ReelRunner Privacy Policy

Last updated: August 6, 2026

1. Overview

ReelRunner is a self-hosted, locally-installed application that runs on your own computer or server. We do not collect, store, or transmit any personal data to external servers operated by ReelRunner. All data — including application configurations, OAuth tokens, publish history, and video files — is stored exclusively on your local machine.

This privacy policy explains what data ReelRunner accesses, how that data is used, and your rights regarding your data.

2. Information Storage & Security

All data resides on your local machine:

• OAuth tokens for all connected platforms (TikTok, Instagram, YouTube, Facebook) are encrypted using AES-256-GCM and stored in the data/tokens/ directory.
• Application configuration (app metadata, schedules, account mappings) is stored in local JSON files in the data/ directory.
• Video files remain in the queue folders you designate. ReelRunner reads them for publishing but does not move, copy, or transmit them to any server other than the target social media platform's API endpoint.
• Publish history (timestamps, platform, status, video URLs) is stored locally in data/.

No video files, access tokens, or personal information leave your computer except as strictly required to publish content to the platforms you configure via their official APIs.

3. Third-Party Service Integrations

3.1 YouTube / Google (Google LLC)

When you connect your YouTube account, ReelRunner uses Google OAuth 2.0 with PKCE to obtain your authorization. The following applies to Google/YouTube data:

• Data accessed: YouTube channel list (channel ID, title, thumbnail, subscriber count), video upload status, and basic profile information associated with your YouTube channel.
• Purpose: To let you select a YouTube channel for publishing, to upload videos to your channel, and to verify upload status.
• Scopes requested: youtube.upload and youtube.readonly.
• Storage: Google OAuth access tokens and refresh tokens are encrypted (AES-256-GCM) and stored only on your local machine.
• Sharing: No Google/YouTube data is shared with any third party. Data is only transmitted to Google's own API endpoints for the purpose of uploading videos.
• Revocation: You can disconnect your YouTube account at any time via the ReelRunner dashboard, or revoke access directly at Google Account Permissions.
• Google Limited Use: ReelRunner's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• See Google's Privacy Policy: policies.google.com/privacy

3.2 TikTok (ByteDance Ltd.)

When you connect your TikTok account, an OAuth access token is stored locally (encrypted). Video uploads use TikTok's Content Posting API. See TikTok's Privacy Policy.

3.3 Instagram / Facebook (Meta Platforms, Inc.)

When you connect your Instagram or Facebook account, an OAuth access token is stored locally (encrypted). Video uploads use Instagram's Graph API and Facebook's Graph API. ReelRunner also accesses the list of Facebook Pages and Instagram Professional Accounts associated with your Meta account. See Meta's Privacy Policy.

3.4 DeepSeek AI (Beijing DeepSeek Technology Co., Ltd.)

Caption generation requests are sent to DeepSeek's API with app metadata only (app name, description, category). No personal data, user credentials, or video content is included in these requests. See DeepSeek's API Documentation.

4. Cookies & Local Data

The built-in web dashboard may set a session cookie for authentication purposes when accessed via browser. This cookie is essential for the dashboard to function and contains no personal information. No tracking, analytics, or advertising cookies are used.

5. Data Retention

Since all data is stored locally, you control retention. Data persists on your machine until you delete it. To remove all data: delete the contents of the data/ directory. To remove a specific connected account: disconnect it via the web dashboard, which deletes the associated encrypted token file.

6. Your Rights

You have full control over your data at all times:

• Access: All data files are in the data/ directory in human-readable JSON format (except encrypted token files).
• Delete: Remove any data by deleting files from the data/ folder. Disconnect individual platform accounts via the web panel.
• Revoke: You can revoke ReelRunner's access to your accounts at any time through each platform's settings (Google, Meta, TikTok) independently of the app.

7. Children's Privacy

ReelRunner is not directed at children under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

This privacy policy may be updated from time to time. The latest version will always be available at this URL. The date of the last update is shown at the top of this page.

9. Contact

For any questions about this privacy policy or ReelRunner's data practices:

📧 support@reelrunner.app

← Back to Home