Privacy Policy & Data Protection Standard
Scope & Commitment
At ViralReels AI ("we," "our," or "us"), protecting creator privacy, intellectual property, and digital assets is our fundamental operational commitment. This Privacy Policy governs all information collected when you access our website (https://viralreels.click), authenticate your creator account, connect third-party platforms such as Google and YouTube, upload multimedia content, and use our AI video clipping, subtitle generation, and social publishing services.
By creating an account, authenticating via Google Identity Services, or using our automated publishing features, you explicitly agree to the practices and protections described in this policy.
Information We Collect
We strictly collect only the minimal data necessary to deliver high-quality automated video creation and publishing workflows:
- Account & Profile Data: When you register or sign in using Google Identity Services (OAuth 2.0), we receive your primary email address, full name, profile picture avatar, and account identifier. We do not receive, store, or have access to your Google account password.
- Multimedia Uploads & Source Links: Video and audio files uploaded directly or imported via YouTube URLs for the sole purpose of extracting speech transcripts, identifying viral segments, tracking active speakers, and rendering vertical short clips with animated subtitles.
- Usage & Quota Telemetry: Video durations, render timestamps, quota minutes consumed, active subtitle presets, and user preferences (e.g., custom Brand Kit colors and font selections).
- Billing & Subscription Metadata: Subscription plan tier (Free, Pro, Agency, Lifetime) and transaction reference IDs processed securely through PCI-DSS Level 1 compliant payment gateways (LemonSqueezy / Stripe). We never store raw credit card numbers or payment credentials on our servers.
AI Processing & Video Transformation
When you submit video or audio content to ViralReels AI:
- Speech-to-Text Transcription: Audio tracks are converted into word-level timestamps using Whisper models running on private, isolated GPU compute clusters. Transcripts are processed exclusively to generate subtitles, extract viral segments, and create video summaries.
- Computer Vision Active Speaker Framing: Face detection models evaluate 2D bounding boxes to smoothly pan and crop 16:9 widescreen videos into 9:16 vertical shorts. No biometric facial recognition templates, identity databases, or permanent biometric records are created or stored.
- No Generalized AI Model Training: Your source videos, audio tracks, and transcripts are NEVER used to train, retrain, or improve generalized foundation AI models or third-party models without your explicit written authorization.
Media Storage & Auto-Purge Lifecycle
To maximize creator privacy and maintain strict data hygiene, all processed videos adhere to automated lifecycle retention policies:
Creators can also perform instant, permanent hard-deletions of any clip, subtitle track, or source video directly from their Studio Workspace at any time.
Google API Services & User Data Policy Compliance
This section describes how ViralReels AI accesses, uses, stores, shares, protects, and deletes Google user data in strict compliance with the Google API Services User Data Policy, including the Limited Use requirements.
5.1How ViralReels AI Uses Google User Data
When you authorize ViralReels AI to connect with your Google Account or YouTube channel via Google OAuth 2.0, we access only the specific scopes you explicitly grant:
- Google Identity & Profile (
openid,profile,email): We access your email address, full name, profile picture, and Google user ID solely to authenticate your identity, create your creator account, and maintain your secure login session. - YouTube Channel Metadata (
youtube.readonlyor YouTube Data API v3): We access your connected YouTube channel title, custom handle, channel ID, and avatar solely to display your connected social accounts in the Social Accounts dashboard and Channel Automation scheduler. - YouTube Video Uploading (
youtube.upload/youtube): When you enable YouTube publishing or schedule automated Shorts, we use the YouTube Content API exclusively to upload user-created, user-approved video files, set video titles, descriptions, hashtags, and privacy visibility (public, unlisted, or private) as directed by you. - Publication Status Confirmation: We retrieve the upload status of dispatched videos to confirm successful delivery and provide direct links to your published YouTube Shorts in your dashboard.
🔒 Prohibited Uses: ViralReels AI uses Google user data strictly to deliver user-facing video creation and publishing features. We NEVER use Google user data to train, retrain, or improve generalized machine learning or AI foundation models. We NEVER use Google user data for profiling, behavioral advertising, market research, or credit evaluation.
5.2Sharing, Transfer, and Disclosure of Google User Data
ViralReels AI maintains strict restrictions regarding the sharing and transfer of Google user data:
- Zero Sale or Commercial Disclosure: We do NOT sell, rent, lease, trade, or disclose Google user data to any third parties, advertisers, data brokers, or commercial marketing platforms under any circumstances.
- Direct Transmission to Google APIs:Google user data and video content are transferred strictly and directly to Google's YouTube API endpoints to perform the video upload actions initiated and configured by you.
- Secure Cloud Infrastructure: Google user data is transferred only to our secure, private cloud infrastructure (encrypted PostgreSQL database hosted on Supabase and private application servers) strictly as necessary to store encrypted authentication tokens and execute user-directed publishing jobs.
- Strict Human Access Controls: No human employees, contractors, or administrators at ViralReels read or inspect your private Google user data, unless:
- You provide explicit, prior written consent to investigate a specific technical support ticket or publishing failure;
- It is strictly necessary for security investigations, such as investigating fraud, malicious abuse, or system compromise; or
- We are compelled to do so by a valid, legally binding court order or statutory requirement.
5.3Data Protection Mechanisms for Sensitive Google Data
We implement industry-standard technical, operational, and organizational security mechanisms to safeguard sensitive Google user data against unauthorized access, loss, or disclosure:
All sensitive Google OAuth access tokens, refresh tokens, and channel identifiers are encrypted at rest using AES-256 (Advanced Encryption Standard) encryption before being committed to our PostgreSQL database.
100% of data transmitted between your browser, our application servers, and Google API servers is secured using Transport Layer Security (TLS 1.3 / HTTPS) with modern, high-grade cryptographic cipher suites.
Database access is isolated within private virtual networks with strict IP allowlisting. Internal server access is restricted using role-based access control (RBAC), multi-factor authentication, and zero-trust principles.
All OAuth token access, video dispatch events, and authentication operations are recorded in immutable audit logs. Automated rate-limiting and anomaly detection monitor and block unauthorized API usage.
5.4Retention and Deletion of Google User Data
We retain Google user data only as long as necessary to provide creator services, and we provide clear, immediate mechanisms for users to delete their data:
- Retention Duration: Google OAuth tokens and channel metadata are retained only while your connected YouTube account remains active within ViralReels AI. If an account remains inactive or is disconnected, data is purged according to our lifecycle policy.
- One-Click Account Disconnection & Immediate Deletion: You can disconnect your Google / YouTube account at any time with a single click from the Social Accounts dashboard. Upon disconnection, all stored OAuth access tokens, refresh tokens, and channel metadata are immediately and permanently wiped from our database.
- Complete Account Deletion: You may request complete erasure of your ViralReels account and all associated data at any time via your account settings or by emailing our Data Protection Office at privacy@viralreels.click. All personal data, tokens, and video assets will be permanently and irreversibly purged within 24 hours.
- Direct Revocation via Google Security Settings: You can revoke ViralReels AI's access to your Google account at any time directly through Google's third-party permissions manager at https://myaccount.google.com/permissions. When access is revoked via Google, our servers immediately lose access, and all stored tokens are permanently invalidated.
Google API Services User Data Policy — Limited Use Disclosure
“ViralReels AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.”
TikTok Developer Terms & User Data Policy Compliance
ViralReels AI integrates with TikTok for Developers products (including Login Kit and Content Posting API) to allow creators to connect their TikTok accounts and publish short-form video clips directly from their workspace. In strict accordance with the TikTok Developer Terms of Service and Partner Privacy Policy:
- Data Accessed via TikTok Scopes: When you authorize ViralReels AI via TikTok OAuth, we access your basic profile information (
user.info.profile: display name, username, and avatar) and account statistics (user.info.stats) solely to display your connected channel in your dashboard. When authorized, we use the Content Posting API to publish user-approved video clips and captions to your TikTok account. - Purpose & Limited Use: TikTok user data is used exclusively to facilitate automated and scheduled video publishing initiated by the account owner. We never use TikTok user data for profiling, surveillance, unauthorized marketing, or advertising.
- No Sale of TikTok Data: We do not sell, rent, lease, or disclose TikTok user data to any third parties, data brokers, or advertising networks.
- Data Security & Token Encryption: All TikTok OAuth access tokens and refresh tokens are encrypted at rest using AES-256 and transmitted exclusively over secure TLS 1.3 channels.
- Data Deletion & Account Disconnection: You can disconnect your TikTok account at any time with a single click in your Social Accounts dashboard. Disconnecting immediately and permanently purges all cached TikTok tokens and associated metadata from our database. You can also revoke app access directly from your TikTok account settings at any time.
Your Privacy Rights (GDPR & CCPA)
Regardless of your geographic location, you have the following guaranteed rights:
- Right of Access: You may request a complete export of your personal data and rendering history.
- Right to Erasure: You can delete your account and all associated media instantly.
- Right to Restrict Processing: You may revoke Google or TikTok OAuth permissions at any time via your provider security settings.
Contact Data Protection Office
For any privacy inquiries, data deletion requests, or compliance questions, please contact our Data Protection Officer at: