Privacy Policy
Last updated: December 29, 2025
This Privacy Policy explains how Replay ("we", "our", "us") collects, uses, and protects your information when you use replay.build.
Data Controller
1. Information We Collect
We collect only what is necessary to operate the service:
- •Account information (email address, user ID)
- •Billing information (handled securely by Stripe — we never store credit card details)
- •Usage data (credits usage, generated projects, timestamps)
- •Uploaded content (videos, context input, generated UI and code)
Uploaded videos and generated outputs belong to you.
2. Cookies & Tracking
We use cookies and similar technologies for:
- •Essential cookies — Required for authentication and basic functionality
- •Analytics cookies — Google Analytics to understand how visitors use our site (anonymized)
- •Preference cookies — To remember your settings and consent choices
You can manage cookie preferences through your browser settings. Declining non-essential cookies may affect some features.
3. How We Use Your Data
We use your data only to:
- •Provide and operate the Replay service
- •Process subscriptions and payments
- •Allocate and manage credits
- •Improve product quality and reliability
- •Communicate important service updates
We do not sell your data.
We do not use your private projects for marketing.
4. Legal Basis for Processing (GDPR)
We process your personal data based on:
- •Contract performance — To provide the services you've requested
- •Legitimate interest — To improve our services and prevent fraud
- •Consent — For analytics cookies and marketing communications (where applicable)
5. Third-Party Services
We use the following third-party services:
- •Stripe — Payment processing (Privacy Policy)
- •Supabase — Database and authentication (Privacy Policy)
- •Google Analytics — Site analytics (Privacy Policy)
- •Vercel — Hosting (Privacy Policy)
6. Data Storage & Security
We apply reasonable technical and organizational measures to protect your data, including encryption in transit and at rest. Data is stored on secure servers in the European Union and United States.
7. Data Retention
We retain your data for as long as your account is active. You may delete your account at any time. Upon deletion, your projects and associated data are removed within 30 days unless required by law.
8. Your Rights
Under GDPR and applicable laws, you have the right to:
- •Access — Request a copy of your personal data
- •Rectification — Correct inaccurate data
- •Erasure — Request deletion of your data
- •Portability — Export your data in a machine-readable format
- •Object — Object to certain processing activities
- •Withdraw consent — Where processing is based on consent
To exercise these rights, contact us at: support@replay.build
9. Changes to This Policy
We may update this policy occasionally. We will notify you of significant changes via email or through our service. Continued use of Replay after changes means acceptance of the updated policy.
10. Contact
For any questions about this Privacy Policy or our data practices, please contact us:
Email: support@replay.build