Privacy Policy

1. Introduction

This Privacy Policy explains what data ViralWorker ("we", "us") collects when you use our website and dashboard (the "Service"), why we collect it, and the choices you have. By using the Service, you agree to the collection and use of information as described here.

2. Information We Collect

Account information

• Email address and password (or, if you sign in with Google, your name and profile picture from your Google account);
• Any display name you choose to set;
• Two-factor authentication status, if you enable it (we never see your TOTP secret in plain form — it's managed securely by our authentication provider).

Billing information

Payments are handled entirely by Stripe. We do not collect or store your card number, expiry date, or CVC — Stripe does, under its own security and privacy program. We only keep what we need to manage your subscription: your plan, its status, renewal date, and a Stripe customer/subscription reference.

Usage data

• The prompts and messages you send while using the Service, and the projects you create;
• Images you choose to upload in a project chat — these are stored temporarily (roughly 24 hours) and automatically deleted afterward;
• Your credit balance and transaction history (purchases, renewals, and — once generation is live — usage).

Technical data

Like most web services, our infrastructure automatically logs standard technical information (IP address, browser/device type, timestamps) for security and reliability purposes.

3. How We Use Your Information

• To create and secure your account, and to keep you signed in;
• To provide the Service — including chat, project storage, and (as it becomes available) AI generation;
• To process payments, renewals, and keep your billing status accurate;
• To send transactional emails you need — email verification codes, password reset links, and payment receipts. We do not send marketing emails without your consent;
• To detect, prevent, and respond to abuse, fraud, or security issues;
• To fix bugs and improve the Service.

4. Cookies & Local Storage

We keep this simple: we only use strictly functional storage, never advertising or analytics tracking.

• A secure authentication cookie that keeps you signed in — required for the Service to work;
• A local, on-device preference (not a cookie) that remembers whether you prefer light or dark mode.

5. Who We Share Data With

We don't sell your personal information. We share the minimum necessary data with the service providers that let us run ViralWorker:

• Supabase — authentication and database hosting;
• Stripe — payment processing and subscription billing;
• Resend — delivery of transactional emails (verification codes, password resets, receipts);
• Vercel — application hosting and infrastructure.

Each of these providers only receives what it needs to perform its specific function, and is bound by its own privacy and security commitments. We may also disclose information if required to by law, or to protect the rights, safety, or property of ViralWorker or our users.

6. Data Retention

We keep your account data for as long as your account is active. Uploaded chat images are automatically deleted after roughly 24 hours regardless of account status. If you delete your account, we remove your personal data within a reasonable period, except where we're required to keep certain records (for example, billing records) for legal or accounting purposes.

7. Your Rights

Depending on where you live, you may have rights over your personal data, including the right to access, correct, export, or delete it, and to object to or restrict certain processing. To exercise any of these rights, contact us at contact@viralworker.comand we'll respond as quickly as we can.

8. Data Security

We use industry-standard measures to protect your data — encrypted connections (HTTPS), hashed passwords, and optional two-factor authentication. No method of transmission or storage is ever 100% secure, but we work to protect your information to the best of our ability.

9. Children's Privacy

The Service is not directed at children and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we'll remove it.

10. International Data Transfers

Our service providers may process data in countries other than your own, including the United States and countries within the European Union. Where this happens, it's covered by each provider's own data protection safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above. We encourage you to review this page periodically.

12. Contact

Questions about this Privacy Policy or your data? Reach us at contact@viralworker.com.