Privacy Policy
Last updated:
Who we are
Rainbow Reels (“we”, “our”, “us”) provides AI-generated pet memorial portraits and tribute videos through rainbowreels.io. We are the data controller of the personal data described in this policy.
If you have questions about this policy or want to exercise your rights, contact us at privacy@rainbowreels.io.
What we collect and why
We collect only what we need to deliver your order and run the service:
Pet photos you upload
Reference images of your pet, stored while we generate your tribute. Processed on your behalf by our AI partners listed below.
Order details
Your pet's species, breed, the template you selected, any on-screen message, and your order reference. Used to generate the tribute and deliver it.
Contact details
Email address and (optionally) name — used to deliver the finished tribute and send order-related emails. If you sign in, these are collected through our authentication provider.
Payment information
All payments are processed by Lemon Squeezy, who act as the merchant of record. We never see or store your full card details — only a transaction reference and the amount. Lemon Squeezy is the data controller for your payment information; their privacy notice applies to that data.
Technical and usage data
When you use the site we collect limited technical information (browser type, pages viewed, interactions) via EU-hosted analytics — only if you accept analytics cookies. We also collect error diagnostics to help us fix problems. None of this is used for advertising or shared with third parties.
Legal bases for processing
Under the UK GDPR, we rely on the following lawful bases:
- Contract — for processing your photos, order details, and contact information to deliver the tribute you purchased.
- Legitimate interests — for error monitoring and aggregated service diagnostics, balanced against your privacy rights (we use privacy-preserving, EU-hosted tools).
- Consent— for analytics cookies and for marketing emails (if you tick the “gentle updates” box at checkout). You can withdraw either at any time — cookies via our Cookie Policy, and marketing emails via the unsubscribe link on any email we send you.
- Legal obligation — for keeping transaction records required by UK tax and consumer law.
Who we share your data with
We use a small set of carefully chosen processors to run the service. Every processor below is bound by a data processing agreement and either operates in the UK/EU or has appropriate safeguards (UK–EU adequacy, Standard Contractual Clauses, or the UK IDTA) for any international transfers.
| Processor | Purpose | Region |
|---|---|---|
| Clerk | Authentication | USA (SCCs) |
| Neon | Database hosting | EU (London/Ireland) |
| Cloudflare R2 | Image & video storage | EU |
| UploadThing | Photo uploads | USA (SCCs) |
| FAL.AI | AI generation | USA (SCCs) |
| Inngest | Job orchestration | USA (SCCs) |
| Resend | Email delivery | USA (SCCs) |
| Lemon Squeezy | Payments (MoR) | USA (SCCs) |
| PostHog | Analytics (if consented) | EU (Frankfurt) |
| Sentry | Error monitoring | EU (Frankfurt) |
| Vercel | Site hosting & CDN | Global with EU regions |
We do not sell your data, share it for advertising, or use it to train our own AI models.
How long we keep it
Retention periods vary by data type:
- Uploaded photos: deleted within 30 days of the order being finalised (whether delivered, failed, or abandoned), or sooner on request.
- Generated portraits and videos: stored for 12 months so you can re-download. Deleted automatically after.
- Order and transaction records: kept for 6 years to meet UK tax-law requirements (HMRC).
- Account details: kept while your account is active. Deleted or anonymised within 30 days of account deletion (transaction records are retained as above).
- Analytics data: retained for 12 months in aggregated form, then deleted.
Your rights
Under UK GDPR you have the right to:
- Access a copy of your personal data
- Rectify inaccurate data
- Eraseyour data where we no longer need it (“right to be forgotten”)
- Restrict or object to our use of your data
- Port your data to another service
- Withdraw consent for analytics cookies at any time
To exercise any of these rights, email privacy@rainbowreels.io. We'll respond within 30 days (and usually much faster).
Complaints
If you're unhappy with how we've handled your data, please tell us first so we can fix it. You also have the right to complain to the UK's Information Commissioner's Office:
ico.org.uk/make-a-complaint · Helpline: 0303 123 1113
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email (if you've made a purchase) and by updating the “Last updated” date at the top of this page.