Privacy Policy

1. Who We Are

PicReel is operated by Mitchell Cloud Solutions LTD, a company registered in England and Wales. We are the data controller responsible for your personal data.

If you have any questions about this privacy policy or our data practices, please contact us at: privacy@picreel.com

2. What Data We Collect

We collect and process the following personal data:

• Email address: Required to create an account and send you magic link login emails.
• Photos you upload: The images you choose to upload to create your slideshows.
• Payment information: When you upgrade to Premium, payment is processed securely by Stripe. We do not store your card details.
• Usage data: Basic analytics about how you use the service to help us improve it.

3. How We Use Your Data

We use your personal data to:

• Provide and maintain the PicReel service
• Send you login emails when you sign in
• Process payments for Premium upgrades
• Send important service updates (e.g., expiry reminders)
• Improve our service based on usage patterns

We will never sell your personal data to third parties or use your photos for any purpose other than displaying them in your slideshows.

4. Legal Basis for Processing

Under UK GDPR, we process your data on the following legal bases:

• Contract: Processing necessary to provide the service you have requested.
• Legitimate interests: To improve our service and prevent fraud.
• Legal obligation: Where we are required to retain data by law.

5. Data Storage and Security

Your photos are stored securely on Cloudflare R2, a cloud storage service with servers located globally. We use industry-standard encryption in transit (HTTPS) and at rest.

Your account data is stored in a secure PostgreSQL database. Passwords are not stored as we use passwordless magic link authentication.

6. Data Retention

• Free tier: Your slideshow and photos are automatically deleted 7 days after creation.
• Premium tier: Your slideshow and photos are retained for 1 year from the date of purchase.
• Account data: Your email and account information are retained until you request deletion.

7. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Request your data in a portable format.
• Objection: Object to processing based on legitimate interests.
• Complaint: Lodge a complaint with the Information Commissioner's Office (ICO).

To exercise any of these rights, please contact us at: privacy@picreel.com

8. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing (see Stripe's Privacy Policy)
• Resend: Email delivery for magic link authentication
• Cloudflare: Image storage and content delivery
• Vercel: Website hosting

9. Cookies

We use essential cookies only to maintain your login session. We do not use tracking cookies or third-party advertising cookies.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by email or by posting a notice on our website.

11. Contact Us

Mitchell Cloud Solutions LTD
Email: privacy@picreel.com