Privacy Policy

Last updated: May 2026

1. Who We Are

Onyx Reelz is an AI-powered video creation platform. For privacy matters, contact us at: privacy@onyx-reelz.com

2. What Data We Collect

Account data: Email address and password (hashed) when you register.
Content data: Video clips, audio files, images, scripts and narrations you upload or create.
Usage data: Features used, reels created, publish history, credit usage.
Social media tokens: OAuth access tokens for LinkedIn, YouTube, Instagram and TikTok — stored securely and used only to publish your content on your behalf.
Payment data: Processed securely by Stripe. We never store card details.

2a. How You Found Us (Marketing Attribution)

When you create an account we record where you came from, so we can understand which channels are worth our time. This is what we collect at signup:

Link parameters: if the link you arrived on carries campaign tags (utm_source, utm_medium, utm_campaign, utm_content, utm_term) and you sign up in that same visit, we save those tags.
Referrer: the website you came from, if your browser tells us.
Your answer to "How did you hear about Onyx?" This question is optional. If you choose "Other" you can add up to 100 characters of text. Skipping it makes no difference to your account.

We also record when you reach a few milestones (creating an account, your first reel, your first AI generation, your first export, your first publish and your first purchase) against your account, together with these details, so we can see which channels lead to real use.

Nothing is stored on your device for this. We do not use cookies, local storage or similar technology for attribution. When you arrive on our site, the campaign tags and referrer are read and held in your browser's memory only. They are sent to us only if you sign up in that same visit, and they are forgotten as soon as the page is reloaded or closed. If your browser sends a Global Privacy Control or Do Not Track signal, we do not read the campaign tags or referrer at all. Your answer to "How did you hear about Onyx?" is sent only if you choose one.

Why we do this and our lawful basis: to understand which channels work so we can decide where to spend our time and money. We rely on legitimate interests (UK GDPR Article 6(1)(f)). We think the impact on you is low, because the information is limited and is not used to profile you or to show you advertising. You can object at any time by emailing privacy@onyx-reelz.com.

How long we keep it: 12 months. If you delete your account, the source record we hold for you is deleted with it, and the milestone records are no longer linked to your account.

2b. Marketing Emails

At signup there is an optional box, unticked by default, asking if you would like product updates and tips by email. If you tick it, we record that you agreed, the date and time, and which version of the wording you saw, so that we can show you consented. We only use your email address for marketing if you tick the box, and ticking it or not makes no difference to your account. You can withdraw your consent at any time by emailing privacy@onyx-reelz.com. We keep this record for as long as you have an account.

3. How We Use Your Data

To provide the Onyx Reelz service and process your video creations
To publish content to social platforms you have connected
To manage your subscription and AI credits
To send essential service notifications

4. AI Processing

Your prompts and content are processed by third-party AI services to generate video, audio and text. These include:

Kling AI — video generation
OpenAI — script analysis, caption generation, title generation
ElevenLabs — text-to-speech and voiceovers
HeyGen — avatar video generation
Fadr — audio stem-splitting and remixing
Anthropic Claude — AI assistant and content features
Pexels — stock video and image search

We do not sell your prompts or content to train AI models without your explicit consent.

5. Social Media Connections

When you connect LinkedIn, YouTube or Instagram, we store your OAuth access token solely to publish content on your behalf. We request only the minimum permissions required. You can disconnect at any time from your Account settings page.

5a. TikTok

When you connect TikTok, we request the video.publish permission. The only information we read from your TikTok account at connection time is your open_id — a unique account identifier. We do not read your profile information, follower data, or video list.

We write to your TikTok account only when you explicitly publish a video through Onyx Reelz, including the caption text, hashtags, and your chosen privacy, duet, comment and stitch settings for that post.

Your TikTok access token is stored securely and used only to publish content on your behalf when you choose to post. When you disconnect TikTok, we revoke your access token directly with TikTok's servers and delete our stored copy immediately — your token can no longer be used by us or anyone after disconnecting.

6. Data Sharing

We do not sell your personal data. We share data only with service providers necessary to operate the platform (listed above), Stripe for payment processing, and Supabase for secure database hosting.

7. Data Retention

Account data: retained while your account is active, deleted within 30 days of account closure upon request
Generated videos: stored while your account is active
Social media tokens: deleted immediately when you disconnect a platform

8. How to Delete Your Data

You can delete your data from Onyx Reelz in two ways:

Disconnect a social account: go to Account settings and click "Disconnect" next to any connected platform (Instagram, TikTok, LinkedIn, YouTube). This immediately revokes and deletes that platform's access token from our systems — nothing further is retained for that connection.
Delete your full account and data: go to Account settings, scroll to the Danger Zone, and click "Delete Account" (confirm with your password). If you can't access your account, email privacy@onyx-reelz.com with the subject line "Delete My Data" from your registered email address instead. Either way, your account record, uploaded content, generated videos, and any remaining social media tokens are permanently deleted within 30 days.

This includes any data Onyx Reelz has obtained via Meta/Instagram — deleting your account or disconnecting Instagram removes the associated access token and account data from our systems.

Fadr (audio stem-splitting) and HeyGen (avatar video generation) process your content under a single shared Onyx Reelz account with each provider, not an individual account per user. Because of this, we cannot request that either platform selectively delete just your content — content processed through them is retained under that provider's own data retention terms.

9. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, email privacy@onyx-reelz.com

10. Cookies

We use essential cookies for authentication and session management only. We do not use tracking or advertising cookies.

11. Security

All data is encrypted in transit (TLS) and at rest. Access tokens are stored encrypted.

12. Age Requirement

Onyx Reelz requires users to be at least 18 years old. We do not knowingly collect data from minors.

13. Changes

We will notify you by email of material changes to this policy before they take effect.

14. Contact

Email: privacy@onyx-reelz.com