Privacy Policy
Short version: We collect only what's needed to run the service. We never sell your data. We use official OAuth APIs and never store your social media passwords. You can delete your data anytime.
1. Information We Collect
Account Information: When you register, we collect your name, email address, and password (hashed, never stored in plain text).
Social Platform Data: When you connect social accounts via OAuth, we receive and store access tokens (not passwords) and basic profile information (name, handle, profile picture) necessary to publish on your behalf.
Content Data: We store the posts, captions, media files, and scheduled content you create within ViralmeAJ.
Usage Data: We collect analytics about how you use the platform (features used, pages visited) to improve the service.
Payment Information: Billing is processed by Stripe. We do not store credit card numbers. We receive only payment status and billing address.
2. How We Use Your Information
- To provide and improve the ViralmeAJ service
- To publish content to your connected social accounts on your instruction
- To send transactional emails (account alerts, billing receipts)
- To provide customer support
- To analyze usage patterns and improve features
- To comply with legal obligations
3. Social Platform Data Collection
When you connect social accounts, we access only what each platform's API provides and what you explicitly authorize. Here's what we collect per platform:
Instagram & Facebook: Profile info, Page IDs, publishing permissions, basic analytics for content posted through our platform.
YouTube: Channel name, ID, video upload capability, view counts for content posted through us.
Twitter / X: Profile info, tweet publishing permissions, public metrics.
TikTok: User profile, video upload capability, publishing status.
LinkedIn: Profile/company page info, content publishing permissions.
4. Data Sharing
We never sell your personal data. We share data only with:
- Service Providers: Cloud hosting (AWS), payment processing (Stripe), email (SendGrid) — all under strict data agreements
- Social Platforms: We transmit your content to connected platforms on your instruction
- Legal Requirements: When required by law or to protect rights and safety
5. Data Security
We use AES-256 encryption for stored tokens, TLS 1.3 for data in transit, OAuth 2.0 PKCE for all platform connections, and regular security audits. Your social media passwords are never transmitted to or stored by ViralmeAJ.
6. Data Retention
We retain your data for as long as your account is active. When you delete your account, we delete your personal data within 30 days. Some data may be retained longer if required by law or for legitimate business purposes (billing records).
7. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct your personal data
- Deletion: Request deletion of your account and personal data
- Portability: Export your data in a machine-readable format
- Opt-out: Unsubscribe from marketing emails at any time
8. Cookies
We use essential cookies for authentication and session management. We use analytics cookies (Google Analytics) to understand usage patterns. You can control cookies through your browser settings.
9. Children's Privacy
ViralmeAJ is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of significant changes via email or in-app notification. Continued use after changes constitutes acceptance.
Privacy Questions or Requests?
Email our Data Protection Officer at privacy@viralmeaj.io. We respond to all privacy requests within 72 hours.