Privacy Policy
TopFiveReels ("we", "us", "our") is operated by R24k Web-Ateljé, a registered business in Sweden. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service at topfivereels.com and reels.r24k.com.
1. Data We Collect
When you use TopFiveReels, we collect the following data:
- Account information: email address, name, and password (hashed, never stored in plain text)
- Reel data: cities, categories, and venue data retrieved from Google Places API and OpenStreetMap for generating your reels
- Generated content: rendered video files (MP4), thumbnails, and AI-generated text (titles, descriptions, tags)
- YouTube connection: OAuth tokens for uploading reels to your YouTube channel (stored securely, revocable at any time)
- Usage data: login timestamps, job creation dates, and basic analytics via Google Analytics
2. How We Use Your Data
We use your data to:
- Create and manage your account
- Generate map reels based on your selected cities and categories
- Upload reels to your connected YouTube channel on your behalf
- Generate AI-powered titles, descriptions, and tags for your reels
- Send account-related emails (activation, password reset)
- Improve the service and fix issues
We do not sell your personal data to third parties. We do not use your data for advertising purposes.
3. Third-Party Services
TopFiveReels integrates with the following third-party services:
- Google Places API: to retrieve venue data (names, ratings, reviews, photos, contact info) for reel generation. Data is fetched on demand and stored in your job files.
- OpenStreetMap / Overpass API: to enrich venue data with additional details. Used under the ODbL license.
- YouTube Data API v3: to upload reels and set thumbnails on your connected YouTube channel. We only access your channel with your explicit OAuth consent.
- Anthropic API (Claude): to generate titles, descriptions, and tags for your reels. No personal data is sent to this API, only venue names and categories.
- Google Analytics: to understand how the service is used. You can opt out using browser extensions or settings.
- Zoho Mail (SMTP): to send account-related emails.
4. Cookies
We use a single essential cookie ("token") to keep you logged in. This is an HTTP-only cookie that expires after 30 days. We also use Google Analytics cookies for usage statistics. No advertising or tracking cookies are used.
5. Data Storage and Security
Your data is stored on servers hosted by DigitalOcean in their European data centers. Passwords are hashed using bcrypt. All connections are encrypted via HTTPS/TLS. YouTube OAuth tokens are stored in our database and can be revoked by disconnecting YouTube in your settings.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, all personal data and reel files are permanently removed within 30 days. Job data (rendered videos, thumbnails) can be deleted individually at any time from your account page.
7. Your Rights (GDPR)
As a Swedish company, we comply with the EU General Data Protection Regulation (GDPR). You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and all associated data
- Export your data in a portable format
- Withdraw consent for YouTube integration at any time
- Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
8. Children
TopFiveReels is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Changes
We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification. The "last updated" date at the top of this page reflects the most recent revision.
10. Contact
If you have questions about this Privacy Policy or want to exercise your rights, contact us at:
R24k Web-Ateljé
Email: info@r24k.se
Website: r24k.se
Sweden