Privacy policy

Who we are

Reel Uploader is run by The Fensome Group LTD, which is the controller of your personal data under UK GDPR and the Data Protection Act 2018. Our contact details are at the bottom of this page.

Reel Uploader lets you upload short videos and publish them to Instagram and Facebook accounts you connect, at times you choose. Snapchat publishing is pending Snap approval.

What we store

• Your account: email address, name if you give one, and your password as a one way hash. We cannot read your password.
• If you sign in with Google: your Google account ID, email address and name.
• Accounts you connect: the account and page names and IDs the platform gives us, and the access tokens that let us post for you. Tokens are encrypted before they are stored.
• Your videos, captions, first comments and schedule.
• What happened to each post: when it went out, the platform's ID and link for it, and any error.
• Security records: a hash of each login session, the email address used in a failed login, and the IP address and request details in our hosting logs.
• Deletion requests made through Meta: a confirmation code, your Facebook user ID and how many connections were deleted.

Why, and our lawful basis

• To run the service you signed up for: your account, signing in, storing your videos and publishing them to the accounts you switch on. Lawful basis: contract.
• To keep the service and your accounts safe: login limits, session checks, hosting logs and daily posting limits per account. Lawful basis: our legitimate interests in security and in protecting your accounts from being treated as spam.
• To answer requests about your data and keep a record that we did. Lawful basis: legal obligation.

We do not use your videos or data for advertising, we do not sell them, and we make no automated decisions about you that have legal or similarly significant effects.

Sign in with Google

We ask Google only for the openid, email and profile scopes. Google gives us your Google account ID, email address and name, and we use them only to create your account and sign you in. We keep no Google access token, and we cannot see your Gmail, Drive, contacts or anything else in your Google account.

Reel Uploader's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and no person at The Fensome Group LTD reads it unless you ask us to, it is needed for security, or the law requires it.

Data from Meta and Snapchat

• Meta: when you connect, Facebook gives us your Facebook user ID and name, the ID, name and access token of each Page you manage, and the ID and username of any Instagram professional account linked to those Pages. We use them only to list your accounts, publish the videos you schedule and add the first comment you write.
• Snapchat, once Snap approves the app: your public profile ID, display name and username, and access tokens. We will use them only to publish to Spotlight or Stories when you schedule it.

We never read your messages, followers or other content, and we never share this data with anyone except the platform it came from.

Who it goes to

• Supabase, which stores our database and your videos in London. It acts on our instructions as a processor.
• Vercel, which runs the website and handles every request to it. It acts on our instructions as a processor.
• Meta (Instagram and Facebook) and Snap (Snapchat), but only the video, caption and first comment for a post going to an account of yours on that platform, at the time it is due. Once a post is published, the platform handles it under its own privacy policy.
• Google, only to check who you are when you choose to sign in with Google.
• Courts, police or regulators, only if the law requires it.

Nothing is posted to an account until you switch it on.

Outside the UK

Your database records and videos are stored in London, and the website runs on servers in London. Vercel, Supabase, Meta, Snap and Google are based in or operate from the United States and other countries, so your data can be processed there. Where that happens, it is protected by the UK Extension to the EU US Data Privacy Framework or by the UK International Data Transfer Addendum in each company's data processing terms.

How long we keep it

• Your account, videos and posts: until you delete them or your account.
• Disconnecting an account deletes its tokens and any posts still queued for it.
• Deleting a video deletes the file.
• Deleting your Reel Uploader account deletes everything above.
• Login sessions: 30 days. Failed login records: 1 day. Records of when each platform account was posted to, used for the daily limits: 2 days.
• Meta deletion request records: kept so you can check the request was done.
• Hosting logs and database backups are kept by our providers for a short time, then deleted.
• Posts already published stay on the platform. Delete them there.

Security

Every connection to Reel Uploader is encrypted. Platform tokens are encrypted with AES 256 before they are stored, passwords and session tokens are stored only as hashes, and videos are kept in private storage that only our server can read.

Cookies

We use only cookies that are strictly necessary to log you in and to protect the connect and sign in steps. We use no analytics or advertising cookies. See the cookie policy.

Removing Reel Uploader from Facebook

If you remove Reel Uploader in your Facebook settings, or ask Facebook to delete your data from it, we delete your Meta connection and its tokens straight away and give you a confirmation code. See data deletion.

Your rights

You can ask for a copy of your data, ask us to correct it, delete it, limit how we use it, object to how we use it, or send it to you in a format you can move elsewhere. Email us at the address below. We reply within one month.

You can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would like the chance to help first.

Children

Reel Uploader is for people aged 18 or over. We do not knowingly hold data about children.

Changes

If we change how we use your data, we update this page and the date at the top before the change applies.