This Privacy Policy explains how WhitegloveAI LLC, located in Frisco, Texas, collects, uses, discloses, retains, and protects information through ResiReels. It applies to account holders, workspace members, presenters, and people who contact us.

ResiReels is intended only for adults. Account users and presenters must be at least 18 because we do not offer a parent or guardian consent workflow.

Depending on the features you use, we may process:

• Account and contact information: name, email address, authentication data, role, invitations, and business contact details.
• Workspace and production information: workspace membership, listing and property data, property photographs, brokerage branding, scripts, prompts, scene plans, approvals, comments, audit history, and generated media.
• Presenter information: presenter photographs and reference media; consent records or recordings if collected; and voice recordings or derived voice information if voice features are enabled.
• Usage, device, and support information: browser and device details, network information, activity logs, security events, job status, support messages, and related diagnostics.
• Billing information: plan, transaction, credit, and payment-status information when billing is enabled. Payment card details are handled by the payment processor rather than stored directly by ResiReels.

We process information to authenticate users; administer workspaces and permissions; verify and record presenter authorization; create presenter likeness or voice features where enabled; plan and generate scenes; assemble and store videos; administer billing when enabled; provide support; secure and troubleshoot the service; prevent abuse, fraud, and unauthorized synthetic media; maintain audit and provider lineage; and meet legal obligations.

We may use operational information to evaluate and improve reliability, safety, quality controls, and user experience. We do not use private workspace content for unrelated advertising.

We disclose information only as reasonably needed for the service or as required by law. Current provider categories include:

• Supabase: authentication, database services, and private workspace storage.
• Higgsfield: current scene generation using the references, instructions, and media needed for a requested scene.
• Cloudflare: final video assembly and related delivery infrastructure.
• Stripe: payment processing only when billing is configured.
• Resend: transactional email delivery only when email sending is configured.

Historical HeyGen identifiers may remain on prior job or version records for audit lineage, but HeyGen is not used for new scene generation. Providers process data under their own contractual and security obligations. We may also disclose information to professional advisers, authorities when legally required, or a successor in a merger, financing, reorganization, acquisition, or sale of assets.

Workspace media is stored privately and normally accessed through short-lived signed links. Access controls are designed to keep one workspace’s data separate from another. Service providers may process information in the United States and other countries where they operate.

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information, including scoped access and audit records. No internet transmission, storage system, or security measure is absolutely secure, and we cannot guarantee that unauthorized access or loss will never occur.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising, and ResiReels does not use private workspace content to target advertising across unrelated services.

We retain account, workspace, production, security, billing, and audit information for as long as reasonably needed to provide the service, maintain records, resolve disputes, enforce agreements, prevent abuse, and meet legal obligations. Retention depends on the information, workspace activity, contractual commitments, and applicable law.

Presenter source media and consent or voice data are retained while the presenter feature remains active. After an authorized deletion request, we remove that material from active systems promptly and schedule remaining backup and provider copies for deletion within no more than 60 days where technically supported, except for narrowly applicable legal retention.

Verification-only face or voice matching derivatives are not retained as reusable biometric templates. We may retain minimal consent or revocation audit facts where legally necessary without keeping source media longer than needed. Exported or externally published copies cannot be automatically recalled or deleted by ResiReels.

Depending on your location and applicable law, you may request access, correction, deletion, or portability of personal information; object to or restrict certain processing; or withdraw consent. Withdrawing presenter consent blocks future processing covered by that consent, subject to verification and legal exceptions, but does not invalidate prior lawful processing or recall copies already exported or published.

Send privacy and data-rights requests to privacy@whitegloveai.com. We may verify your identity and authority before acting. Authorized agents may submit requests where allowed by law, but we may require proof of authorization. You may also have the right to appeal or contact a local regulator.

We may update this Policy as the service, providers, or law changes. We will post the new last-updated date and provide additional notice when required, including prominent in-product or email notice for material changes where appropriate.

For questions, concerns, or rights requests, contact WhitegloveAI LLC at privacy@whitegloveai.com.