Privacy Policy

1. What we collect

When you create an account, we collect your email address, name, and a hashed version of your password. If you sign in with Google, we receive your basic profile information (name, email, profile photo) from Google.

When you use the app, we store the Instagram and TikTok handles you choose to track, the videos those accounts post (collected via public scraping), the transcripts and analyses you generate, and the scripts you write. We do not collect anything you don't deliberately submit.

2. How we use it

We use your data to operate ViralHunter — to log you in, to fetch the videos you ask us to track, to generate transcripts and scripts in your voice, and to send you account-related email (verification, password reset, billing receipts). We don't sell your data and we don't use it to train any AI model.

3. Third-party services

We share data with these services strictly to provide the features you use:

• Anthropic Claude — generates analyses and scripts (sends them video metadata + transcripts; doesn't retain or train on the data per Anthropic's API terms).
• Apify — scrapes public Instagram/TikTok content (sends them the handles you choose to track).
• Resend — sends transactional email (verification codes, receipts).
• Vercel — hosts the app (sees standard request metadata: IP, user agent, page path).
• Neon — stores your account and content data (encrypted at rest).
• Stripe — processes payments (we never see your card number; Stripe handles all card data).

4. Cookies + analytics

We set a session cookie when you log in (required for authentication). We use Vercel Web Analytics to count anonymous pageviews and a small set of product events (signup completed, script generated, etc.) — no personal identifiers, no third-party cookies, no advertising network.

4a. How long we keep it

We keep account data for the life of your account. You can delete your account yourself at any time from Settings. Deletion takes effect after a 30-day grace period — during that window your subscription is canceled and your DM bot stops replying, and you can restore the account by signing in. At the end of the 30 days we permanently remove your stored data, except for:

• Billing records, which we retain for up to 7 years to comply with tax and accounting law.
• Server logs (IP, timestamp, route), which rotate out of our hosting provider after 30 days.
• Anonymized aggregate metrics (e.g. "active users this month"), which may be retained indefinitely with no personal identifiers.

4b. Children

ViralHunter is not directed at children. We do not knowingly collect data from anyone under 13 years old (or under the equivalent minimum age in your jurisdiction). If you believe a child has provided us with personal information, email privacy@viralhunter.app and we'll delete it.

5. Your rights

You can delete your account and all associated data yourself, without asking us — go to Settings and use the Delete account option at the bottom of the page.

Email privacy@viralhunter.app to:

• Export everything we have about you
• Correct anything that's wrong
• Delete your account, if you'd rather we did it for you

We'll respond within 30 days (usually within 7).

6. Changes

If we change anything material, we'll email every active account at least 14 days before it takes effect.

7. Contact

Questions? privacy@viralhunter.app