Privacy policy

MosLab Innovations Inc., a corporation in Canada, operates superreels.io from Ontario and is the controller of the personal information described here. For anything about privacy, email hello@superreels.io, which reaches the person responsible for protecting personal information at MosLab Innovations Inc..

This policy is written to meet Canada’s Personal Information Protection and Electronic Documents Act, the EU and UK General Data Protection Regulations, and the California Consumer Privacy Act. Where your local law gives you more, it applies.

We keep this deliberately small. We do not ask for your name, address, phone number or date of birth, and we never see your card details.

We do not collect special category data and we do not buy personal information from anyone. If you allow advertising cookies, Google, Meta and TikTok learn which of our ads brought you here and whether you signed up or paid (section 4).

The cookies in the first table are needed to run the service or to remember a preference you set. The second table lists advertising and analytics cookies from Google, Meta and TikTok, which tell us which ads bring people here. In the EEA, the UK and Switzerland they load only after you press Accept. Elsewhere they load unless you refuse them under Cookie settings at the bottom of every page, and they stay off if your browser sends a Global Privacy Control signal.

When you sign up, start a checkout or pay, and you have allowed these cookies, our server also reports that event to the same companies, with a one-way hash of your email address and account id, your IP address and browser, and the amount paid. That lets an ad blocker or a privacy setting on your phone not break the count, and it is never sent when you have refused. We never share your prompts, uploads or anything you generate.

You can clear or block these in your browser. Clearing them does not restore a used free reel, because that is recorded against the account and the device.

Making videos and images. When you generate something, the details you entered are combined with the template’s hidden prompt and sent, along with any reference images, to our video and image provider, which runs the model and returns the result.

Writing. Several features ask a language model to write for you: filling a template’s details, writing spoken lines, writing a prompt in the playground, and planning posts and captions for a campaign. For these we send the template’s name and the labels of its details, what you have typed, your brief or campaign goal and notes, recent values used for the same template (so posts do not repeat), and in the playground the photos you attach. Writing requests go through OpenRouter to the model named in section 7.

On a schedule. If you set up a campaign, we write, generate and publish on the dates and times you choose without you pressing anything each time. That is carried out on your instructions, and you can review, change, skip or stop every post before it runs.

This processing may happen outside Canada and outside the European Economic Area. We do not use your prompts, uploads or generated content to train any model of our own, and we do not sell or share them. Our providers process them under their own terms in order to produce your output and may retain them briefly for operational and safety purposes.

Eligibility for the free reel is decided automatically, as described in section 9.

Connecting an account is optional. When you do, the platform asks you to approve what SuperReels may do, and we use that access only to publish what you create or schedule and to tell you whether it worked:

We never read your feed, messages, comments, followers or audience, and we never post anything you did not create or schedule. Access tokens are kept on our servers only, never sent to your browser, and deleted as soon as you disconnect. You can disconnect in Settings, or remove SuperReels in the platform’s own settings, which tells us to disconnect and delete the token automatically. See Delete your data.

What we receive from these platforms is used only to run the features above for you. We do not:

• sell, license or buy it, or pass it to data brokers;
• use it for advertising, or to build or add to a profile of you;
• use it to decide anyone's eligibility for housing, employment, insurance, credit or anything similar;
• use it for surveillance;
• share it with anyone except the providers in section 7 that run the service, when you tell us to, or when the law requires it.

Our use of information from Facebook, Instagram and Threads follows Meta’s Platform Terms and Developer Policies. If a token expires or is revoked, we can no longer post to that account: a scheduled post to it fails and says so in your post history, and you can connect the account again at any time.

Once published, a post is on the platform and is governed by that platform’s own terms and privacy policy. Deleting it in SuperReels does not remove it from the platform.

We share personal information only with the providers that make the service work, and only as far as each one needs it.

We may also disclose information if the law requires it, to enforce our terms, to protect someone’s safety, or to a buyer if our business is sold, in which case we will tell you first.

Our providers operate outside Canada, mainly in the United States. Where we transfer personal information out of the European Economic Area or the United Kingdom we rely on the European Commission’s standard contractual clauses, and the UK addendum where it applies, together with the safeguards each provider offers. Ask us at hello@superreels.io for details of the arrangements in place.

Whether a new account receives the free reel is decided automatically, without a person reviewing it. The decision uses the device you signed up on, a hash of your IP address, the email domain, and whether you used a team code. The only consequence is that the account does not get one free reel; you can still use every part of the service by choosing a plan.

You can ask a person to review that decision, explain your situation, or contest it, by emailing hello@superreels.io.

Campaigns make and publish posts automatically, but only on your instructions and schedule; they are not decisions about you.

Wherever you live, you can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything inaccurate;
• delete your account and the information tied to it;
• give you your information in a portable format;
• restrict or object to how we use it, including our anti-abuse processing;
• withdraw a consent you gave us, without affecting what we did before.
• disconnect any social account at any time, which deletes its access token straight away.

To delete your data, or to check a request a platform sent us, see Delete your data. For anything else, email hello@superreels.io and we will respond within 30 days. We may ask you to confirm you control the account’s email address. There is no charge, and asking will never cause us to treat you differently.

California. In the past 12 months we collected the categories described in section 2, for the purposes in section 3, and shared them with the providers in section 7. We do not sell personal information. The advertising cookies in section 4 may count as sharing it for cross-context behavioural advertising; you can opt out under Cookie settings at the bottom of any page, and we treat a Global Privacy Control signal as that opt-out. You may still ask us to know, delete or correct, and you may use an authorised agent.

Complaints. If you are unhappy with our answer you can complain to the Office of the Privacy Commissioner of Canada, to the Information Commissioner’s Office in the United Kingdom, or to your national data protection authority in the European Economic Area.

Traffic is encrypted in transit, and our database and file storage are encrypted at rest by the providers who run them. Access to production data is limited to the operator of the service. Template prompts are only ever read on the server. Access tokens for connected accounts are only ever read on the server, are never sent to a browser, and are deleted when you disconnect. IP addresses are stored as one-way hashes rather than in the clear. Card details never touch our systems. No system is perfectly secure; if a breach affects you we will notify you and the relevant regulator as the law requires.

SuperReels is for adults. It is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe a child has created an account, tell us at hello@superreels.io and we will delete it.

We will update this page when our practices change and move the date at the top. If a change materially affects how we use your information we will tell you by email or in the app before it takes effect.