-identified signals is part of using Reel Rate™ — it is how the benchmarks every member sees get built. There is no per-account switch for it today. If you do not want to contribute, you can delete your account at any time (see Your Rights); signals already stored carry no account identifier and cannot be traced back to you. Questions: hello@reelrate.io.
Who We Share Data With
We share data only with service providers necessary to operate Reel Rate™:
- Supabase — encrypted data hosting and authentication
- Stripe / Apple — payment processing
- Anthropic — AI features (your data is not used to train their models)
- Resend — transactional email delivery
- Cloudflare — content delivery and security
We do not sell your personal data. Period.
Connected AI Apps
You can connect third-party AI assistants (such as Claude or ChatGPT) to your Reel Rate™ account. These connections are never created by us — every one starts with you and requires your explicit approval on a consent screen.
- What they can access: a connected app can read your business data — clients, projects, pipeline, invoices, contracts, tracked time, and financial summaries — on your behalf. Reading is the default. If you turn on Connected App Writes in the app, a connected assistant can also add client notes and meeting notes, draft quotes and draft proposals, add pipeline deals, revise those drafts, and move open deals between working stages on your behalf. It can never edit signed documents, delete records, send anything to a client, or mark a deal won or lost — those stay in the app.
- Where that data goes: anything a connected app reads becomes visible to that app and to its AI provider, and is handled under their privacy policies, not ours.
- How access works: connections use the OAuth industry standard. The app never receives your password, and it can only ever see your own records — the same row-level security that protects your account applies to every connection.
- Accountability: every read and every write a connected app makes is recorded in an audit log tied to your account.
- Revocation: you can disconnect an app at any time, which immediately ends its access.
Data Security
All data is encrypted in transit (TLS 1.2+) and at rest. We use row-level security on our database so users can only access their own data. Payment information is handled entirely by Stripe and Apple — we never store card numbers.
Data Retention
- Active account data: retained while your account is active
- Signed contracts: retained indefinitely (legitimate business need for dispute resolution)
- Audit trail records (signature events, terms acceptances): retained 7 years for legal compliance
- Billing records: retained 7 years (IRS requirement)
- Other personal data: deleted within 30 days of account deletion
- Market-intelligence signals: retained after account deletion — they are de-identified before storage (one-way keyed hash, no name, no client, no document text) and cannot be linked back to a deleted account
- Records under legal hold: retained until hold is released
Your Rights
- Access — export your data anytime from Settings → Export
- Correction — edit your profile and content anytime
- Deletion — delete your account from Settings → Account
- Market intelligence — signals are de-identified before storage; see “Market Intelligence Data” above
- Portability — export data in standard formats (CSV, PDF)
Users in the EU, UK, California, and other jurisdictions with specific privacy rights have additional protections. Contact hello@reelrate.io to exercise those rights.
Children’s Privacy
REEL RATE™ is not intended for users under 18. We do not knowingly collect data from minors.
Changes to This Policy
We’ll notify you of material changes via email and in-app notification. Continued use after notification constitutes acceptance.
Contact
Privacy questions: hello@reelrate.io
Rizzle Media Group, Huntington Station, NY