Privacy Policy.

1. Introduction

This Privacy Policy explains how Viralgen LLC, 8 The Green, Dover, Delaware 19901, USA ("ViralGen", "we", "us") collects, uses, and shares information when you use ViralGen (the "Service"). By using the Service, you agree to the practices described here.

2. Information We Collect

Account and profile information. Your email address and password (passwords are managed and stored by our authentication provider; we do not store your raw password), your name and, from onboarding, your content niche and optional creator persona details. If you sign in with a third-party provider (Google, Telegram, or Fanvue), we receive basic identity information from that provider.

Creator persona content. Reference images and avatars, optional voice samples used for voice cloning, and the consent timestamps you confirm for likeness and voice.

Content you create and manage. Prompts, generated images and videos, captions, voice-overs, and your schedule of posts.

Content discovery and source data. Public social handles and URLs you choose to monitor or import, and public post information we retrieve about them (such as captions, view/like/comment counts, thumbnails, and media URLs).

Connected accounts. If you connect Instagram or TikTok for channel analytics, or Google Drive for exports, we store access tokens (encrypted) and basic account details. These connections are used for analytics and delivery; the Service does not post to connected accounts on your behalf.

Payment information. Payments are processed by Stripe. We do not store your full card details; we store a Stripe customer identifier and your plan and credit status.

Bring-your-own-key (BYOK) credentials. If you choose to provide your own third-party provider API keys, we store them in our database so we can use them on your behalf for the features you enable.

Usage, device, and analytics data. Product and marketing analytics events, page views, referral and campaign (UTM) parameters, general device type, and country derived from your IP address. We do not store your city. We use your IP address for security, fraud prevention, and rate limiting.

Support and feedback. Messages and information you submit through our support, contact, and feedback features.

3. How We Use Information

We use information to: provide and operate the Service (including generating your content); process payments and manage credits; secure the Service and prevent abuse; provide customer support; analyze usage and improve features, quality, and safety; send transactional and, where permitted, marketing communications; and comply with our legal obligations.

4. AI and Media Processing

To generate content, we send your prompts and the images, videos, audio, or handles you provide to third-party AI, media, and social-data providers that perform generation, analysis, transcription, voice, and content-discovery functions on our behalf. Some video processing, such as trimming clips and burning in captions, is performed on our own servers.

5. How We Share Information: Service Providers

We share information with third-party processors that help us run the Service. By category, these include:

• Infrastructure and hosting: our cloud hosting platform, our database/authentication/storage provider (Supabase), background-job orchestration (Inngest), and rate-limiting infrastructure (Upstash / Redis).
• Security: a bot-detection provider (Cloudflare Turnstile).
• Payments: Stripe.
• Email: our transactional email provider (Resend) and related authentication emails.
• Analytics and performance: our hosting platform's analytics and speed-insights tools; and, on our public marketing pages only, Google Ads conversion tracking.
• AI and media (generation, analysis, transcription, and voice): providers such as WaveSpeed, RunningHub, Google (Gemini), Anthropic, xAI, AtlasCloud, ElevenLabs, and AssemblyAI.
• Social data and account connections: social-data and scraping providers (such as Apify, HikerAPI, and TikTok/YouTube data tools) and the platforms you connect (Meta/Instagram, TikTok, Google Drive, and Fanvue).

We may also share information to comply with law, enforce our Terms, protect the rights, property, or safety of ViralGen and others, or in connection with a merger, acquisition, or sale of assets.

6. Cookies and Similar Technologies

We use:

• Essential cookies for authentication and sessions.
• First-party analytics cookies (for example, an anonymous visitor identifier and stored referral/UTM values) to understand how people find and use the Service.
• Interface preference cookies (such as your theme choice).
• On public marketing pages only, advertising cookies via Google Ads.

We do not currently respond to Global Privacy Control (GPC) signals, although we may add support in the future. You can control cookies through your browser settings.

7. Data Storage, Location, and Security

Your data is stored with our database and storage provider and is encrypted at rest; stored third-party access tokens are encrypted. Our infrastructure and several of our providers operate in the United States and the European Union, so using the Service involves transferring data to those locations. No method of storage or transmission over the internet is completely secure.

8. Data Retention and Deletion

We retain your information for as long as your account is active and as needed to provide the Service and to meet legal, accounting, and security obligations. Deleting your account removes associated data through database cascade rules, and cloned voices are also deleted from our voice provider on a best-effort basis. We do not currently offer a self-service "delete my account" or data-export button; to request deletion of your account or a copy of your data, contact us through the contact form on our website and our team will action your request.

9. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, or to object to or restrict certain processing. To exercise these rights, contact us through the contact form on our website, and we will respond as required by applicable law.

10. International Users

The Service is operated using providers in the United States and the European Union. If you access the Service from another region, you consent to the processing of your information in those locations.

11. Children's Privacy

The Service is intended for users aged 18 and older and is not directed to children, and we do not knowingly collect personal information from children. Please note that the Service does not currently perform automated age verification; eligibility is a condition of use under our Terms.

12. Third-Party Platforms

The Service integrates with and links to third-party platforms (such as Instagram, TikTok, Google, and Fanvue). Those platforms' handling of your information is governed by their own privacy policies.

13. Changes to This Policy

We may update this Policy from time to time. We will indicate changes by updating the "Last updated" date and, where appropriate, provide additional notice.

14. Contact

Questions or privacy requests: reach us through the contact form on our website, or by mail at Viralgen LLC, 8 The Green, Dover, DE 19901, USA.