Privacy Policy

Reelay ("we", "us") lets you publish short-form videos to your own social media accounts, including TikTok and YouTube. This policy explains what we collect, why, and how we handle it.

Information we collect

• TikTok account data. When you connect TikTok, we receive an OAuth access token, refresh token, and basic profile information (display name, avatar, and your TikTok open ID) needed to display your account and publish on your behalf.
• YouTube account data. When you connect YouTube via Google Sign-In, we receive an OAuth access token, refresh token, and your channel information. With your consent we access YouTube API Services to display your channel (youtube.readonly), upload videos you choose to your channel (youtube.upload), and show you your own performance metrics such as views, watch time, and audience retention (yt-analytics.readonly).
• Content you submit. The video, caption, privacy setting, and interaction options you choose for each post. We forward these to the connected platform when you press Post; we do not retain your videos after publishing.

Cookies and similar technologies

Reelay stores and accesses a small amount of information directly on your device or browser:

• Session cookie. A strictly necessary first-party cookie named reelay_session holds your encrypted sign-in session so you stay signed in between visits. It is HTTP-only, sent only over HTTPS, scoped with SameSite=Lax, and expires after 90 days.
• Local storage.Your light/dark theme preference is saved in your browser's local storage so the interface looks the same on your next visit.

We do not use advertising cookies, tracking pixels, or third-party analytics, and we do not allow third parties to place, access, or recognize cookies or similar technology on your device or browser through Reelay. You can clear or block this storage in your browser settings; removing the session cookie simply signs you out.

How we use it

We use your tokens and profile only to authenticate you, to publish the content you explicitly choose to post, and to show you your own channel and performance metrics. We never post without your direct action. We do not sell your data or use it for advertising.

YouTube API Services

Reelay uses YouTube API Services. When you connect a YouTube channel, you agree to the YouTube Terms of Service. Reelay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information you share with Google is governed by the Google Privacy Policy. You can revoke Reelay's access to your Google and YouTube data at any time from your Google Account permissions page, or by clicking "Disconnect" in Reelay.

Storage and retention

Access and refresh tokens are encrypted at rest and stored so you stay connected between sessions. You can revoke access at any time by clicking "Disconnect" in the app, by removing Reelay from your TikTok account settings, or — for YouTube — from your Google Account permissions. When you disconnect, we revoke the token with the platform and delete the stored tokens and profile data associated with your account.

YouTube data. Channel and video statistics we retrieve with your authorization — such as subscriber, view, like, and watch-time counts — are kept as a dated daily snapshot so you can see how your channel changes over time, and every chart states the date each point was collected. All other YouTube API data held in those snapshots, including video titles, publish dates, and privacy status, is kept for no more than 30 calendar days and is then refreshed or deleted. You may ask us to delete the YouTube data we hold about you at any time by disconnecting the channel or by contacting us at the address below; we delete it within 7 calendar days.

Sharing

We share content with the platform you publish to (TikTok or YouTube) solely to fulfill your publishing request, through that platform's official API. We do not share your data with any other third parties.

Your choices

You can disconnect any connected account at any time. To request deletion of any remaining data, contact us at the address below.

Contact

Questions about this policy? Email royalcircle97@naver.com.