Legal

Privacy Policy

Most creative software this document would describe is a service you upload your work to. Reel Lab is not that, and the difference is the whole point of this page.

Last updated 26 August 2026

1. Who is responsible

The data controller is VONAS, OPC, SEC Company Registration No. OPC20190000324, Golden Orion Bldg. No. 2, Orion cor. Mercedes St., Bel-Air, Makati City 1227, Metro Manila, Philippines. Contact: hey@reel-lab.com.

We process personal data under the Philippine Data Privacy Act of 2012 (RA 10173) and, for people in the EU, EEA and UK, under the GDPR and UK GDPR.

2. What stays on your machine

All of it. Reel Lab writes to a folder you pick, in plain files you can open with anything:

• your projects, shot lists, scripts and boards;
• every prompt you write, and every version of it;
• reference images, character photos, location plates, mood boards;
• every image and video you generate, including the takes you rejected;
• your settings, and your API keys.

Delete Reel Lab and all of it is still there. That is not a privacy feature bolted on afterwards — it is how the application was built, and it is why this policy can be short.

3. What the application sends — the complete list

Reel Lab makes network requests in exactly four situations. There is no fifth.

a. To the AI providers you chose

When you generate something, your prompt and any reference images go from your computer directly to the provider you selected — fal, Kie, Groq, or another you have configured — authenticated with your API key, which you entered and which stays on your disk. The request does not pass through us. We do not see it, log it, or receive a copy. What that provider then does with it is governed by their policy, not ours: see section 5.

b. Licence activation and validation

If you have a licensed build, the app contacts our licence server to confirm your key. It sends:

• your licence key;
• a random install identifier — 16 random bytes generated on first run and stored in your data folder. It is not a hardware fingerprint, contains nothing derived from your machine, and is discarded if you delete the folder;
• your computer's name, so you can tell your own machines apart when releasing a seat;
• your operating system and the app version.

No project data is included, and there is nothing in this request that could contain any. We use it to enforce the three-machine limit and for nothing else. The check fails open: if our server is unreachable, the app keeps working.

c. Bug reports you choose to send

If something breaks, you can send us a report. This is the only feature that transmits anything you wrote, and it never fires on its own — you press the button.

Before anything leaves your machine the report is passed through a redactor that strips API keys, tokens, absolute file paths and other secrets, and you are shown the redacted report to review before it is sent. Your email address is attached only so we can tell you when the bug is fixed. If reporting is not configured, the report is written to a folder on your own disk instead of being transmitted.

d. Update checks

The app asks our content delivery network whether a newer version exists. That request carries the app version and the ordinary network information any HTTP request carries. It uploads nothing.

4. What we never do

• We never train on your work. Not your prompts, not your images, not your video, not your projects. We do not have them.
• We never read your prompts. There is no mechanism by which we could.
• There is no telemetry or analytics inside the application. The app does not report which features you use, how long you work, or what you make.
• We never sell or rent personal data, and we do not share it with advertisers or data brokers.
• We never receive your API keys. They live in your settings file on your disk, and the bug reporter is built specifically to strip them.

5. Your AI providers

This is the part of the picture we do not control, and you should read it before assuming your prompts are private end to end.

Reel Lab keeps your work away from us. It cannot keep it away from the provider you are asking to generate something — that is what generating means. When you send a prompt to fal, Kie, Groq, Higgsfield, Arcads or any other provider, you are their customer and their privacy policy applies, not this one.

Whether they retain your prompts, log them, have staff review them, or use them to improve their own models is their decision and varies by provider and by the plan you hold with them. Some offer zero-retention or no-training options; some do not. We are not a party to that relationship, we cannot change their settings, and we are not responsible for what happens to your content, your ideas or your generations once they reach a provider.

If confidentiality matters for a project, check the policy of the specific provider you are about to use, and choose accordingly. Reel Lab lets you switch providers precisely so that the choice is yours.

6. This website

reel-lab.com is separate from the application and collects a little more, because it has to.

• If you give us your email address — to be told when we launch, to read past the reading gate, to be sent the free Reel Lab Generate app, or at checkout — we store the address, which part of the site you gave it on, the plan you were looking at, an anonymous session identifier, the referring page and your browser's user-agent string. For the free Generate app we also store whether you ticked “tell me when the full app opens in beta”; if you did not, you get the download and nothing else. We use it to email you about Reel Lab. We do not sell it and we do not run a drip campaign.
• The free Reel Lab Generate app itself sends nothing to us. It runs on your machine and talks only to Higgsfield, with your own key, when you press Generate.
• Page events. We record anonymous events — which sections were opened, which buttons were pressed — against a random session identifier, to understand what is working on the page. It is not tied to your identity unless you gave us your address.
• No cookies, no third-party trackers. This site sets no advertising cookies and loads no analytics scripts. The only thing it stores in your browser is a single flag remembering that you dismissed the reading gate.
• Fonts are served by Google Fonts, which receives the request in order to serve the file.

Our legal basis is your consent where you gave us an address, and legitimate interest in understanding how the page performs for the anonymous event counts.

7. Payments

Payments are handled by our payment partner as merchant of record; the checkout page and your receipt name it. They collect and process your payment details and billing information under their own privacy policy. We receive your email address, what you bought, the amount, and an order reference — never your card number.

8. How long we keep things

• Email addresses — until you ask us to remove you, or until we stop operating.
• Licence records — for as long as the licence exists, plus what tax and accounting law in the Philippines requires us to keep.
• Bug reports — until the bug is closed and long enough after to confirm the fix; ordinarily no more than 24 months.
• Anonymous page events — 24 months.

9. Your rights

You can ask us to show you what we hold about you, correct it, delete it, or send it to you in a portable form. You can withdraw consent to email at any time. Write to hey@reel-lab.com and we will answer within 30 days.

In practice this is a short list, because for most customers the only personal data we hold is an email address and a licence key.

If you are in the Philippines you may complain to the National Privacy Commission. If you are in the EU, EEA or UK you may complain to your national data protection authority. Data we hold is processed on infrastructure outside the Philippines; where that involves an international transfer of EU or UK data, it is made under the appropriate safeguards.

10. Children

Reel Lab is a professional tool and is not directed at children under 16. We do not knowingly collect their data. If you believe we have, tell us and we will delete it.

11. Changes

If we change what the application transmits, this page changes with it — that is a rule we hold ourselves to in the codebase, not just an intention. Material changes will be noted by the “last updated” date at the top.

12. Contact

Privacy questions, access requests, or anything you want to check about the claims on this page: hey@reel-lab.com.