Privacy Policy

ReelRebels Superior Management. Last updated 16 October 2026.

ReelRebels Superior Management (the "Platform") is the internal management system of ReelRebels Media, a video advertising agency in Beirut, Lebanon. The Platform is operated by Mimaco SARL (Lebanon), the legal entity that manages ReelRebels Media. In this policy, "we", "us" and "our" mean Mimaco SARL.

This policy explains what personal data the Platform handles, why, and the choices you have. It applies to our team members who sign in to the Platform, to the clients and prospective clients whose details are kept in it, and to anyone who messages our business WhatsApp number.

What data we handle

Team accounts. Name, work email address, role, and optionally a phone number for task reminders. Sign-in happens through a one-time link sent by email, or with a password the person chooses for themselves. Supabase stores only a scrambled (hashed) form of that password; nobody at the agency can see it.
Clients and leads. Business name, contact name, phone number, email address, country, notes about the work we discuss, offers, invoices and payment records needed for our bookkeeping.
WhatsApp conversations. When you message our business WhatsApp number, we receive your phone number, your WhatsApp profile name, the content of your messages (including photos, voice notes and documents), the time they were sent, and delivery and read status. These reach us through Meta's WhatsApp Business Platform. If you reached us from a WhatsApp ad, we also receive the ad's headline so we know what you were asking about.
Connection data from Meta. When an administrator connects a WhatsApp Business Account to the Platform through Facebook Login for Business, we store the identifiers Meta returns (business, WhatsApp Business Account and phone number identifiers) and an access token. The token is kept on our server only and is never shown in the browser.
Usage records. Who changed what and when inside the Platform, so the team can trust its own records.

Why we use it

To answer your messages and run our sales and client work.
To keep track of projects, tasks, invoices and payments for the agency.
To send WhatsApp messages you have agreed to receive, within the rules of Meta's WhatsApp Business Messaging Policy. Outside the 24-hour window after your last message, we can only use message templates approved by Meta.
To keep the Platform secure and to investigate problems.

We do not sell personal data, and we do not use it for advertising profiles.

Who processes it for us

Meta Platforms (WhatsApp Business Platform, Facebook Login for Business): delivers messages between you and us. Meta's own terms and privacy policy apply to its services.
Supabase: hosts the Platform's database, file storage and sign-in service.
Netlify: hosts the Platform's web pages.
Google (Gmail): sends the Platform's sign-in emails.

These providers act on our instructions and only to run the Platform. Data received from Meta's APIs is used only to provide the Platform's messaging features and is never sold or shared with anyone else.

How long we keep it

Client and lead records and conversations: for as long as we work together or there is a business reason to keep them, then deleted.
Raw delivery records from Meta used for troubleshooting: 14 days.
Bookkeeping records: as long as Lebanese law requires.
Team accounts: until the person leaves the team, then deactivated.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to reelrebels.info@gmail.com. We answer within 30 days. See also our data deletion instructions.

If you would rather we stop messaging you on WhatsApp, reply "stop" or block the number; we will not message you again.

Security

Access to the Platform is limited to our team, each person seeing only what their role needs. Data is encrypted in transit. Secrets such as access tokens are kept on the server, never in the browser.

Changes

If this policy changes, the new version is published at this address with a new date.