Legal

Privacy

What we hold about you and your store, who else touches it, how long it stays, and how to get it back or have it removed.

Last updated 28 July 2026

Draft

This is a working draft written in plain English. It has not yet been reviewed by a lawyer and it should be before Jewel Reels takes its first payment — particularly the sections on international transfers and retention, which have specific requirements depending on where customers are.

The short version

We collect what is needed to sell you a video, deliver it, and prove afterwards that the license is being honoured. Nothing more.

We do not sell data, we do not share it with advertisers, and there is no tracking pixel following you around the internet from this site. There is no advertising cookie here at all.

What we collect

  • Account details you give us: email address, store name, contact name, phone number, website, and the city, state, postcode and country your store trades from.
  • Order records: what you bought, when, what you paid, the bundle discount applied, and the Stripe reference for the payment.
  • Files you upload: logos, and any photographs attached to a custom request.
  • Delivery records: which files were built for you, and a log of each download including the time, the IP address it came from, and the browser user agent.
  • Custom request details: everything you type into the brief form, including the description of the piece and any deadline.
  • Basic security and error information generated automatically when the site is used, such as an IP address attached to a failed request.

What we never collect

Card numbers. Payment details go directly from your browser to Stripe and never touch our servers. We receive confirmation that a payment succeeded, the amount, and the last four digits — nothing that could be used to charge a card.

We do not ask for identity documents, we do not run credit checks, and we do not buy data about you from anybody.

Why we collect each thing

  • Your account details, so we can deliver your order, put your store's name on an invoice, and email you when files are ready.
  • Order records, because we are legally required to keep accurate records of sales, and because you need to be able to find last year's purchase.
  • Your logo, because the entire service is putting it onto video.
  • Download logs, for two reasons: so you can see your own activity, and so that if a video appears somewhere it was never licensed for, we can establish where the file came from. This is the same protection you are buying when you buy a licensed video.
  • Custom request details, so we can quote accurately and produce what you actually asked for.

Who else processes it

We use four service providers. Each holds only what it needs to do its job, and each is a substantial company with its own published privacy terms.

  • Supabase — the database and sign-in system. Holds your account details, orders and custom requests.
  • Cloudflare R2 — file storage. Holds your logos, uploaded photographs and your delivered videos.
  • Stripe — payments. Holds your card details and billing information; we do not.
  • Resend — transactional email. Holds your email address in order to send order and delivery notifications.
  • We do not use an advertising network, an analytics product that profiles individuals, or a data broker of any kind.

Cookies

There is one kind of cookie on this site: the session cookie that keeps you signed in. Without it you would have to log in on every page, which is not a privacy improvement.

There is no advertising cookie, no third-party tracker, and no cross-site pixel. That is also why there is no cookie banner nagging you — there is nothing to consent to.

How long we keep it

  • Account and order records: for as long as your account exists, and afterwards for as long as tax and accounting rules require us to keep sales records.
  • Logos and delivered videos: for as long as your account exists, because you are entitled to re-download your purchases indefinitely.
  • Download logs: retained while they remain useful for license enforcement, then removed.
  • Custom requests that do not become orders: kept for a reasonable period in case you come back to them, then deleted.

Your rights over it

Wherever you are, we will honour these. You do not need to cite a regulation at us.

  • Ask what we hold about you, and get a copy of it.
  • Correct anything that is wrong — most of it you can edit yourself in your account.
  • Have your account and personal details deleted. We will keep the minimum sales records the law requires and remove the rest, and we will tell you plainly what was kept.
  • Object to a particular use of your data, and have that considered properly rather than reflexively refused.
  • Take your data elsewhere in a portable format.

Where your data lives

Our database and file storage are hosted in the United States. Stripe and Resend also process data in the United States and elsewhere. If you are outside the US, using this service means your information is transferred there.

We rely on our providers' standard contractual protections for those transfers. If that is a problem for your business, tell us before you buy rather than after.

Security

Every record is protected by row-level security in the database, which means one customer's data cannot be read by another even if a query somewhere is written badly. Delivered files are private and reachable only through short-lived signed links generated for you at the moment you click download.

No system is perfect. If we ever discover a breach affecting your data, you will be told promptly and told what actually happened, not given a press release.

Children

This is a business service sold to jewelry retailers. It is not intended for anyone under 18 and we do not knowingly collect information from children. If you believe we hold data about a child, tell us and it will be deleted.

Changes to this policy

If this policy changes in a way that affects you, the date at the top changes and we email account holders. We will not quietly widen what we collect and hope nobody rereads the page.

Asking us anything about your data

Requests to see, correct or delete your data go through the contact page and are answered by a person, not a ticketing system. The terms of service cover the commercial side of the relationship, and the license covers what you may do with the videos themselves.