Privacy Policy

reelmena (“we”, “our”, or “us”) is a product operated by esols (Kuwait) and accessible at reelmena.com (the “Platform”). reelmena is a digital video menu platform that enables restaurants to publish and share their menus as short autoplaying video reels. This Privacy Policy explains how we collect, use, store, disclose, and safeguard information when you use our Platform, whether as a restaurant merchant (“Merchant”), a diner viewing a menu (“Visitor”), or a visitor to our marketing website. Merchants consent to these practices by accepting the Terms of Service during registration.

• Provide, operate, and maintain the Platform and its features
• Create, publish, and serve digital video menus at each Merchant's dedicated subdomain (yourname.reelmena.com)
• Transcode and deliver uploaded videos through Cloudflare Stream (adaptive HLS)
• Generate downloadable QR codes for Merchants to distribute their menu URL
• Send service emails (account verification, password resets, invite links, publish confirmations)
• Once billing is enabled, process Merchant subscription payments through authorized payment providers
• Monitor platform security, detect fraud, and prevent abuse
• Generate anonymized, aggregated analytics for internal product improvement
• Comply with legal obligations and enforce our Terms of Service

reelmena is a digital menu publishing service only. The Platform does not process, store, or facilitate any monetary transactions, payments, currency exchanges, or financial transfers between any parties. reelmena does not act as a payment processor, electronic wallet, stored-value facility, money exchange, food-ordering marketplace, or financial institution of any kind. Prices displayed in a menu are for informational purposes; ordering and payment happen off-Platform between the Visitor and the Merchant directly. No Visitor payment or financial data is collected, processed, or stored by the Platform. For further details, see Section 3.1 of our Terms of Service.

We do not sell, rent, or trade personal information to third parties. We may share information in the following limited circumstances:

• Service Providers: Third-party services that help us operate the Platform, including Cloudflare Stream (video hosting and HLS delivery), Supabase (database, authentication, and image storage), and Vercel (web hosting and edge routing)
• Legal Requirements: When required by applicable law, regulation, court order, or governmental authority
• Safety and Protection: To protect the rights, property, or safety of reelmena, esols, our users, or the public
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users

We implement commercially reasonable security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication with hashed passwords and session management
• Row-level security (RLS) policies on all tenant data tables ensuring per-tenant isolation
• Invite-token onboarding (single-use, expiring) so Merchant menu editing is gated
• Rate limiting to prevent abuse and brute-force attacks
• Audit logging of administrative and sensitive operations

Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, reelmena will:

• Notify the Communication and Information Technology Regulatory Authority (CITRA) of the State of Kuwait within 72 hours of becoming aware of the breach
• Notify affected Merchants without undue delay, and no later than 72 hours after discovery, providing details of the nature of the breach, the categories and approximate number of affected individuals, the likely consequences, and the measures taken or proposed to mitigate the breach
• Maintain a record of all data breaches, including their effects and the remedial action taken

• Active Accounts: Data retained for the duration of the active subscription
• Cancelled Accounts: Data retained for 90 days after cancellation, then permanently deleted (including all uploaded videos and images)
• Waitlist Emails: Retained until launch notification is sent, then removed within 90 days if the person does not become a Merchant
• Audit Logs: Retained for 12 months for security and compliance
• Legal Holds: Data may be retained beyond these periods when required by law

• reelmena acts as a Data Controller for Merchant account data, waitlist emails, and platform usage data
• reelmena does not process personal Visitor (diner) data — Visitors interact with a public menu URL and no accounts are created on their behalf
• Merchants are responsible for ensuring the content they publish (item names, descriptions, videos, images, contact links) complies with applicable laws in their jurisdiction, including advertising, food-labelling, and copyright law

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data and all uploaded content
• Objection: Object to certain processing of your data
• Portability: Request your data in a structured, machine-readable format
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at esols.kw@gmail.com. We will respond within 30 days. If you believe your data protection rights have been violated, you also have the right to lodge a complaint with the Communication and Information Technology Regulatory Authority (CITRA) of the State of Kuwait.

We use only essential cookies required for Platform functionality (Merchant authentication sessions via Supabase Auth). Browser localStorage is used to remember your language preference (EN or AR). We do not use advertising cookies, third-party tracking pixels, or analytics services that track users across websites.

The Platform is intended for use by individuals aged 18 and older. Merchant accounts must be created by legally responsible representatives of a registered business. We do not knowingly collect personal information from minors (under 18 years of age).

If we discover that a minor has created an account or provided information: We will promptly delete all personal data associated with the minor and deactivate any related resources. This process will be completed within 14 days of discovery. If a parent, guardian, or Merchant believes a minor has provided information, they should contact us immediately at esols.kw@gmail.com.

The Platform is primarily operated from Kuwait. Your data may be processed on servers located outside of Kuwait through third-party service providers in the following categories and regions:

• Video Hosting & Delivery — Cloudflare Stream. Videos are transcoded and delivered from Cloudflare's global edge network with points of presence including Asia-Pacific, the Middle East, Europe, and North America
• Database & Image Storage — Supabase. Data storage, authentication, and application hosting on infrastructure in Asia-Pacific
• Web Hosting & Edge Routing — Vercel. Static assets and server functions served from a global edge network
• Email Delivery — Service emails delivered through third-party providers

All service providers are selected based on their compliance with industry-standard security practices and are contractually required to protect your data. Data transfers are protected by encryption in transit (TLS/SSL) and at rest. By using the Platform, you consent to the transfer of your information to these jurisdictions.

A detailed list of our service providers and their specific data handling practices is available upon written request to esols.kw@gmail.com.

We may update this Privacy Policy from time to time. We will notify Merchants of material changes via email and by posting the updated policy with a new “Last updated” date. Continued use constitutes acceptance.

For questions about this Privacy Policy:

Entity: reelmena, a product by esols
Email: esols.kw@gmail.com
Address: Kuwait