1. Data Controller & Contact Details
TeckwikReels is operated by Teckwik Tecknologies Limited (Lagos, Nigeria), who acts as the Data Controller for your account, billing, and platform telemetry. For privacy inquiries, Data Subject Access Requests (DSARs), or our Data Protection Officer, contact privacy@teckwikreels.com.
2. Information We Collect
We process: (a) Identity and contact details (name, email, phone number, avatar); (b) Billing and financial references (Stripe customer IDs, Paystack/Flutterwave subscription references, partner payout banking details); (c) Creative prompts and AI scripts (storyline inputs, characters, dialog, voice preferences); (d) Social channel credentials (encrypted OAuth access and refresh tokens, channel IDs); and (e) Technical telemetry (pseudonymized IP hashes, browser User-Agent for security audits).
3. Lawful Bases for Processing (NDPA Section 25)
We process personal data under recognized NDPA grounds: (a) Contractual Necessity: to provision workspaces, generate video assets, manage subscriptions, and settle partner commissions; (b) Legal Obligation: to retain statutory tax and financial transaction records; (c) Consent: for optional analytics cookies and social channel integrations; and (d) Legitimate Interests: to prevent abuse, secure the platform, and track publisher referral attribution.
4. AI Processing & Third-Party Processors
Video scripting and rendering involve specialized AI processors: OpenAI and Groq for script structuring; Fal.ai for FLUX.1 visual generation, Kokoro neural voice synthesis, and Luma video diffusion; Cloudinary for media CDN delivery; and Brevo for transactional email. Your creative prompts are used solely to fulfill your generation requests and are not used to train public foundation models without consent. All external processors are bound by Data Processing Agreements.
5. Connected Social Accounts
When you connect a YouTube, TikTok, or Instagram channel, OAuth access and refresh tokens are encrypted at rest using AES cryptography. Tokens are used exclusively to publish videos and fetch viewer analytics authorized by you.
6. International Data Transfers (NDPA Part VIII)
Personal data and media assets may be transferred to and processed on secure cloud infrastructure located in the United States and the European Union. All cross-border transfers comply with NDPA transfer requirements and are governed by Standard Contractual Clauses and technical encryption safeguards.
7. Data Retention & Deletion
We retain account records for the duration of your active subscription plus a 90-day grace period. Rendered video binaries follow workspace plan limits and automated pruning. Financial and payment receipts are retained for 6 years in accordance with Nigerian statutory tax and company accounting requirements.
8. Your Data Subject Rights (NDPA Part VI)
Under the NDPA, you have the right to: (a) Access and obtain a copy of your personal data; (b) Rectify inaccurate information; (c) Request erasure of your data; (d) Object to or restrict processing; (e) Request data portability in a machine-readable format; and (f) Withdraw consent at any time. You can download an export of your personal data or request account deletion directly within Account Settings.
9. Regulatory Complaints
If you have an unresolved privacy concern, you have the statutory right to lodge a complaint with the supervisory authority: the Nigeria Data Protection Commission (NDPC) at info@ndpc.gov.ng.