Privacy policy

01Who we are

Roy is operated by [Company legal name], [registered address]. We are responsible for the personal information described here. Contact us at [privacy@yourdomain.com].

02What we collect

• Early access sign ups: your email address and which form you used.
• What you create with: the video clips you upload and the prompts you write.
• What Roy makes: generated scripts, edit decisions, voiceovers, captions and finished reels.
• If you connect Instagram: your account ID, the reels you post through Roy, and their insights (plays, reach, likes, comments, saves, shares).
• Technical data: basic logs such as device, browser and error information.

03How we use it

• To analyse your clips and produce the reels you ask for.
• To improve how Roy writes and paces reels, using edit decisions and how posted reels perform.
• To contact you about early access and important service updates.
• To keep Roy secure and fix problems.

[State your legal basis for each use if you serve users in the EU/UK, e.g. contract, consent, legitimate interests.]

04Who we share it with

We don’t sell your personal information. We use trusted providers to run parts of Roy, and they only receive what they need:

• Anthropic: writes scripts from your prompt.
• ElevenLabs: generates voiceovers.
• Google (Gemini): describes what appears in video frames to match script lines to shots.
• Meta (Instagram): only if you connect your account, to publish reels and read their insights.
• [Hosting provider]: stores and serves the app.

05How long we keep it

[Set retention periods, for example uploaded clips deleted after [X days]; reels and edit records kept while your account is active; waitlist emails until you unsubscribe.] You can ask us to delete your data at any time.

06Your choices

You can ask to access, correct or delete your information, disconnect Instagram, and unsubscribe from emails. Email [privacy@yourdomain.com] and we’ll respond within [30] days. [Add rights for each region, for example NZ Privacy Act 2020, Australian Privacy Principles, GDPR.]

07Security

We use reasonable technical and organisational measures to protect your information, including [encryption in transit, access controls]. No system is perfectly secure, so we can’t guarantee absolute security.

08Children

Roy isn’t intended for anyone under [16]. If you believe a child has given us personal information, contact us and we’ll delete it.

09Changes to this policy

If we make material changes we’ll update the date above and let you know by email or in the app before they take effect.

10Contact

[Company legal name], [address], [privacy@yourdomain.com].