who we are
reeldrop is operated by 10517933 Canada Ltd. (operating as reeldrop.io), a Canadian corporation. reeldrop is an instagram content scheduling and AI creation tool that helps creators plan, generate, and publish reels, posts, stories, and carousels from one workspace.
this policy explains what personal information we collect when you use reeldrop.io (the “service”), how we use it, who we share it with, and the rights you have over it. by using the service you agree to the practices described here.
information we collect
account information (via clerk)
we use clerk for authentication. when you sign up we receive your name, email address, profile image, and a clerk-issued user identifier. we do not see or store your password.
instagram and meta data (via oauth)
when you connect an instagram account we receive, via the meta/instagram graph api: your instagram user id, username, profile picture, an oauth access token, the token expiry, and metadata about media you publish or schedule (caption, hashtags, scheduled time, publish status, container ids, post insights you ask us to fetch).
content you upload
videos, images, captions, hashtags, cover frames, and audio metadata you create or upload to reeldrop are stored in our aws s3 buckets so we can transcode and publish them on your behalf.
AI inputs and outputs
when you use AI features (caption generation, hashtag suggestions, cover picking, carousel generation) we send the relevant prompt (and, for video features, the video itself) to google gemini. the generated text or image is returned to you and stored alongside the related post.
usage and device information
our hosting providers automatically log basic technical data: ip address, browser type, operating system, referring page, and timestamps of requests. we use this for security, abuse prevention, and aggregate product analytics.
cookies and similar technologies
we use a small number of cookies and similar storage mechanisms: a clerk session cookie that keeps you signed in, and a local-storage entry that remembers your theme preference. we do not use third-party advertising cookies.
how we use your information
- to provide and operate the service (sign-in, scheduling, publishing).
- to publish content to your connected instagram account on your instruction, via the instagram graph api.
- to generate captions, hashtags, cover suggestions, and carousel slides via google gemini.
- to bill paid subscriptions, if you upgrade to a paid plan.
- to detect, prevent, and address fraud, abuse, security incidents, and violations of our terms.
- to communicate with you about the service (transactional emails, security notices, important changes).
- to comply with legal obligations and respond to lawful requests.
third parties we share with
we do not sell your personal information. we share data only with vendors we need to operate the service:
- clerk: authentication and user identity. privacy policy.
- amazon web services (s3): storage of your uploaded media. privacy notice.
- google gemini: AI inference for captions, images, and video understanding. privacy policy.
- meta platforms (instagram graph api): publishing and reading content from your connected account. privacy policy.
- mongodb atlas: primary database hosting. privacy policy.
- vercel: application hosting and edge delivery. privacy policy.
data retention
- account data is retained while your account is active.
- instagram access tokens are deleted when you disconnect the account or delete your reeldrop account.
- uploaded media is retained until you delete the related post or your account.
- AI prompt history is retained alongside the post it generated, and deleted when the post or account is deleted.
- backups are purged on a rolling 30-day cycle.
- billing records are retained for 7 years to comply with canadian tax law.
your rights
depending on where you live, you have rights to access, correct, port, and delete your personal information, and to object to or restrict certain processing. these rights are recognised under canada’s personal information protection and electronic documents act (pipeda), the eu’s general data protection regulation (gdpr), the california consumer privacy act (ccpa), and equivalent laws.
see our data deletion page for instructions on disconnecting instagram or deleting your reeldrop account. for any other request, email us at hello@reeldrop.io.
children’s privacy
reeldrop is not directed at children. we do not knowingly collect information from anyone under 13 (or under 16 in the european economic area). if you believe a child has provided us their information, contact us and we will delete it.
international transfers
we are based in canada. depending on the vendor, your information may be processed in canada, the united states, or the european union. where required, we rely on standard contractual clauses or equivalent safeguards for cross-border transfers.
security
we encrypt data in transit using tls and at rest in aws s3. instagram access tokens are scoped to the permissions you authorise and are stored with restricted access. authentication is handled by clerk; we do not store your password. no system is perfectly secure, but we work to protect your information using industry-standard practices.
cookies
we use a clerk-managed session cookie (required to keep you signed in) and browser local storage for your theme preference. you can clear these from your browser at any time; doing so will sign you out.
changes to this policy
we may update this policy from time to time. when we make material changes we will notify you by email, by an in-app banner, or by updating the “last updated” date below. continued use of the service after a change means you accept the updated policy.
contact us
for any privacy questions or requests, write to us at hello@reeldrop.io.
last updated: may 8, 2026