1. Controller
The controller of your data is ViralWorker (see the Legal Notice). For any question or request about your data: contact@viralworker.com.
2. What we do with your data
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Creating and managing your account, signing in | Email, encrypted password, name, avatar, Google / Discord / Roblox identifiers if you link them | Performance of the contract | As long as the account exists, then deleted |
| Providing the Service: generating your games and content | Prompts, uploaded images, projects, conversations, generated content | Performance of the contract | Inactive projects deleted automatically, from 24 hours to 30 days depending on your plan; images 24 hours |
| Payments, invoices, credits | Plan, purchase and credit history (never your card numbers) | Performance of the contract; legal obligation (accounting) | Accounting records 10 years; the rest as long as the account exists |
| Proof of accepting the Terms/Conditions and waiving the withdrawal right | Date, version, IP address, browser | Legal obligation and legitimate interest (evidence) | 5 years after the contract ends |
| Security, fraud and abuse prevention | IP address, connected devices, security history | Legitimate interest | 12 months |
| Support and service emails | Support conversations, emails sent (codes, receipts, alerts) | Performance of the contract | 3 years after the last exchange |
| News and promotional emails, including those sent after a cancellation, which may be personalised from the account's projects and usage | Email, preferences, projects and account usage | Consent, or legitimate interest for customers (one-click unsubscribe) | Until you unsubscribe, or 3 years without activity |
| Partner programme | Identity, social accounts, partner link, sign-ups, commissions, payout details | Performance of the contract; legal obligation | Duration of the partnership, then 10 years for accounting records |
| Website audience measurement | Pages viewed, where the visit came from, IP address, browser | Consent (cookie banner) | 13 months |
| Improving the Service (ratings and feedback you give, internal statistics) | Ratings, comments, suggestions, aggregated usage data | Legitimate interest | As long as the account exists |
We do not sell your data and do not use it for targeted advertising.
3. Your requests and artificial intelligence
To generate your games and content, your prompts, the images you upload and the necessary context of your project are sent to our AI model providers, mainly Anthropic, Google and OpenAI. They process the data to produce the answer, under their own terms, and may keep it for a limited time, notably for safety.
We do not use your prompts or projects to train AI models. Avoid putting personal information in your prompts that your request does not need.
4. Who receives your data
- Our host (OVH SAS), in France.
- Our AI model providers (Anthropic, Google, OpenAI…): generation (section 3).
- Stripe: payments, subscriptions and partner payouts.
- Our email delivery provider.
- Google, Discord, Roblox: sign-in and account linking when you use them; Roblox to publish your creations to your account when you allow it.
- The ViralWorker team, for support and security, as far as needed.
- Authorities, where the law requires it.
5. Transfers outside the European Union
Your data is stored in France. Some providers (AI, payment, email, Google, Discord, Roblox) are located in, or process data in, the United States. These transfers rely on the EU–US Data Privacy Frameworkwhere the provider is certified, and otherwise on the European Commission's standard contractual clauses. You may ask us for a copy.
7. Minors
The Service is open from age 13. In France, a minor under 15 needs the consent of a holder of parental authority to sign up. A parent may write to contact@viralworker.comto exercise their child's rights or have the account deleted.
8. Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time, and (in France) to set instructions for your data after your death. You can delete your account from Settings or write to contact@viralworker.com; we answer within one month.
If you believe your rights are not respected, you may lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country.
9. Security
Traffic is encrypted, passwords are protected, access to data is restricted and two-factor authentication is available. Your card numbers never go through our servers.
10. Changes
We update this policy when our processing changes; the date at the top says when, and important changes are announced to you.