Last updated: 17 October 2026. If you created your account before that date, this version applies to you from 10 November 2026; until then the version you agreed to applies. For accounts created before 14 October 2026, that is the previous version.
A Canadian company runs ViralHunter and is responsible for your personal information.
ViralHunter is operated by CONTENT CREATOR COACHING INC., 155 Commerce Valley Drive East, Thornhill, Ontario, L3T 7T2, Canada, which is the organization responsible for your personal information. Our Privacy Officer is reachable at privacy@viralhunter.app or by post at that address. This policy covers viralhunter.app and its subdomains; the EverSell privacy policy, published on EverSell.ai by the same company, covers EverSell. For people in the European Economic Area or the United Kingdom, we act as controller of your account data and as processor of the conversations you connect to the DM assistant.
What you give us, what we make for you, what arrives from the people who message you and from the platforms, and what we record on our own.
What you give us
When you create an account, we collect your email address, name, and a hashed version of your password. If you sign in with Google, we receive your basic profile information (name, email, profile photo) from Google.
When you use the content tools, we store the Instagram and TikTok accounts you choose to track, the scripts, voice profile and collections you create, and your conversations with the Tapa AI coach. Audio you upload is sent to our transcription provider and not kept; we keep the transcript. Images you add to the script canvas are sent to the AI model that answers you.
If you connect an Instagram or Facebook account to the DM assistant, we store the products, links, keywords, instructions and settings you give it, so it can reply on your behalf. If you ask the assistant to learn from your own Instagram account, we also collect that account's public bio and recent posts. We keep the messages and screenshots you send to support, and, if you are enrolled in one of our onboarding courses, your course progress. The creator affiliate program collects its own data, described in section 12.
What we generate for you
Transcripts and analyses of the videos you track, the scripts and voice profile the AI writes, the assistant's replies, and labels on conversations, for example a likely sale, or one that needs you because the person seems to be in distress, so the assistant can hand it over. The assistant also keeps a per-account note of what has worked in your own past conversations (section 3).
What we receive about the people who message you, and from the platforms
The conversations on the connected account, including comments on your posts that trigger the assistant and messages the sender later unsends, which we keep but the assistant no longer reads; and the public profile details of the people who message or comment, such as handle, follower count and whether the account is verified. Images, voice notes and stickers people send are not stored; we record only that an attachment arrived. From Instagram and TikTok we collect the public videos the accounts you track post, with their stats, captions and cover images (we host a copy of the cover image), and the tracked accounts' profile pictures.
What we record automatically
Your plan, payment status and invoices (your card details stay with Stripe or Whop); records of how you use the service: features used, sign-ins, API calls (with the calling IP address and client), and the cost of the AI work done for your account; the consent text, time and IP address when you turn on automatic top-ups, where we offer them; and the request logs and error reports described in section 4.
We use your data to run ViralHunter for you, never to sell it or to train an AI model.
We use your data to operate ViralHunter: to log you in, to fetch the videos you ask us to track, to generate transcripts and scripts in your voice, to run the DM assistant on your behalf, to answer support requests, to bill you, and to send you email. We don't sell your data and we don't use it to train any AI model. The assistant also reviews your own account's past conversations to adjust how it replies for you; what it learns stays in your account and is never shared with other accounts. We also use past conversations, under access controls, to test and tune our own prompts and checks.
We email you about your account and billing (verification codes, receipts, payment problems) and about your DM assistant (for example when it hands a conversation to you or runs out of replies). Some emails, such as reminders and weekly recaps, carry an unsubscribe link.
Support chat in the app is answered first by an AI assistant (Claude, by Anthropic). To help you, it reads your messages and any screenshots you attach, and it can read your plan, usage, settings and DM conversations and change settings you ask it to change. A person on our team handles anything it passes on, and no refund or cancellation is carried out unless a person approves it.
We also compute aggregated, de-identified statistics about how conversations perform across all accounts (for example, which reply strategies most often move a conversation toward a sale), and we use those statistics to improve the service for everyone. These statistics are counts and rates only. They never include message content, your products, your prompts, or anything that could identify you or the people you talk to, and a pattern is only used when it is supported by many separate accounts.
Why we may (EEA and UK). We use your account data to perform our contract with you, your usage and error records for our legitimate interest in running and securing the service, your email address for marketing with your consent or under the soft opt-in, and the conversations you connect on your instructions as your processor. We do not make decisions about you by automated means that have legal or similarly significant effects.
Canada and the United States, under those countries' laws.
We are in Canada and most of the services we use are in the United States. Your data is stored and processed in Canada and the United States, where it is subject to those countries' laws and may be accessible to their courts and authorities. For transfers out of the European Economic Area and the United Kingdom we rely on the European Commission's adequacy decision for Canada and, for our US providers, on standard contractual clauses or their Data Privacy Framework certification, as applicable.
For the life of your account plus a 30-day grace period after you delete it, with a short list of exceptions.
We keep account data, including the conversations the assistant handles and your usage records, for the life of your account. Public content we collect from Instagram and TikTok sits in a shared library that every user searches; a creator can ask us to remove theirs (section 9).
You can delete your account yourself at any time from Settings. Deleting cancels every subscription on the account, including an EverSell plan billed through Whop, and stops the DM assistant straight away. For the next 30 days you can restore the account from the banner at the top of either app or from ViralHunter Settings, or, for an EverSell plan bought through Whop, by starting a new plan; restoring does not bring the cancelled plan back. If you have invited teammates, remove them first; deleting the owner's account deletes the shared workspace. At the end of the 30 days we permanently remove your stored data, except for:
Encryption, limited staff access and a logged admin trail; and we tell you if a breach puts you at real risk.
Your data travels over encrypted connections and is stored encrypted at rest with our database provider; passwords are stored hashed, never in the clear. Affiliate payout details, and any Meta access token we hold, are encrypted with keys we keep separately. Staff access is limited to what running the service, answering support or fixing a problem needs, and admin actions are logged.
If a breach of our safeguards creates a real risk of significant harm to you, we notify you and the relevant regulator as the law requires, and we keep a record of every breach.
Delete your account yourself any time; email us for a copy, a correction or anything else, and we answer within 30 days.
You can delete your account and all associated data yourself, without asking us. Go to Settings and use the Delete account option at the bottom of the page.
Wherever you live, you can email privacy@viralhunter.app to:
In the European Economic Area and the United Kingdom you can also ask us to restrict processing, object to processing based on our legitimate interests, receive your data in a portable format, and complain to your local data protection authority. In Canada you can complain to the Office of the Privacy Commissioner of Canada, and in Quebec to the Commission d'accès à l'information. We answer within 30 days.
If you messaged a business that uses our assistant, or your public posts appear in ViralHunter, this is how to reach us.
If you connect an account, you are responsible for having a lawful basis to let the assistant read and answer the messages it receives and for telling those people what you need to tell them; we process their messages only on your instructions, and delete them with your account.
If you messaged a business that uses our assistant: the business you messaged uses our software to answer. We store the conversation for that business, send it to the AI services listed above to draft replies, and may quote it in alerts to the business. We do not use it for anything else and never sell it. To ask what we hold about you or to have it deleted, email privacy@viralhunter.app with the business's Instagram or Facebook name and yours; we answer within 30 days.
If you are a creator whose public posts appear in ViralHunter and you would rather they did not, email privacy@viralhunter.app with your handle; we stop tracking the account and remove its videos, transcripts and cover images.
ViralHunter is for adults.
ViralHunter is not directed at children. You must be at least 18, or the age of majority where you live if that is higher, to use it, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has given us personal information, email privacy@viralhunter.app and we'll delete it.
The creator affiliate program, the onboarding courses and partner referral links each collect a little more.
Creator affiliate program
If you join our creator affiliate program (on affiliate.viralhunter.app and the program sites linked from it), we also collect the Instagram accounts you tell us are yours and the public videos they post, the clicks and sales credited to your links (from Amazon's reports, UpPromote and the brands' Shopify stores), and the payout details you give us. Payout details are stored encrypted, and our staff decrypt them only to pay you. Order records we receive from UpPromote can include the buyer's email address; we use them only to credit your commission.
If you joined through one of our partners, that partner can see your email, Instagram handle, links, sales, commission, and which payout methods you have on file (never the payout details themselves).
Onboarding courses
If you are enrolled in one of our onboarding courses we store your course progress and share your email, name and progress with the student-success platform our team uses to follow up with students, studentsuccess.app.
Partner referral links
If you arrive through a partner's link (a web address with ?ref=), we set a first-party cookie for 90 days that records which partner sent you, and if you then join the creator program we record that on your account so the partner is credited. The partner sees what the creator affiliate program paragraph above describes, and nothing about anyone else.
Material changes come with 14 days' email notice, and the previous version stays readable.
If we change anything material, we'll email every active account at least 14 days before it takes effect, saying what changed and when. The date at the top of this page says when it last changed, and the version before it stays readable at /privacy/previous.
Email our Privacy Officer, or write to us; you can also complain to your privacy regulator.
Questions, requests and complaints about your data: email privacy@viralhunter.app, or write to our Privacy Officer at the address below. We aim to reply within one business day, and we answer requests within 30 days. Response targets are goals, not guarantees. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, to the Commission d'accès à l'information in Quebec, or to the data protection authority where you live.
Operated by
CONTENT CREATOR COACHING INC.
155 Commerce Valley Drive East, Thornhill, Ontario, L3T 7T2, Canada