Privacy Policy

1. Who We Are

ViralAI is an AI service that turns long-form videos into short vertical clips and helps you publish them to your social channels. ViralAI.Tech ("the operator") operates ViralAI and VimAPI. This Privacy Policy explains what information we collect through the Service, why we collect it, who we share it with, how long we keep it, and the choices you have.

This is not a generic template. Every category below reflects what the ViralAI product actually does. If something here is unclear, email us at support@vimapi.com or creator@viralai.tech before you use the Service.

2. Plain-Language Summary

• What we collect: your account details, the videos and clips you upload or generate, tokens for the social accounts you connect, payment records, and basic device/usage data.
• Google / YouTube: signing in uses only your name, email, and profile picture. Publishing scopes (upload, read, analytics) are requested separately, only when you connect a YouTube channel, and only to do what you ask.
• We do not sell your data and we do not use your content or your Google/YouTube data to train AI models.
• Deletion: you can delete any upload, any clip, or your whole account at any time. Account deletion removes your content from active systems within 30 days and from backups within 90 days.
• Subprocessors we use: Amazon Web Services (storage and compute), OpenAI (transcription fallback and text suggestions), Razorpay (payments), and a transactional email provider. Full list in Section 8.

The sections below are the authoritative version; this summary is for convenience only.

3. Information We Collect

3.1 Information you provide

• Account information: your name, email address, and profile picture. When you sign up with Google, we receive these from your Google profile; we do not receive or store your Google password. We separately ask you to provide your phone number, pincode, and address for billing and invoices; these do not come from Google.
• Waitlist information: if you join our waitlist, we store the email address you submit until you either create an account or ask us to remove it.
• Content you upload or create: source video and audio files, generated short clips, transcripts and captions, thumbnails, titles, descriptions, tags, scheduling details, and drafts.
• Payment information: when you buy credits or a plan, our payment processor (Razorpay) collects and processes your card or UPI details. We receive transaction identifiers, the amount, status, and partial card metadata — not your full card number.
• Support communications: messages, attachments, and contact details you send us by email or WhatsApp.

3.2 Information from connected accounts

You can connect third-party accounts so ViralAI can publish and measure content on your behalf. When you do, we store an encrypted access token (and refresh token where provided) plus the profile and channel data listed below. You can disconnect any account at any time (Section 10).

• Google / YouTube: channel ID and handle, channel title and thumbnail, the email on the account, video metadata for videos you publish through ViralAI, upload and processing status, and channel/video analytics (views, watch time, subscriber changes, traffic sources, and audience geography). See Section 4 for the exact scopes.
• Meta, X, and LinkedIn: we store only the access token needed to publish on your behalf at your request.

3.3 Information we collect automatically

• Device and connection data: IP address, browser type, operating system, and device identifiers.
• Usage data: pages and features used, actions taken (uploads, edits, publishes), timestamps, and error/diagnostic logs.
• Cookies: a session cookie to keep you signed in and a small number of preference cookies. We do not use third-party advertising or cross-site tracking cookies. See Section 12.

4. Google and YouTube API Services

ViralAI uses YouTube API Services. By using ViralAI's YouTube features, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

4.1 Scopes we request, and why

Signing in requests only openid, profile, and email — enough to create your account and show your name and picture. It grants no access to your videos or channel.

Connecting a YouTube channel is a separate step with its own consent screen. Only then do we request:

• https://www.googleapis.com/auth/youtube.upload — to publish the short clips you generate to your channel, with the title, description, thumbnail, tags, and visibility you set, when you choose to publish them.
• https://www.googleapis.com/auth/youtube.readonly — to list your channels and existing videos so you can pick where content goes and see your library inside ViralAI.
• https://www.googleapis.com/auth/yt-analytics.readonly — to show views, watch time, and audience metrics for your published clips in your ViralAI analytics dashboard.

We request the narrowest set of scopes that makes these features work. If you decline a scope, the related feature is simply unavailable.

4.2 Limited Use

ViralAI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the features you use it for.
• We do not transfer or sell Google user data for advertising, and we do not use it for advertising.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI/ML models.
• We do not allow humans to read your Google user data unless (a) you give explicit consent for a specific action such as a support request, (b) it is necessary for security or to comply with law, or (c) the data is aggregated and anonymized for internal operations.

4.3 YouTube data: storage, retention, sharing, and deletion

• What we store: the OAuth access and refresh tokens for your connected channel (encrypted at rest with AES-256-GCM), your channel ID and name, the titles and IDs of videos we list for you, and the view, watch-time, and audience metrics shown in your analytics dashboard. We do not store your Google password.
• How long we keep it: tokens are kept until you disconnect the channel or delete your account; analytics metrics are kept while the channel is connected and for a limited period afterward. Exact periods are in Section 9.
• No sale, no sharing beyond the service: we do not sell YouTube user data. We do not share it with anyone except as needed to provide the service you asked for (our subprocessors acting on our behalf, and YouTube itself when you publish), or where the law requires it.
• Revoking access: disconnect the channel in ViralAI under Social Accounts, or revoke ViralAI's access to your Google Account at any time at myaccount.google.com/permissions.
• Requesting deletion: email support@vimapi.com from your account email address and we will delete the YouTube data we hold about you, as described in Section 12.

5. How We Use Your Information

• Create and secure your account and authenticate you.
• Transcribe your videos, detect scene and silence boundaries, and generate short clips, captions, and suggested titles and descriptions.
• Publish and schedule content to the accounts you connect, at your instruction.
• Show analytics and performance insights for content you published through ViralAI.
• Process payments, credits, and refunds, and prevent fraud and abuse.
• Provide support and respond to your requests.
• Monitor, debug, and improve reliability, performance, and security of the Service.
• Send you service and account notifications; send product updates only where permitted, and you can opt out.
• Comply with legal obligations and enforce our Terms.

Where required by law, we rely on the following legal bases: performing our contract with you, your consent (for example, connecting an account or optional communications), our legitimate interests in operating and securing the Service, and compliance with legal obligations.

6. AI and Automated Processing

• Transcripts, clip selection, and suggested titles, descriptions, and highlights are produced by automated processing, using our own and third-party AI services.
• We do not send your account information (name, email, phone, address) to these services.
• You review every clip before anything is published — nothing is posted to your channels without your action.

7. How We Share Your Information

7.1 We do not sell your data

We do not sell, rent, or trade your personal information, and we do not share it for cross-context behavioral advertising. This includes all data from connected accounts, including Google and YouTube data.

7.2 When we do share

• Subprocessors: vendors that host, process, or transmit data on our behalf under contract, listed in Section 8.
• Platforms you publish to: when you publish or schedule a post, ViralAI sends that content and its metadata to the platform you chose (YouTube, Meta, X, LinkedIn). Their handling is governed by their own policies.
• Legal and safety: when required by law, court order, or valid government request, or to protect the rights, safety, or property of ViralAI, our users, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, with notice to you and continued protection of your data.
• With your consent: any other sharing you explicitly authorize.

8. Subprocessors

We use the following third parties to run the Service:

• Amazon Web Services (United States) — file storage, processing queue, and compute for video rendering.
• OpenAI (United States) — fallback speech-to-text transcription and generation of suggested titles, descriptions, and highlights.
• Razorpay (India) — payment processing and billing.
• Transactional email provider — delivery of account, security, and notification emails.

Each subprocessor is bound by contract to protect your data and use it only to provide services to us. We will update this list as our providers change. For a current list at any time, contact support@vimapi.com.

9. Data Retention

Content already published to YouTube, Meta, X, or LinkedIn stays on those platforms after you delete it from ViralAI. You must remove it there directly.

10. Managing and Revoking Connected Accounts

• In ViralAI, open Social Accounts and choose Disconnect for any platform. This deletes the stored tokens for that account.
• For Google/YouTube, you can also revoke access at myaccount.google.com/permissions.
• For Meta, X, and LinkedIn, you can revoke access in each platform's connected-apps or app-permissions settings.

Revoking access in the platform does not delete your ViralAI account or your uploaded content; use Section 11 for that.

11. Your Rights and Choices

Subject to your location and applicable law, you can:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and associated content.
• Export a copy of your data in a portable format.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Opt out of non-essential communications.

EU/UK (GDPR): you also have the right to data portability and to lodge a complaint with your local supervisory authority.

California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information (we do neither), and the right not to be discriminated against for exercising these rights.

To exercise any right, email support@vimapi.com. We verify requests against your account and respond within the timeframe required by law (generally within 30 days). You may use an authorized agent where the law permits.

12. Deleting Your Account and Data

To delete your account and associated data, email support@vimapi.com (or message us on WhatsApp at +91 92208 91200) from your account email address with the subject "Delete my account." Where a self-service Delete Account option is available in your account settings, you can use that instead.

Deletion removes your account, uploads, generated clips, and connected-account tokens. We complete active-system deletion within 30 days and purge backups within 90 days. Some records (for example, payment records) may be retained where the law requires it, as described in Section 9.

13. Cookies

We use a session cookie to keep you signed in and a small number of cookies to remember preferences. We do not use advertising cookies, and we do not currently run third-party analytics or tag managers on the Service. If that changes, we will update this section and, where required, ask for your consent first.

14. Data Security

• All traffic is encrypted in transit using TLS.
• OAuth tokens and other sensitive fields are encrypted at rest using AES-256-GCM.
• Access to production systems and user data is restricted to authorized personnel on a need-to-know basis.
• Systems are monitored for suspicious activity, and security practices are reviewed periodically.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

15. International Data Transfers

ViralAI is operated from India and uses infrastructure in the United States and other countries. Your information may be processed outside your country of residence, in places with different data-protection laws. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

16. Children's Privacy

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@vimapi.com and we will delete it.

17. Changes to This Policy

We may update this Privacy Policy. Material changes take effect when we post the revised policy and update the "Last Updated" date; we will also notify registered users by email or in-app notice. Continued use of the Service after a change means you accept the updated policy.

18. Contact Us

Email: support@vimapi.com or creator@viralai.tech
WhatsApp (messages only): +91 92208 91200
Website: viralai.tech