Privacy Policy
InScotia Limited ("we", "us", "our") operates the ๐ฌ ReelView platform. This Privacy Policy explains how we collect, use, store, and protect your personal data.
We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR).
1. Data Controller
Company Number: SC864995
Registered in Scotland, United Kingdom
Contact: privacy@reelview.io
2. Data We Collect
2.1 Data you provide directly
- Account data: Name, email address, password (hashed), role, organisation name
- Profile data: Job title, profile photo (optional)
- Payment data: Billing address, payment card details (processed and stored by Stripe โ we do not store card numbers)
- Content: Video files, session names, review comments, and reactions
- Communications: Messages you send to our support team
2.2 Data collected automatically
- Usage data: Pages visited, features used, session duration, click patterns
- Device data: Browser type, operating system, device type, screen resolution
- Connection data: IP address, approximate location (country/city level)
- Cookies and tracking: See our Cookie Policy
2.3 Data we do not collect (on-device AI)
When you use ReelView's on-device AI features, all AI processing occurs locally on your device. No video frames, audio recordings, or transcript text are transmitted to our servers during on-device AI inference.
2.4 Data from third parties
If you connect social media accounts, we receive only the data you explicitly authorise โ typically aggregate analytics such as watch-through rates. We never receive your social media passwords.
3. How We Use Your Data
| Purpose | Legal basis |
|---|---|
| Providing and operating the Service | Contract performance |
| Processing payments and managing subscriptions | Contract performance |
| Sending transactional emails | Contract performance |
| Responding to support requests | Legitimate interests |
| Sending product update emails (where opted in) | Consent |
| Improving the platform through usage analytics | Legitimate interests |
| Fraud detection and security | Legitimate interests |
| Complying with legal obligations | Legal obligation |
| Training AI models (aggregate, anonymised, consent-required) | Consent |
4. AI Training Data
4.1 Default
By default, your session data is used only in aggregate, anonymised form to improve platform-wide models. No individually identifiable data is used.
4.2 Opt-in
If you opt in (available in Account Settings โ Privacy), your individual session data may be used as training samples. You may opt out at any time.
4.3 Opt-out
If you opt out, your data is excluded from all training use. Opt-out is the default for all accounts.
5. Data Sharing
5.1 Service providers (data processors)
We engage trusted third parties to help operate the Service:
- Stripe โ payment processing
- Email service provider โ transactional email delivery
- Cloud hosting provider โ infrastructure and storage
- Analytics provider โ anonymised usage analytics
5.2 Reviewers you invite
When you share a session, reviewers can see the content, your name, and your organisation name. They cannot see your payment information.
5.3 Legal requirements
We may disclose your data to law enforcement or regulatory authorities where required by applicable law.
5.4 Business transfers
If InScotia Limited is acquired or its assets transferred, your data may be transferred. We will notify you before your data is subject to a different privacy policy.
6. Data Retention
| Data type | Retention period |
|---|---|
| Account data | Duration of account + 30 days after deletion |
| Session content (videos) | Duration of account + 30 days after deletion |
| Approval certificates | Duration of account + 7 years (legal record) |
| Payment records | 7 years (legal/tax obligation) |
| Support communications | 3 years |
| Usage/analytics data | 24 months (anonymised) |
| AI training samples (opted in) | 2 years from session date |
7. International Data Transfers
InScotia Limited is registered in Scotland (UK). Your data is primarily processed in the UK and European Economic Area (EEA).
If your data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, such as UK International Data Transfer Agreements.
8. Your Rights
Under UK GDPR, you have the following rights:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate data |
| Erasure | Ask us to delete your data ("right to be forgotten") |
| Restriction | Ask us to limit how we use your data |
| Portability | Request your data in a machine-readable format |
| Object | Object to processing based on legitimate interests |
| Withdraw consent | Withdraw consent at any time |
To exercise any right, contact us at privacy@reelview.io or use the self-service tools in Account Settings โ Privacy.
We will respond within 30 days. Complex requests may take up to 90 days.
9. Security
We implement appropriate technical and organisational security measures:
- All data in transit is encrypted (TLS 1.2+)
- Data at rest is encrypted (AES-256)
- Passwords are hashed (bcrypt)
- Access to production systems is restricted and logged
- Regular security assessments are conducted
10. Cookies
We use cookies and similar technologies. For full details, see our Cookie Policy.
11. Children
ReelView is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact privacy@reelview.io.
12. Changes to This Policy
We may update this Privacy Policy. When we make material changes, we will:
- Update the "Last updated" date
- Notify you by email at least 14 days before changes take effect
- Where required by law, obtain your consent to the updated policy
13. Complaints
UK: You may complain to the Information Commissioner's Office (ICO). Website: ico.org.uk | Phone: 0303 123 1113
14. Contact
privacy@reelview.io
InScotia Limited ยท SC864995 ยท Scotland, United Kingdom