Last Updated: February 25, 2026
LANGUAGE: This Privacy Policy is available in English, Polish, German, and French. In the event of any conflict or inconsistency between the English version and any translation, the English version shall prevail, except where prohibited by mandatory provisions of the law of your country of residence.
MagicReels.media ("we", "our", or "us"), based in Poland, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our AI image generation platform at app.magicreels.media ("Platform").
The data controller for your personal data is:
Paweł Szewczyk
operating as MagicReels.media
Aleje Jerozolimskie 109/70, 02-011 Warszawa, Poland
Email: contact@magicreels.media
Account Information: When you register, we collect your email address and name through our authentication provider (Clerk). If you sign in with Google, we receive your Google profile information (name, email, profile picture).
Usage Data: We collect information about your interactions with the Platform, including prompts submitted, images generated, credits used, and timestamps.
Payment Data: Payment processing is handled by Stripe. We do not store your full credit card details. We retain transaction records including amounts paid, credits purchased, and Stripe session identifiers.
Technical Data: We may collect IP addresses, browser type, and device information for security and analytics purposes.
Generated Content: Images you generate are stored securely on our cloud infrastructure and linked to your account.
Social Media Credentials: If you use our social media publishing feature, we collect and store platform-specific credentials you provide (such as Telegram bot tokens and channel identifiers) to enable publishing on your behalf. These credentials are stored securely on our servers and are used solely for the publishing functionality.
Service Delivery: To provide AI image generation services (Legal Basis: Performance of Contract — Art. 6(1)(b) GDPR).
Account Management: To manage your account and credit balance (Legal Basis: Performance of Contract — Art. 6(1)(b) GDPR).
Payment Processing: To process purchases and maintain transaction records (Legal Basis: Performance of Contract and Legal Obligation — Art. 6(1)(b) and Art. 6(1)(c) GDPR).
Content Moderation: To filter prohibited content and enforce our Terms of Service (Legal Basis: Legitimate Interest — Art. 6(1)(f) GDPR).
Analytics: To understand how users interact with the Platform and improve our services, only with your explicit consent (Legal Basis: Consent — Art. 6(1)(a) GDPR). See Section 9 (Cookies) for details.
Security: To protect the Platform from abuse and unauthorized access (Legal Basis: Legitimate Interest — Art. 6(1)(f) GDPR).
When you submit a prompt, it is processed by third-party AI service providers to generate images. Your prompts may also be enhanced (improved and translated to English) using AI language models before being sent to the image generation model.
We do not train AI models on your data. Your Inputs and Outputs are used solely for providing the Service to you. Third-party AI providers process data according to their own policies. We prioritize providers that maintain high security standards and implement automatic data deletion after a short period (short retention) to minimize privacy risks.
We share data with trusted third-party service providers to operate the Platform:
Some providers may store data outside the European Economic Area (EEA), including in the United States. Where applicable, appropriate safeguards such as Standard Contractual Clauses (SCCs) or Data Privacy Framework (DPF) certification are in place to ensure GDPR compliance.
Account data is retained for as long as your account is active. Generated images are retained until deleted by you or upon account deletion. Transaction records are retained for the period required by Polish tax law (5 years). Upon account deletion, personal data is removed within 30 days, except where retention is required by law.
As a data subject under GDPR, you have the right to:
Self-Service Account Deletion: You can delete your account and all associated personal data directly from the Platform using the "Delete Account" option in the application footer. This will permanently remove your profile, generated images, and prompts. Transaction records will be anonymized (not deleted) as required by applicable tax law. Upon deletion, your data is removed immediately.
To exercise any other rights, contact us at contact@magicreels.media. We will respond within 30 days.
Essential Cookies: The Platform uses strictly necessary cookies for authentication and session management. These are required for the Platform to function and do not require consent.
Analytics Cookies (Opt-in only): With your explicit consent, we use Google Analytics (GA4) to collect anonymized usage statistics. When enabled, the following cookies may be set:
_ga — distinguishes unique users (expires: 2 years)_ga_TMVRKWC9QE — maintains session state (expires: 2 years)Analytics cookies are never loaded without your consent. You can change your cookie preferences at any time via the cookie banner. We use IP anonymization (anonymize_ip: true) for additional privacy protection.
We do not use marketing or advertising cookies.
We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication, access controls on our infrastructure, and regular database backups.
The Platform is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us immediately.
We may update this Privacy Policy from time to time. Changes fall into two categories:
Material changes (changes affecting how we collect, use, or share your personal data, or changes to your rights): We will notify you at least 14 days in advance via email or Platform notification.
Non-material changes (corrections, clarifications, or updates to technical details that do not affect your rights or how your data is processed): These take effect immediately upon publication. We will update the "Last Updated" date at the top of this page.
Continued use of the Platform after changes take effect constitutes acceptance.
You have the right to lodge a complaint with the Polish Data Protection Authority (UODO): Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland. If you reside in another EU member state, you may also contact your local data protection authority.
For questions regarding this Privacy Policy, please contact us at:
Paweł Szewczyk
operating as MagicReels.media
Aleje Jerozolimskie 109/70, 02-011 Warszawa, Poland
Email: contact@magicreels.media