Privacy Policy

Last updated: 2025-05-22

1. Information we collect

We collect your email address, display name, and business context you provide during onboarding. We also collect usage data (generation counts, publish history) to operate the service.

2. Social platform tokens

When you connect Facebook or LinkedIn, ViralFlow stores your platform access tokens in AES-256-GCM encrypted form in our database. These tokens are never exposed to the browser and are only decrypted server-side at publish time.

3. How we use your information

• To generate AI social media content using your business context
• To schedule and publish posts to connected platforms on your behalf
• To send transactional emails (authentication, receipts)
• To operate and improve the ViralFlow service

4. Data retention

We retain your data for as long as your account is active. You can request deletion by emailing us at privacy@viralflow.ink.

5. Third-party services

We use Supabase (database and auth), Cloudflare (hosting, CDN, storage), Alibaba Cloud DashScope (AI generation), and Resend (email). We use PayFast for payment processing — we do not store card details.

6. Contact

For privacy inquiries: privacy@viralflow.ink