Privacy Notice
This notice explains what personal data FicReel collects when you visit the site or use the Service, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it. It is written to be read, not to be skimmed past.
FicReel · Effective 2026-09-24
1. Who is responsible for your data
The Service is operated by Jingfei Guo, trading as FicReel, of No. 108, Ruyi Jiayuan, Building 1, 8F, Changxing Road, Nanshan District, Shenzhen, Guangdong 518000, China.
We are the controller of the personal data we collect about users of our product and our site. That means we decide what is collected and why, and we are the party you come to about it, at admin@mail.ficreel.com. Where you use the Service, you are contracting with us; our general terms are in the Terms of Service.
One part of the service sits outside our control: Paddle, our merchant of record, collects and controls your payment data independently, as its own controller. That is covered in section 5.
2. What personal data we collect
We collect the categories below. We do not collect payment card details.
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Your email address, login credentials, and device-scoped trial identity. | You, when you sign in or start a trial. |
| Project content | The stories you write, the reference images you upload, the prompts you submit, and the shots, scores and cuts you generate. | You, inside the product. |
| Support messages | What you write to us, including attachments, and our replies. | You, when you contact support. |
| Usage and telemetry | Which features you use, generation events, credit movements, error and performance events. | Recorded automatically as you use the Service. |
| Device and network data | IP address, device identifiers, browser and operating-system details, approximate location derived from IP address. | Recorded automatically when you reach the site. |
| Billing status | Plan, subscription status, renewal dates, invoice references and refunds. No card numbers. | Paddle, as merchant of record. |
| Browser storage | A session token, a small profile record, and any project draft held on that device. See section 9. | Your browser, on your device. Not a cookie. |
3. Why we collect it
Each category has a purpose. We do not repurpose data silently.
| Purpose | What it uses | What it means in practice |
|---|---|---|
| Creating and running your account | Account data, browser storage | Signing you in, keeping projects attached to you, granting trial credits once per device. |
| Providing the Service | Project content, account data, usage data | Storing your project, generating the shots and music you ask for, exporting your cut, and counting credits. |
| Security and fraud prevention | Device and network data, usage data, account data | Detecting credential stuffing, abuse of free credits, scraping, and payment fraud; keeping the Service up for everyone. |
| Product improvement | Usage and telemetry, device and network data | Knowing which steps break, which generations fail, and where the product wastes your credits. |
| Customer support | Support messages, account data, project content | Answering you, reproducing the problem on your project, and fixing it. |
| Billing and tax | Billing status | Knowing whether your subscription is active, and meeting our accounting obligations. |
| Marketing and lifecycle email | Account data, usage data | Telling you about changes to the Service, and — only where you have opted in — product news. |
4. Our legal bases for processing
Where the law requires us to rely on a legal basis, we rely on the following. If you are in a jurisdiction that uses a different vocabulary for the same idea, the substance is what matters.
- Performance of a contract — processing that is necessary to give you the Service you asked for: creating your account, generating and storing your shots, exporting your cut, counting credits, and administering your subscription.
- Legitimate interests — processing that is necessary for our legitimate interests, where those interests are not overridden by your rights. Concretely: keeping the Service secure and available (detecting fraud, abuse, scraping and attacks); understanding which parts of the product are broken so we can fix them; preventing misuse of free trial credits; and protecting our legal position. We use the minimum data that serves those interests, and you may object to this processing (see section 7).
- Consent — where we rely on your permission: marketing email, and any non-essential cookies or similar tracking technologies, if we ever introduce them. You can withdraw consent at any time, and withdrawing it does not affect processing that already happened.
- Legal obligation — keeping records where tax, accounting, consumer-protection or anti-fraud law requires us to, and responding to lawful requests from authorities.
5. Who we share your data with
We do not sell your personal data. We share it only with the categories of recipient below, and only as much as each one needs.
| Recipient | Why they receive it |
|---|---|
| Service providers and subprocessors | Hosting and content delivery, email delivery, and the generation engines that produce your shots and music. They process data on our instructions under contract. |
| Paddle (merchant of record) | Sale of the product, subscription management and payments, tax compliance and invoicing, and refunds. Paddle collects and controls your payment data itself as an independent controller — we never see your card number. |
| Professional advisers | Lawyers, accountants and auditors, where we need advice or must have records checked. |
| Authorities | Where the law requires it, or where we need to protect the rights, property or safety of our users, of the public or of ourselves — including enforcing our terms. |
Where a recipient is outside your country, we put appropriate safeguards in place for the transfer, such as contractual protections with the recipient, and we keep a record of those arrangements. You can ask us at admin@mail.ficreel.com for the details that apply to a specific recipient.
6. How long we keep it
We keep personal data only as long as we need it for the purpose we collected it, and then we delete it or anonymise it so that it no longer identifies you. The criteria we apply:
| Data | Retention |
|---|---|
| Account data | While your account is open, then for a short period so that you can change your mind and recover it, after which it is deleted or anonymised. |
| Project content (stories, images, shots, cuts) | While your account is open and the project exists. Delete a project and it is removed from the Service; backups roll off within a short period. |
| Usage and telemetry | A rolling window long enough to spot trends and investigate incidents, after which it is aggregated so it no longer identifies you. |
| Support messages | For as long as needed to resolve the matter and to keep a record of what we told you. |
| Billing status and tax records | For the period tax and accounting law requires us to keep records; held by Paddle as merchant of record for its own statutory period. |
| Device and network data used for security | A short rolling window, enough to detect a pattern of abuse rather than a single visit. |
Where we cannot delete data yet because the law requires us to keep it, we restrict it to that purpose instead. Where data has been anonymised, it is no longer personal data and these periods no longer apply.
7. Your rights
As required by applicable law, you have the following rights over the personal data we hold about you. We do not charge for exercising them, and we do not treat you differently for doing so.
- Access — to be told whether we hold data about you, and to receive a copy of it.
- Correction — to have inaccurate data corrected, and incomplete data completed.
- Deletion — to have your data deleted where there is no overriding reason for us to keep it.
- Restriction — to have us pause processing while a dispute about accuracy or lawfulness is sorted out.
- Objection — to object to processing based on our legitimate interests, and to object at any time to direct marketing.
- Portability — to receive the data you gave us in a structured, machine-readable format, and to have it transmitted to another controller where that is technically feasible.
- Withdraw consent — where we rely on consent, to withdraw it at any time.
- Complain — to lodge a complaint with your local data-protection authority. We would rather you came to us first, so that we can try to fix it.
Write to admin@mail.ficreel.com to exercise any of these. We will respond within the period the law allows, and we may ask for information to confirm who you are before we act — that is a protection for you, not a hurdle.
8. Security
We use appropriate technical and organisational measures to protect personal data, and we review them as the Service changes. In practice that includes encryption of data in transit between your browser and our servers, encryption of stored data at rest, access controls that limit staff and systems to the data they actually need, credential and secret management rather than hard-coded keys, and logging that lets us investigate an incident.
No service can promise perfect security. What we do promise is that we act on incidents: if a breach affects your personal data and the law requires us to tell you, we will tell you without undue delay, and we will tell the relevant authority where we are required to.
9. Cookies and similar technologies
We do not set cookies to run the Service. We do not use analytics, advertising or tracking cookies of any kind. The product keeps your session in your own browser storage (local storage), which is a different mechanism from a cookie and is never used to follow you across other sites.
| What is stored | Purpose | Your choice |
|---|---|---|
| A session token and a small profile record | Keeping you signed in, and attaching your projects and credits to your account rather than to a browser tab. | Required to provide the Service you asked for. Clearing it signs you out. |
| A draft of a project you started on this device | Letting you carry on after a refresh or a closed tab without losing what you typed. | Required only for that draft. Clearing it deletes that local draft; projects already saved to your account are unaffected. |
Because we set no cookies of our own, there is no cookie banner and no preference centre to visit: nothing is switched on for you to switch off. You can clear this browser storage at any time in your browser settings, where most browsers let you delete data for a single site.
One exception happens at payment time. If you start a checkout, our merchant of record Paddle loads its own checkout and may set its own cookies in order to process the payment, prevent fraud and remember your country. Paddle is an independent controller for that data and its own privacy notice governs it. We never see your card details.
If we ever add analytics or marketing cookies, we will ask for your consent before they are set, honour recognised browser opt-out preference signals for them, and update this notice before they go live.
10. Children
The Service is not directed at children, and you must be at least 13 years old to use it. We do not knowingly collect personal data from children below that age. If you believe a child has given us personal data, write to admin@mail.ficreel.com and we will delete it.
11. Changes to this notice
We update this notice when our processing changes or the law changes. The current version is always on this page, with its effective date at the top. If a change materially affects you, we will tell you through the Service or by email before it takes effect.
12. How to contact us
Privacy questions, and requests to exercise the rights in section 7: admin@mail.ficreel.com. You can also write to Jingfei Guo, No. 108, Ruyi Jiayuan, Building 1, 8F, Changxing Road, Nanshan District, Shenzhen, Guangdong 518000, China.
For billing and payment questions, Paddle is the right contact as merchant of record — see the Contact page. The other documents in this set are the Terms of Service and the Refund Policy.