1. Introduction
repli.ac ("we," "us," or "our") operates a content repurposing web application that helps creators turn one UGC clip into many hook-driven short videos. This Privacy Policy explains what information we collect, how we use it, and the choices you have when using our service at repli.ac and related domains (including legacy hookermaker.vercel.app URLs during transition).
By using repli.ac, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the service.
2. Information we collect
We collect the following categories of information:
- Account information: When you sign in with Google OAuth through Supabase Auth, we receive your email address, display name, profile picture URL, and a unique user identifier. We do not receive or store your Google password.
- Local browser data: Video clips, templates, caption word lists, export batches, layout preferences, and onboarding state may be stored in your browser using IndexedDB and localStorage. This data remains on your device unless you choose to use cloud features.
- Cloud uploads (optional): If you enable cloud clip storage or upload media through our servers, video files and related metadata may be stored via Cloudinary and associated with your account in Supabase.
- Usage and technical data: We may collect standard server logs, request metadata, error reports, and performance data through our hosting provider (Vercel). This can include IP address, browser type, referring URL, pages visited, and timestamps.
3. How we use your information
We use collected information to:
- Authenticate you and maintain your session
- Provide cloud clip sync and storage when you opt in
- Operate the hook generator, export studio, and results library
- Improve reliability, security, and product performance
- Respond to support requests and enforce our Terms of Service
We do not sell your personal information. We do not use your uploaded clips to train generative AI models.
4. Local-first processing
repli.ac is designed to process video locally in your browser whenever possible. Caption rendering, variant generation, preview playback, and many export workflows run using WebAssembly ffmpeg and canvas APIs on your device. In these cases, your raw clip data is not transmitted to our servers for processing.
Data may leave your device when you: sign in with Google, enable cloud storage, upload clips through our API, download assets from the results library (hosted on Cloudinary), or when standard web requests are sent to our hosting infrastructure.
5. Third-party services
We rely on the following third parties to operate the service:
- Supabase: Authentication, session management, and optional user data storage (database and storage buckets).
- Google: OAuth sign-in provider. Google's use of data is governed by Google's Privacy Policy.
- Cloudinary: Media hosting for optional cloud clip uploads and the premade results library video assets.
- Vercel: Application hosting, CDN delivery, and serverless API routes. Vercel may process request logs and analytics.
Each provider processes data under its own privacy terms. We recommend reviewing their policies for additional detail.
6. Cookies and session storage
We use cookies and similar technologies to maintain authenticated sessions (via Supabase Auth), remember preferences, and keep the application functional. Session cookies are typically essential for sign-in and expire according to Supabase session settings. Local storage and IndexedDB are used for editor state and clips on your device.
You can clear cookies and site data through your browser settings. Clearing local data will remove unsynced clips and preferences stored only on your device.
7. Data retention
Account data is retained while your account is active. Cloud-stored clips remain until you delete them or close your account. Local browser data persists until you clear it or uninstall site data. Server logs may be retained for a limited period for security and debugging, then rotated or deleted per our hosting provider's policies.
You may delete local data from Settings at any time. To request deletion of cloud account data, contact us using the details below.
8. Your rights and choices
Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data we hold about you, and to object to or restrict certain processing. You may also withdraw consent where processing is consent-based.
To exercise these rights, email us at privacy@repli.ac. We will respond within a reasonable timeframe. You may also sign out and stop using cloud features to limit further collection.
9. Security
We implement reasonable technical and organizational measures to protect your information, including HTTPS encryption in transit and access controls on cloud storage. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
10. Children's privacy
repli.ac is not directed at children under 13 (or the minimum age required in the applicable jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.
11. International users
Our service may be accessed from various countries. Data may be processed in the United States, Canada, or other regions where our providers operate data centers. By using the service, you consent to transfer and processing in those locations subject to applicable law.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page. Material changes may be communicated through the app or by email where appropriate. Continued use after changes constitutes acceptance of the updated policy.
13. Contact us
Questions about this Privacy Policy or our data practices may be sent to privacy@repli.ac.