Privacy Policy

Last updated: September 2026

Who is responsible for your data

Reigniter and Reignitor are trading names of Flittor Ltd, a company registered in England and Wales, which operates the service. Flittor Ltd is the data controller for the personal data described below, and is who you deal with in exercising any of your rights over it. This policy explains what we collect, why, who we share it with and how long we keep it. It applies to the Reigniter website and app. Where you upload material about other people, such as a colleague's face or voice, you are responsible for having their permission, and we process that material on your instructions.

What we collect

Account data: your name, email address and a hashed password, or the identity your sign-in provider gives us. Billing data: your plan, invoices and payment status. Card numbers go to Stripe, directly when you buy from the United Kingdom or the United States, otherwise through our merchant of record, Link (Stripe's merchant-of-record service), and never reach us. Content: the briefs, brand assets, images, audio, faces and voices you upload, and the output you generate, together with the consent you affirm when uploading a likeness. Usage and technical data: pages visited, jobs run, credits spent, IP address, browser type and error reports. Support data: what you send us when you ask for help. We do not collect special-category data on purpose, and we ask you not to upload it.

Why we use it and on what basis

We use your data to run your account and deliver what you have paid for (performance of our contract with you); to keep the service secure, prevent fraud and abuse, and understand how it is used so we can improve it (our legitimate interests, balanced against yours); to send service messages such as receipts, renewal notices and security alerts (contract and legal obligation); and to keep tax and accounting records (legal obligation). We rely on your consent for processing a face or voice you upload, for any use of your content to train models, and for marketing email. You can withdraw consent at any time, and that does not affect processing already done.

Who we share it with

We do not sell your data. We share it with suppliers who process it on our instructions: our payment provider, Stripe (including its Link service), for payments, tax and fraud prevention; our hosting provider and Cloudflare for servers and file storage; the AI model providers that generate your output, which receive your prompts and the media needed for a job and nothing else; a voice-synthesis provider for narration and voice clones; an email provider for transactional mail; and an error-monitoring service that receives technical logs. We share data with authorities or professional advisers where the law requires it or to protect our rights. Prompts and uploads are screened for prohibited content before they reach a provider.

Accounts you connect: YouTube, TikTok, LinkedIn, Facebook and Instagram

You can connect a YouTube channel, a TikTok account, a LinkedIn profile or page, a Facebook Page or an Instagram professional account so that Reigniter can post the videos you choose. When you connect one, the platform asks for your permission and then gives us an access token. We use it only to show which account is connected (its name, handle and profile picture), to read the posting options the platform allows for that account, to upload and publish the videos you choose at the time you choose, including from automations you build, and to check whether each post went live. We do not read your other posts, messages, followers or audience data, we never post anything you have not chosen or scheduled, and we do not use data from these platforms for advertising, to profile you, or to train AI models. Tokens are stored encrypted and are never shown in the app. We share this data with no one except the platform itself and the hosting providers that run our servers. We keep a record of each post, meaning the platform, the time, its status and the link to it, with the rest of your content. A token is deleted as soon as you disconnect that account or close your Reigniter account. Apps you connect inside Automations, such as Google Drive, Slack or Microsoft Teams, are handled the same way: the access is used only to run the steps you build.

Google and YouTube: the data we access

Reigniter uses the YouTube API Services. If you connect a YouTube channel, Reigniter asks Google for two permissions and no others: youtube.upload, to upload the videos you choose to that channel, and youtube.readonly, to show which channel is connected (its name, ID and picture) and to read the title, status and view, like and comment counts of the videos Reigniter posted for you, or of a video you choose to use in Reigniter, so you can see how they performed. Reigniter does not edit or delete your videos, and does not read your other videos, comments, subscribers, messages or watch history. If you sign in to Reigniter with Google, we receive only your name, email address and profile picture, and use them only to run your account.

Google and YouTube: how we use, store and share it

We use Google user data only to provide the features you see in Reigniter: the connected channel, the videos you schedule and publish, and their results. We do not sell it, use it for advertising, use it to profile you, or use it to train or improve any AI model, ours or anyone else's. We do not transfer it to anyone except Google itself and the hosting providers that run our servers, and no person at Reigniter reads it unless you ask us to for support, it is needed for security, or the law requires it. Your Google access token is stored encrypted (AES-256-GCM) and is never shown in the app. When you disconnect the channel, we revoke and delete its access token and delete its view, like and comment counts. Its name, ID and picture stay with your post history, so reconnecting picks up where you left off, until you close your Reigniter account or ask us to delete them. They are then removed as described under Data retention. You can remove Reigniter's access at any time in your Google Account at https://myaccount.google.com/permissions, or by disconnecting the channel in Reigniter. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service at https://www.youtube.com/t/terms, and how Google handles your data is described in the Google Privacy Policy at https://policies.google.com/privacy. Reigniter's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy at https://developers.google.com/terms/api-services-user-data-policy, including the Limited Use requirements.

International transfers

Some of the suppliers above are outside the UK, mainly in the United States and the European Economic Area. Where data leaves the UK we rely on an adequacy regulation where one exists, and otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, with additional safeguards where they are needed. You can ask us for a copy of the transfer terms that apply to your data.

Cookies

We use httpOnly cookies for authentication and session security only. These are strictly necessary for the service to work, so they do not need your consent. We do not use advertising cookies, and we do not run behavioural advertising. With your consent only, we use PostHog product analytics (hosted in the EU) to see how Reigniter is used: the pages you visit and, in the app, anonymised session recordings in which everything you type is masked. With the same consent we also use Google Analytics to count page visits, with IP addresses anonymised and no advertising features. We ask before anything is recorded, you can say no, and learner, shared-video and sign-in pages are never recorded.

Data retention

We keep account data while your account is active. Your content stays until you delete it or close your account, and is then removed from live systems within 30 days and from backups within a further 30 days. Faces and voices uploaded for a likeness are deleted on request from the person depicted. Technical logs and error reports are kept for up to 90 days. Invoices and payment records are kept for six years after the tax year they relate to, because UK law requires it. Screening records for prohibited-content attempts are kept while needed to enforce our terms.

Your rights

Under UK data protection law you can ask us for a copy of your personal data, ask us to correct or delete it, restrict or object to how we use it, take it with you in a portable format, and withdraw any consent you have given. Email hello@reigniter.ai and we will reply within one month. We may ask you to confirm your identity first. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk. If you live in the EEA you may also complain to your local supervisory authority.

Children

Reigniter is for adults. You must be 18 or older to hold an account, and we do not knowingly collect personal data from anyone younger. If you believe a child has given us data, contact hello@reigniter.ai and we will delete it.

Security and changes

We protect your data with encrypted connections, httpOnly session cookies, role-based access scoped to your account, and audited admin access; our Security page has more. No system is perfectly secure, so please use a strong, unique password. We will update this policy when the service or the law changes, and will tell you by email or in the app before any change that materially affects you takes effect.

Contact

For privacy questions, requests about your data, or to exercise any of the rights above, contact hello@reigniter.ai and we will reply within one month. How to delete your data, or disconnect a platform account, step by step, is at https://reigniter.ai/data-deletion. Postal enquiries can be sent to Flittor Ltd at the registered office shown on our Contact page. If you are asking about someone else's data, such as a likeness you appear in, tell us and we will treat it as a removal request.