Privacy Policy for Viral Cow

Introduction

Welcome to Viral Cow (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our video content creation platform and related services (the “Service”). By using Viral Cow, you agree to the practices described in this policy.

This policy is designed to comply with the Meta Platform Terms, the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use our Service, we collect:

• Account Information: Name, email address, username, and password
• Profile Information: Business details, niche, tone of voice preferences, and brand materials you upload
• Content Data: Videos, documents, PDFs, and other materials you upload for analysis or script generation
• Communication Data: Messages you send through our platform, support requests, and feedback

1.2 Information We Collect from Meta (Facebook/Instagram)

When you connect your Viral Cow account with your Meta profile, we collect the following data via the Meta API, exclusively as necessary to provide our Service:

• App-Scoped User ID: A unique identifier assigned by Meta for your account
• Basic Profile Information: Your public profile name and profile picture
• Email Address: Used for account authentication and communication
• Date of Birth: If provided, used for age verification purposes

We strictly adhere to Meta's Developer Data Use Policy and only process the minimum data necessary for account authentication, content personalization, and functional necessity of the application.

1.3 Automatically Collected Information

When you use our Service, we automatically collect:

• Usage Data: Features you use, videos you create, time spent on the platform
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, pages viewed, error logs, and system activity

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Service Provision and Personalization

• Account Management: Creating and maintaining your account, authenticating your identity
• AI Script Generation: Analyzing your uploaded content and brand materials to generate personalized viral video scripts through our “Magic” feature
• Video Analysis: Providing feedback and optimization suggestions through our “Get Judged” feature
• Content Recommendations: Personalizing content suggestions based on your niche and preferences

2.2 Service Improvement and Analytics

• Platform Optimization: Understanding how users interact with our features to improve functionality
• Performance Monitoring: Tracking system performance, identifying bugs, and maintaining security
• Product Development: Developing new features and improving existing ones based on usage patterns

2.3 Communication

• Service Updates: Sending you important notifications about your account, new features, and service changes
• Customer Support: Responding to your inquiries and providing technical assistance
• Marketing Communications: With your consent, sending promotional emails about new features (you can opt out anytime)

2.4 Legal and Security

• Compliance: Fulfilling legal obligations and responding to lawful requests from authorities
• Security: Detecting and preventing fraud, abuse, and security incidents
• Terms Enforcement: Enforcing our Terms of Service and protecting our rights

3. How We Share Your Information

We do not sell your personal information. We share your data only in the following limited circumstances:

3.1 Third-Party Service Providers

We use trusted third-party services to operate our platform:

• Cloud Infrastructure: Supabase/PostgreSQL - for data storage and processing
• AI Services: DeepInfra (DeepSeek model) - for script generation and analysis
• Authentication Services: Meta (Facebook/Instagram) - for social login functionality
• Hosting Services: Vercel - for application hosting and delivery

Each service provider is contractually obligated to protect your data and use it only for the specific purpose we've authorized.

3.2 Legal Requirements

We may disclose your information if required by law, legal process, or governmental request, or to:

• Protect our legal rights and property
• Prevent fraud or security threats
• Comply with Meta Platform Terms and policies

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, who will be required to honor this Privacy Policy.

4. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Data is retained while your account remains active
• Inactive Accounts: After 12 months of inactivity, we may delete your account and associated data
• Legal Requirements: Some data may be retained longer if required by law (e.g., financial records, fraud prevention logs)

In accordance with Meta Platform Terms and global data protection regulations (such as the GDPR Right to Erasure), you have the absolute right to request deletion of your data at any time (see Section 8).

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted to and from our platform uses HTTPS/TLS encryption
• Access Controls: Limited employee access to personal data, restricted to those who need it to perform their jobs
• Regular Audits: Periodic security assessments and vulnerability testing
• Secure Storage: Data stored in secure, access-controlled cloud infrastructure

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you have the following rights:

6.1 Rights Under GDPR (EU/EEA Users)

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (see Section 8)
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to certain types of processing
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

6.2 Rights Under CCPA (California Residents)

• Right to Know: Request disclosure of the categories and specific pieces of data we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the “sale” of personal information (Note: We do not sell your data)
• Right to Non-Discrimination: Exercise your rights without facing discriminatory treatment

To exercise any of these rights, contact us at privacy@viralcow.com or visit our Data Deletion Status page.

7. International Data Transfers

Viral Cow operates globally. If you are located outside the United States, your information may be transferred to and processed in countries that may have different data protection laws. We ensure adequate safeguards are in place through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adherence to Meta's data transfer mechanisms
• Compliance with applicable data protection frameworks

8. Data Deletion Rights and Process

8.1 How to Request Data Deletion

You have the absolute right to request permanent deletion of all data we have collected about you. You can do this in two secure ways:

8.2 What Gets Deleted

Upon receiving your deletion request, we will permanently delete:

• Your account information (name, email, username)
• All content you uploaded (videos, documents, brand materials)
• Your generated scripts and analysis results
• Your usage history and preferences
• Any Meta-provided data (App-Scoped User ID, profile information)

8.3 Data Retention Exceptions

In accordance with legal requirements, we may retain certain minimal data for legitimate purposes:

• Financial Records: If you had a paid subscription, transaction records may be retained for 7 years to comply with tax and accounting laws
• Anti-Fraud Logs: Hashed identifiers may be retained to prevent abuse and protect platform security
• Legal Compliance: Data required by law enforcement or court orders

Any retained data will be stored in a secure, non-operational archive and will not be used for any other purpose.

8.4 Deletion Timeline

• Automated Deletion: Within 30 days of receiving your request
• Status Updates: Track your request in real-time using your confirmation code
• Completion Notification: You'll receive confirmation once deletion is complete

9. Children's Privacy

Viral Cow is not intended for users under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take immediate steps to delete that information.

If you believe your child has provided us with personal information, please contact us at privacy@viralcow.com.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Authentication: Keep you logged in to your account
• Preferences: Remember your settings and customization
• Analytics: Understand how users interact with our Service
• Security: Detect and prevent fraudulent activity

You can control cookies through your browser settings. However, disabling cookies may affect your ability to use certain features of our Service.

11. Third-Party Links

Our Service may contain links to third-party websites, services, or integrations (such as Meta, YouTube, or other platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we make material changes:

• We will update the “Last Updated” date at the top of this policy
• We will notify you via email and/or a prominent notice on our platform
• For significant changes, we may require you to review and accept the updated policy

Your continued use of Viral Cow after changes take effect constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14. Governing Law

This Privacy Policy is governed by the laws of the United States, without regard to its conflict of law provisions.