Privacy Policy

TopFiveReels ("we", "us", "our") is operated by R24k Web-Ateljé, a registered business in Sweden. This Privacy Policy explains how we collect, use, and protect your personal data when you use our service at topfivereels.com and reels.r24k.com.

1. Data We Collect

When you use TopFiveReels, we collect the following data:

• Account information: email address, name, and password (hashed, never stored in plain text)
• Reel data: cities, categories, and venue data retrieved from Google Places API and OpenStreetMap for generating your reels
• Generated content: rendered video files (MP4), thumbnails, and AI-generated text (titles, descriptions, tags)
• YouTube connection: OAuth tokens for uploading reels to your YouTube channel (stored securely, revocable at any time)
• Usage data: login timestamps, job creation dates, and basic analytics via Google Analytics

2. How We Use Your Data

We use your data to:

• Create and manage your account
• Generate map reels based on your selected cities and categories
• Upload reels to your connected YouTube channel on your behalf
• Generate AI-powered titles, descriptions, and tags for your reels
• Send account-related emails (activation, password reset)
• Improve the service and fix issues

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Third-Party Services

TopFiveReels integrates with the following third-party services:

• Google Places API: to retrieve venue data (names, ratings, reviews, photos, contact info) for reel generation. Data is fetched on demand and stored in your job files.
• OpenStreetMap / Overpass API: to enrich venue data with additional details. Used under the ODbL license.
• YouTube Data API v3: to upload reels and set thumbnails on your connected YouTube channel. We only access your channel with your explicit OAuth consent.
• Anthropic API (Claude): to generate titles, descriptions, and tags for your reels. No personal data is sent to this API, only venue names and categories.
• Google Analytics: to understand how the service is used. You can opt out using browser extensions or settings.
• Zoho Mail (SMTP): to send account-related emails.

4. Cookies

We use a single essential cookie ("token") to keep you logged in. This is an HTTP-only cookie that expires after 30 days. We also use Google Analytics cookies for usage statistics. No advertising or tracking cookies are used.

5. Data Storage and Security

Your data is stored on servers hosted by DigitalOcean in their European data centers. Passwords are hashed using bcrypt. All connections are encrypted via HTTPS/TLS. YouTube OAuth tokens are stored in our database. You can disconnect YouTube from your settings page, which immediately deletes the tokens from our servers. To also revoke access on Google's side, use your Google Account permissions page.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data and reel files are permanently removed within 30 days. Job data (rendered videos, thumbnails) can be deleted individually at any time from your account page.

7. Your Rights (GDPR)

As a Swedish company, we comply with the EU General Data Protection Regulation (GDPR). You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Withdraw consent for YouTube integration at any time
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

8. Children

TopFiveReels is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification. The "last updated" date at the top of this page reflects the most recent revision.

10. Google API Services User Data Policy

TopFiveReels' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we affirm that we:

• Only use YouTube data to provide or improve the user-facing features of TopFiveReels (uploading reels to your channel, setting thumbnails, and reading upload status).
• Do not use YouTube data to serve advertising.
• Do not transfer YouTube data except as necessary to provide the service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with user notice.
• Do not allow humans to read YouTube data, except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymized.

We request the following YouTube scopes:

• https://www.googleapis.com/auth/youtube.upload to upload rendered reel videos to your channel
• https://www.googleapis.com/auth/youtube.readonly to read the status of your uploads so we can show render and publish status on your account page

You can disconnect your YouTube account at any time from your settings page. On disconnection, your OAuth tokens are immediately deleted from our servers. To also revoke TopFiveReels' access on Google's side, visit your Google Account permissions page and remove TopFiveReels from the list.

11. Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us at:

R24k Web-Ateljé
Email: info@r24k.se
Website: r24k.se
Sweden