Privacy policy

Trial Reels is a service of Langemann (sole proprietorship registered in the Netherlands), registered with the Dutch Chamber of Commerce under 73582743, VAT identification number NL002350498B30. Contact runs through wieger@trialreels.app; the full registered address is in the terms.

There is no separate data protection officer. An organisation of this size does not need one, and it means your questions land directly with the owner.

For part of the data we are the controller: your name, your email address, your login details and the invoices. We decide on those ourselves, because without an account there is no service.

For the rest we are the processor and you are the controller: your video material, your Instagram account and everything we measure there. We do nothing with it other than what you instruct. If we prepare something you do not want, the reel can be stopped for as long as it has not gone out, and deleted on Instagram itself afterwards.

This privacy policy, together with the terms and conditions, serves as the data processing agreement within the meaning of article 28 GDPR. A separate agreement is therefore not needed, unless your organisation insists on one of its own.

• Performance of the contract (article 6(1)(b) GDPR) for your account, your material, the planning and the publishing. Without this data there is no service.
• Legitimate interest (point f) for security, debugging and stopping abuse. The interest is that the service keeps working and that nobody else can get into your account.
• Legal obligation (point c) for the bookkeeping: we keep invoices for seven years, because Dutch tax law says so.
• Consent (point a) for the connection with Instagram. You give that yourself at Meta, and you can withdraw it there yourself.

To publish and to measure, Trial Reels gets access to the Instagram business account attached to your Facebook page. That runs through Meta’s official Instagram Graph API. We ask for these permissions, and no more than these:

What data that produces. Per published reel we retrieve: views, reach, likes, comments, saves, shares and the average watch time. On top of that, once a day the total follower count of the account, and the permalink of every reel so you can watch it back.

What we explicitly do not retrieve. No names or profiles of your followers. No messages or direct messages. No list of who liked or watched something. No advertising data. For trial reels Meta does not offer per person data at all, and we do not ask for it either. What we see are totals, and those cannot be traced back to a person.

Your access token. The page token that lets us publish is stored encrypted in our database (Fernet, AES‑128 in CBC mode with an HMAC). The key is kept somewhere other than the database. Anyone who gets hold of the database therefore still has no access to your Instagram account. The token is only used to publish, to comment and to measure, and it disappears as soon as you withdraw the connection or cancel the account.

You can upload your video in the app, or put it in a Drive folder that you share with a link. If you choose Drive, the app reads that one folder with a read key. We ask for no access to your Google account, we see nothing else in your Drive, and we cannot change or delete anything there. Withdraw the sharing and the access stops at that moment.

Besides Instagram, Trial Reels can post the same reels to your YouTube channel as Shorts, and prepare them as drafts in your TikTok account. That only happens if you connect that channel yourself, with your own Google or TikTok account, through that platform’s official consent screen. Even then nothing is sent until we have opened the channel for your account. For YouTube, Trial Reels uses the YouTube API Services from Google.

What we store. The access credential Google or TikTok gives us, encrypted in the same way as the Instagram token above, the name and id of your channel, and for each reel the id, link and status of the posted video. Nothing else. We use this data only to post your reels to your channel and to see whether that worked. We share it with no one, except the processors in section 11 that run the service.

How long, for YouTube. We keep the access credential while you are connected. We keep the id, link and status of a video for at most 30 days; after that we delete them automatically. We request the name and id of your channel from YouTube again every 30 days, and if that fails we delete them.

Revoking. You can always do this yourself, in two ways. In Trial Reels with the Disconnect button: we then also revoke access at Google and immediately delete everything we stored from your channel. Or at Google in your security settings at security.google.com/settings/security/permissions: from that moment we can no longer post anything, and we delete the connection and the stored YouTube data as soon as we notice, and in any case within 30 days. For TikTok, use the app under Settings and privacy, Security, Apps and services.

Cookies and your device. For YouTube and TikTok we set no extra cookies and store nothing on your device; what we do set is in section 8. There are no ads or third party content in Trial Reels.

Questions or complaints. About what we do with your YouTube or TikTok data, email wieger@trialreels.app.

The terms of those platforms. By connecting YouTube you agree to the YouTube Terms of Service, and what Google does with data is governed by the Google Privacy Policy. For TikTok, TikTok’s terms and privacy policy apply.

Google API Services User Data Policy. Trial Reels’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In practice: we use that data only to post your reels to your channel, we do not sell it, we do not use it for advertising, no person reads it unless you ask us to or the law requires it, and we do not use it to train a general AI model.

There are no tracking cookies, no advertising pixels and no analytics software on this site. What there is, is this:

• proefreel_sessie keeps you logged in, valid for fourteen days, httponly and SameSite Lax. Without this cookie the app does not work.
• a token against form abuse stops another site from doing something in the app on your behalf. It expires with your session.

Both are strictly necessary for the service. That needs no cookie banner, so there is not going to be one.

Send an email to wieger@trialreels.app with the subject Deletion request and the email address or Instagram username it concerns. You do not have to explain anything further.

What happens then:

• within one working day we remove the access token, so nothing can be published any more;
• within thirty days your account, your video material, the rendered variants and the measured numbers are deleted;
• you get a message when it is done;
• only invoices stay, because we have to keep those for seven years.

Reels already on Instagram stay there. They are yours and they sit on your account; once the connection is withdrawn we can no longer remove them. Delete them yourself in the Instagram app, or ask us to do it before you withdraw the connection.

You can also withdraw the connection without us: in your Facebook settings under Business Integrations, or by removing us as an administrator of your business portfolio. From that moment Trial Reels can do nothing with your account.

We use these parties. There are no more than these, and with each of them a data processing agreement applies through their standard terms.

We do not sell data, we do not trade it, and we do not use your material to make something for another client. What we learn from your account stays with your account.

Where it is stored. Vercel and Supabase are American companies, and the servers we use with them are on the east coast of the United States. Your account details, your video material and your numbers are therefore stored and processed there. For that transfer outside the European Economic Area we rely on the standard contractual clauses of the European Commission, which form part of the processing agreements of both parties.

• Everything runs over https; unencrypted traffic is refused.
• Passwords are stored as an scrypt hash, never readable.
• Access tokens are stored encrypted, with the key outside the database.
• The database separates clients at row level. A query on behalf of one client does not reach the rows of another, not even through a mistake in the app.
• Passwords and tokens do not end up in log files.
• Only the owner has access to the database.

If something goes wrong anyway and something of yours is lost or exposed, you hear it from us as soon as we know, and where required we report it to the Dutch Data Protection Authority within 72 hours.

You have the right of access, rectification, erasure, restriction and portability of your data, and the right to object to processing based on legitimate interest. Where we rely on consent you can withdraw it; that does not affect what happened before.

One email is enough. We respond within thirty days, usually sooner. If you disagree with how we handle it, you can complain to the Dutch Data Protection Authority.

The app decides for itself which variant of which video is prepared when, based on what was measured earlier. That is a choice about video, not about people: no decisions about persons are taken and no profile of anyone is built.

Trial Reels is a business service and is not meant for people under eighteen. We deliberately process no special categories of personal data.

If something changes in what we process, this page changes with it and the date at the top moves up. For a material change you get an email before it takes effect. This version is from 14 October 2026.