Privacy Policy — TKReel

Effective Date: October 18, 2026. TKReel Studio is committed to protecting your personal information, API credentials, and creative assets. This Privacy Policy details how we collect, handle, encrypt, and safeguard your data.

1. Information We Collect

We collect only the minimum information necessary to provide our generation and workspace services: your email address for authentication, account preferences, product photo uploads, and generation prompt metadata.

2. API Key Security & AES-256-GCM Encryption

Your third-party API Keys (Volcengine Ark or BytePlus ModelArk) are encrypted at rest using industry-standard AES-256-GCM. Keys are decrypted solely in ephemeral memory during authorized model call dispatches. We never sell, share, or log your plaintext API keys.

3. Third-Party Model Processors

When you trigger a video or image generation task, prompts and reference image payloads are transmitted securely to official ByteDance model endpoints (Volcengine Ark or BytePlus ModelArk). Model providers process data in accordance with their respective enterprise security certifications.

4. Cookies & Anonymous Analytics

We use lightweight, privacy-friendly analytics to monitor service performance and optimize user conversion. We do not use intrusive third-party cross-site advertising trackers or sell your behavioral data to data brokers.

5. Your Rights (GDPR & CCPA)

Regardless of your geographic location, you have the right to request access to your account data, download all saved video assets, and request permanent deletion of your account and encrypted keys. To exercise these rights, email admin@tkreel.com.

6. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy, please email admin@tkreel.com. We promise a direct response within 24 hours.