Privacy Policy.

1. Introduction

This Privacy Policy explains how Viralgen LLC, 8 The Green, Dover, Delaware 19901, USA ("ViralGen", "we", "us") collects, uses, and shares information when you use ViralGen (the "Service"). By using the Service, you agree to the practices described here.

2. Information We Collect

Account and profile information. Your email address and password (passwords are managed and stored by our authentication provider; we do not store your raw password), your name and, from onboarding, your content niche and optional creator persona details. If you sign in with a third-party provider (Google, Telegram, or Fanvue), we receive basic identity information from that provider.

Creator persona content. Reference images and avatars, optional voice samples used for voice cloning, and the consent timestamps you confirm for likeness and voice.

Content you create and manage. Prompts, generated images and videos, captions, voice-overs, and your schedule of posts.

Content discovery and source data. Public social handles and URLs you choose to monitor or import, and public post information we retrieve about them (such as captions, view/like/comment counts, thumbnails, and media URLs).

Connected accounts. If you connect Instagram or TikTok for channel analytics, or Google Drive for exports, we store access tokens (encrypted) and basic account details. These connections are used for analytics and delivery; the Service does not post to connected accounts on your behalf.

Payment information. Payments are processed by Stripe. We do not store your full card details; we store a Stripe customer identifier and your plan and credit status.

Bring-your-own-key (BYOK) credentials. If you choose to provide your own third-party provider API keys, we store them in our database so we can use them on your behalf for the features you enable.

Usage, device, and analytics data. Product and marketing analytics events, page views, referral and campaign (UTM) parameters, general device type, and country derived from your IP address. We do not store your city. We use your IP address for security, fraud prevention, and rate limiting.

Support and feedback. Messages and information you submit through our support, contact, and feedback features.

3. How We Use Information

We use information to: provide and operate the Service (including generating your content); process payments and manage credits; secure the Service and prevent abuse; provide customer support; analyze usage and improve features, quality, and safety; send transactional and, where permitted, marketing communications; and comply with our legal obligations.

4. AI and Media Processing

To generate content, we send your prompts and the images, videos, audio, or handles you provide to third-party AI, media, and social-data providers that perform generation, analysis, transcription, voice, and content-discovery functions on our behalf. Some video processing, such as trimming clips and burning in captions, is performed on our own servers.

We do not use your content or likeness to train generative models. The only models built from your uploads are your own creator models and voice clones, used exclusively for your account. We may use aggregated, de-identified usage data to improve the service. We do not sell your personal data.

5. How We Share Information: Service Providers

We share information with third-party processors that help us run the Service. By category, these include:

• Infrastructure and hosting: our cloud hosting platform, our database/authentication/storage provider (Supabase), background-job orchestration (Inngest), and rate-limiting infrastructure (Upstash / Redis).
• Security: a bot-detection provider (Cloudflare Turnstile).
• Payments: Stripe.
• Email: our transactional email provider (Resend) and related authentication emails.
• Analytics and performance: our hosting platform's analytics and speed-insights tools; and, on our public marketing pages only, Google Ads conversion tracking.
• AI and media (generation, analysis, transcription, and voice): providers such as WaveSpeed, RunningHub, Google (Gemini), Anthropic, xAI, AtlasCloud, ElevenLabs, and AssemblyAI.
• Social data and account connections: social-data and scraping providers (such as Apify, HikerAPI, and TikTok/YouTube data tools) and the platforms you connect (Meta/Instagram, TikTok, Google Drive, and Fanvue).

We may also share information to comply with law, enforce our Terms, protect the rights, property, or safety of ViralGen and others, or in connection with a merger, acquisition, or sale of assets.

6. Cookies and Similar Technologies

We use:

• Essential cookies for authentication, checkout, and telling real visitors from bots. These are always active.
• Interface preference cookies (such as your theme choice), which are also treated as essential.
• Analytics cookies, including a first-party anonymous visitor identifier and Google Analytics, used only with your consent.
• Advertising cookies, including Google Ads and our stored referral and campaign (UTM) values, used only with your consent and only on public marketing pages.

Analytics and advertising cookies are not set until you agree to them, and the scripts behind them are not loaded at all before that. You choose when you first arrive, and you can change your choice at any time through the Cookie settings link in the footer. We ask again every 180 days, and whenever the set of cookies we use changes.

We respond to Global Privacy Control (GPC) signals. If your browser sends one, we treat it as a refusal of analytics and advertising cookies and do not prompt you.

The Cookie Policy lists every cookie by name, purpose, and how long it lasts. You can also control cookies through your browser settings.

7. Data Storage, Location, and Security

Your data is stored with our database and storage provider and is encrypted at rest; stored third-party access tokens are encrypted. Our infrastructure and several of our providers operate in the United States and the European Union, so using the Service involves transferring data to those locations. No method of storage or transmission over the internet is completely secure.

8. Data Retention and Deletion

We retain your information for as long as your account is active and as needed to provide the Service and to meet legal, accounting, and security obligations. Deleting your account removes associated data through database cascade rules, and cloned voices are also deleted from our voice provider on a best-effort basis. We do not currently offer a self-service "delete my account" or data-export button; to request deletion of your account or a copy of your data, contact us through the contact form on our website and our team will action your request.

9. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. To exercise these rights, contact us through the contact form on our website, and we will respond as required by applicable law.

10. International Users

The Service is operated using providers in the United States and the European Union. If you access the Service from another region, you consent to the processing of your information in those locations.

11. Children's Privacy

The Service is intended for users aged 18 and older and is not directed to children, and we do not knowingly collect personal information from children. Please note that the Service does not currently perform automated age verification; eligibility is a condition of use under our Terms.

12. Third-Party Platforms

The Service integrates with and links to third-party platforms (such as Instagram, TikTok, Google, and Fanvue). Those platforms' handling of your information is governed by their own privacy policies.

13. Changes to This Policy

We may update this Policy from time to time. We will indicate changes by updating the "Last updated" date and, where appropriate, provide additional notice.

14. Contact

Questions or privacy requests: reach us through the contact form on our website, or by mail at Viralgen LLC, 8 The Green, Dover, DE 19901, USA.