Last updated: 8 September 2026
When you create an account we collect your email address and any profile details you provide (such as your name, timezone and affiliate IDs). When you connect a third-party account — Facebook/Instagram, TikTok, an email provider such as Resend, SendGrid, Mailgun or your own SMTP server, or an affiliate network — we store the account identifier and the credentials needed to act on your behalf. Those credentials are stored in encrypted secret storage and are never shown back to you in plaintext. We also record usage data such as jobs run, content generated, emails sent, and posts or ad campaigns published, for billing and support purposes.
We use your data to operate the Service: authenticate you, generate campaign content, publish to your connected accounts when you request it, send the emails you schedule, launch ad campaigns you explicitly activate, serve your funnel and blog pages, process payments, and provide support. We do not sell your personal data.
Your funnel pages collect contact details from your own visitors (name, email, plus any custom fields you add, along with the IP address and user agent of the submission). We store that data on your behalf so you can view, tag, export and email it — we do not use it for our own purposes, and we do not sell or share it. You are the controller of that data: obtaining consent, honouring deletion requests, and complying with GDPR, CCPA, CAN-SPAM, CASL and any other law that applies to your audience is your responsibility, not ours. Every email sent through the Service carries an unsubscribe link that cannot be removed, and unsubscribing suppresses that contact across all of your sequences.
We run no analytics, no advertising pixels and no third-party trackers on this website. Nothing on these marketing pages loads a script from another company or reports your visit anywhere. That is why you are not being asked to accept cookies: there are none to accept. Everything below is either required to sign you in or is a preference you set yourself, and none of it is used to profile you or shared with anyone.
aos-auth) that keeps you logged in. Without it the app cannot work at all.Funnel and blog pages that our customers publish are a separate matter. Those set a small number of first-party cookies to keep a split test showing the same version of a page to the same visitor and to avoid counting one person twice. If the customer who published the page has installed their own analytics or advertising tags, those are that customer’s, disclosed by them, and where they have switched consent on the tags do not run until the visitor agrees.
We share the minimum data necessary with the following processors: Stripe (payment processing), Supabase (database, authentication and file storage), Amazon Web Services (application and page hosting, including your custom domains), Cloudinary (image hosting and delivery), Anthropic (content generation — product and sales-page text is sent to generate your campaign kits), kie.ai and Google (Gemini) for AI image and video generation, ElevenLabs (voiceover generation), and — only for accounts you choose to connect — Meta/Facebook, TikTok, Google (see section 6), Twilio (SMS), and your chosen email provider (Resend, SendGrid, Mailgun or your own SMTP server).
If you connect a Google account, we request only the access the feature you chose needs, and we use it only for that feature.
YouTube. Connecting a YouTube channel requests read-only access to your channel and permission to upload. We use the first only to read your channel's name and thumbnail, so we can show you which channel is connected before anything is published to it; we use the second only to upload a video you have explicitly chosen to publish from one of your campaigns. We do not read your existing videos, comments, subscribers or analytics. Uploads default to private visibility on your channel. We store your channel id, title and thumbnail URL, and a record of each upload we perform for you (video id, title, status and timestamp).
Analytics and Search Console. Connecting these requests read-only access to your Google Analytics and Search Console properties, used only to display your own traffic and search performance inside the dashboard. We do not write to either service.
Access and refresh tokens are stored encrypted and are never exposed to your browser or to any other customer. You can disconnect at any time from Settings → Integrations, which deletes the stored tokens; deleting your account removes the connection and its tokens.
Limited Use. Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalized artificial intelligence or machine-learning models. Human access occurs only with your explicit consent, for security or debugging, or where required by law.
We retain account, campaign and contact data for as long as your account is active. When you disconnect a third-party account, the stored credentials for that connection are deleted. You may request deletion of your account and associated data at any time by contacting us.
Access tokens and other sensitive credentials are stored using encrypted secret storage, not plaintext database columns, and are only ever retrieved by trusted server-side code to perform the action you requested (e.g. publishing a post).
Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at viraladmediacontent@gmail.com. We delete a contact record, and redact the address from our send logs, on request.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions about this Privacy Policy can be sent to viraladmediacontent@gmail.com.