Viralla AI ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered social media content generation platform and related services (collectively, the "Service").
Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of your information as described in this policy. If you do not agree with our policies and practices, please do not use our Service.
Effective Date: December 21, 2026
2. Information We Collect
2.1 Information You Provide to Us
We collect information you voluntarily provide, including:
Account Information: Name, email address, password, and profile details
Business Information: Company name, industry, target audience, brand voice preferences
Providing product updates, new features, and service announcements
Sending promotional communications (with your consent)
Notifying you about subscription status and discount expirations
3.4 Legal and Safety
Complying with legal obligations and responding to legal requests
Protecting our rights, property, and safety of our users
Detecting and preventing fraud, abuse, and security incidents
Enforcing our Terms of Service and other agreements
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Service Providers
We share information with trusted third-party service providers who assist us in operating the Service, including:
Cloud Hosting: For storing and processing data securely
Payment Processing: Stripe for handling payment transactions
AI Services: OpenAI, Anthropic, and Google for content generation
Email Services: For sending transactional and marketing emails
Analytics: For understanding usage patterns and improving the Service
4.2 Social Media Platforms
When you connect social media accounts, we share content you choose to publish to those platforms. This sharing is governed by both our policies and the respective platform's policies.
4.3 Legal Requirements
We may disclose information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
4.5 With Your Consent
We may share information with third parties when you have given us explicit consent to do so.
5. Data Security
We implement robust security measures to protect your information:
Encryption: All data is encrypted in transit (TLS/SSL) and at rest
Access Controls: Strict access controls and authentication mechanisms
Password Security: Passwords are hashed using industry-standard algorithms (bcrypt)
OAuth Tokens: Social media credentials are stored as secure tokens, never plain passwords
Rate Limiting: Protection against brute force and denial-of-service attacks
Regular Audits: Periodic security assessments and vulnerability testing
Employee Training: Staff trained on data protection and security practices
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we are committed to promptly addressing any security incidents.
6. Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:
Account Data: Retained while your account is active and for up to 30 days after deletion
Generated Content: Retained until you delete it or close your account
Deleted Content (Trash): Permanently deleted after 30 days in trash
Payment Records: Retained for 7 years for tax and legal compliance
Usage Logs: Retained for up to 12 months for analytics and security
Support Communications: Retained for 3 years to provide ongoing support
You may request deletion of your data at any time, subject to legal retention requirements.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and store information:
7.1 Types of Cookies We Use
Essential Cookies: Required for the Service to function (authentication, security)
Functional Cookies: Remember your preferences and settings
Analytics Cookies: Help us understand how you use the Service
Performance Cookies: Monitor Service performance and errors
7.2 Managing Cookies
Most web browsers allow you to control cookies through their settings. You can:
Block all cookies
Delete existing cookies
Allow cookies from specific sites
Set preferences for different types of cookies
Note: Blocking essential cookies may prevent you from using certain features of the Service.
8. Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
8.1 General Rights
Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information
Portability: Request a copy of your data in a portable format
Opt-Out: Opt out of marketing communications at any time
Withdraw Consent: Withdraw consent for processing where applicable
8.2 European Users (GDPR)
If you are in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):
Right to restrict processing of your personal data
Right to object to processing based on legitimate interests
Right to lodge a complaint with a supervisory authority
Right not to be subject to automated decision-making
Legal Basis for Processing: We process your data based on: (a) your consent; (b) performance of a contract; (c) compliance with legal obligations; and (d) our legitimate interests.
8.3 California Users (CCPA/CPRA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
Right to know what personal information we collect and how it is used
Right to delete personal information (with certain exceptions)
Right to opt-out of the sale of personal information (we do not sell your data)
Right to non-discrimination for exercising your rights
Right to correct inaccurate personal information
Right to limit use of sensitive personal information
To exercise these rights, contact us at builtbymarketing@gmail.com. We will respond within 45 days.
9. Children's Privacy
The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at builtbymarketing@gmail.com.
If we learn that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws.
When we transfer data internationally, we implement appropriate safeguards, including:
Standard Contractual Clauses approved by the European Commission
Data processing agreements with service providers
Compliance with applicable data transfer regulations
Implementation of equivalent security measures
11. Third-Party Links and Services
The Service may contain links to third-party websites and integrate with third-party services. This Privacy Policy does not apply to those third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.
When you connect social media accounts or use third-party AI services through our platform, your information is also subject to those providers' privacy policies.
12. AI and Machine Learning
Our Service uses artificial intelligence and machine learning. Here's how your data relates to our AI systems:
Content Generation: Your inputs are processed by AI models to generate content. These inputs may be sent to third-party AI providers (OpenAI, Anthropic, Google).
Model Training: We may use aggregated, anonymized usage data to improve our services. We do not use your personal content to train AI models without explicit consent.
Quality Scoring: AI analyzes generated content to predict engagement. This analysis is automated and does not involve human review of your content.
Third-Party AI: Content sent to third-party AI services is subject to their respective privacy policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes:
We will update the "Last Updated" date at the top of this policy
We will notify you by email or through the Service
We may request your consent for significant changes
We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Subject Line: "Privacy Inquiry" for fastest response
We will respond to your inquiry within 30 days, or as required by applicable law.
By using Viralla AI, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy.