Privacy Policy

Privacy Policy

Effective date: June 16, 2026 · Last updated: June 16, 2026

Quick summary: ViralBlast collects only the data needed to operate your account and publish your content. We never sell your personal information. You can request deletion of your data at any time.

Welcome to ViralBlast ("we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our social media automation platform at viralblast.app and any related services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use immediately.

1. Information We Collect

1.1 Information You Provide

Account data: name, email address, password (hashed), profile photo, and billing information when you register or subscribe.

Social account credentials: OAuth tokens granted when you connect platforms such as Facebook, Instagram, TikTok, LinkedIn, X (Twitter), Pinterest, YouTube, Threads, Reddit, or WhatsApp Business. We store only access tokens — never your passwords.

Content you create: posts, images, captions, schedules, campaigns, and any media you upload for publishing.

Communications: support tickets, emails, or chat messages you send to us.

1.2 Information Collected Automatically

Usage data: pages visited, features used, actions taken within the dashboard, session duration, and click patterns.

Device and log data: IP address, browser type, operating system, referring URLs, and timestamps.

Cookies and similar technologies: session cookies for authentication, preference cookies, and analytics cookies (see Section 7).

1.3 Information from Third Parties

Social platform APIs: when you connect a channel, we receive profile information, follower counts, engagement metrics, and published content metadata as permitted by each platform's API terms.

Payment processors: Stripe, PayPal, Razorpay, and other processors we use return transaction IDs and masked card details. We do not store full card numbers.

2. How We Use Your Information

Provide, maintain, and improve the Service — Performance of contract
Authenticate your account and keep it secure — Performance of contract / Legitimate interests
Publish scheduled content to connected social channels on your behalf — Performance of contract
Process payments and manage subscriptions — Performance of contract
Send transactional emails (receipts, alerts, password resets) — Performance of contract
Send product updates and marketing emails (opt-out available) — Consent / Legitimate interests
Analyze usage patterns to improve features and performance — Legitimate interests
Comply with legal obligations — Legal obligation
Prevent fraud and abuse — Legitimate interests

We do not use your content or social data to train AI models, and we do not profile you for advertising purposes.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

Service providers: trusted vendors who help us operate the platform (cloud hosting, payment processors, transactional email, analytics). They process data only on our instructions and under strict confidentiality agreements.

Social media platforms: content and metadata you instruct us to publish is transmitted to the relevant platform APIs. Their own privacy policies govern data once received.

Team members you invite: when you add team members to your workspace, they can see content, channels, and analytics within the scope of their assigned role.

Business transfers: if ViralBlast is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you in advance.

Legal requirements: we may disclose information if required by law, court order, or to protect the rights, property, or safety of ViralBlast, our users, or the public.

4. Data Retention

Account data: retained until you delete your account, then purged within 30 days.
Published content records: retained for 12 months after publication to support analytics.
Billing records: retained for 7 years to comply with financial regulations.
Server logs: retained for 90 days then automatically deleted.

You may request early deletion at any time (see Section 6).

5. Security

TLS/HTTPS encryption for all data in transit.
AES-256 encryption for OAuth tokens and sensitive data at rest.
Role-based access controls and least-privilege principles for our internal team.
Regular security audits and vulnerability testing.
Two-factor authentication available for all accounts.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we commit to notifying you promptly in the event of a data breach that affects your personal information.

6. Your Rights and Choices

Access: request a copy of the personal data we hold about you.
Correction: update inaccurate or incomplete data via your account settings or by contacting us.
Deletion: request deletion of your account and associated personal data.
Portability: receive your data in a machine-readable format.
Objection / Restriction: object to or restrict certain processing activities.
Withdraw consent: opt out of marketing emails at any time via the unsubscribe link or account settings.

To exercise any right, email us at privacy@viralblast.app. We respond within 30 days. You will not be discriminated against for exercising your privacy rights.

7. Cookies

Strictly necessary — Session authentication, CSRF protection, load balancing — No, required for the Service to function
Functional — Remember your language and display preferences — Yes
Analytics — Measure feature usage and performance (self-hosted or privacy-first analytics) — Yes
Marketing — Not used on the core platform — N/A

You can manage cookie preferences through your browser settings or our cookie consent banner.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us personal information, we will delete it promptly. Contact us at privacy@viralblast.app.

9. International Data Transfers

ViralBlast operates globally. Your information may be transferred to and processed in countries other than your own. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or other lawful transfer mechanisms to protect your data when it crosses borders.

10. Third-Party Links and Integrations

The Service integrates with third-party platforms (social networks, payment gateways, AI providers). These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party service you connect to ViralBlast.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email or in-app notification at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

12. Contact Us

ViralBlast — Privacy Team
Email: privacy@viralblast.app
Website: viralblast.app

If you are located in the European Economic Area and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority.

© 2026 ViralBlast. All rights reserved.