Privacy Policy

Last updated: 2026-05-30

1. Introduction

ViralFlow ("we", "us", or "our") operates the ViralFlow platform, a social media content management and scheduling tool. This Privacy Policy explains how we collect, use, store, and share information about you when you use our website and services (collectively, the "Service").

By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Information you provide directly

• Account registration data: email address, display name, and authentication credentials
• Business context: business name, industry, brand voice, and content goals you enter during setup
• Content you create: post drafts, captions, hashtags, media files, and scheduled content
• Communications: messages you send to us for support or feedback
• Payment information: billing details processed through third-party payment processors (we do not store card details)

2.2 Information collected automatically

• Authentication tokens and session identifiers
• Usage data: pages visited, features used, credit consumption, publish history, and actions taken
• Log data: IP address, browser type, operating system, referring URL, and timestamps
• Device and browser information for security and troubleshooting purposes

2.3 Third-party platform data

When you connect social media accounts (Facebook Pages, LinkedIn), we receive OAuth access tokens from those platforms. We store these tokens encrypted at rest (AES-256-GCM) and use them solely to perform actions you explicitly approve within the Service. We do not store your social media passwords.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and operate the Service, including generating content, scheduling posts, and publishing to connected accounts
• To personalise your experience based on your business context and usage patterns
• To communicate with you about your account, updates, support requests, and transactional information
• To process payments, manage subscriptions, and handle credit purchases
• To monitor and improve the quality, security, and reliability of the Service
• To detect, prevent, and address technical issues, fraud, and security threats
• To comply with legal obligations and enforce our Terms of Service

We do not sell your personal data to third parties. We may share your information only as described in this Privacy Policy.

4. Data Storage and Security

Your data is stored in secure cloud databases and storage services, protected by industry-standard security measures. Third-party access tokens are encrypted at rest using AES-256-GCM encryption before storage. Authentication is managed through secure authentication services — we never store your passwords in plain text.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. While we take commercially reasonable steps to secure your data, no method of transmission over the internet or electronic storage is 100% secure.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us at info@viralflow.ink. We will delete or anonymise your data within 30 days of your request, except where retention is required by law or for legitimate business purposes.

6. Third-Party Services

We use the following third-party services to operate the Service:

• Supabase — authentication, database, and real-time services
• Cloudflare — content delivery, hosting, and infrastructure services
• Facebook Graph API (Meta) — publishing to connected Facebook Pages
• LinkedIn API — publishing to connected LinkedIn accounts
• PayFast — payment processing services
• Resend — email delivery services
• AI/ML services — content generation and processing

Each of these services has its own privacy policy. We are not responsible for the practices of these third parties.

7. Cookies and Tracking

The Service uses browser local storage and session storage to maintain your authentication state and preferences. We may use cookies and similar technologies for essential functionality, security, and analytics purposes. We do not currently use tracking cookies or advertising cookies for third-party advertising.

8. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us immediately at info@viralflow.ink.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request access to the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Restriction: Request restriction of processing of your personal data
• Portability: Request transfer of your personal data to another service
• Objection: Object to processing of your personal data for certain purposes

To exercise any of these rights, contact us at info@viralflow.ink.

10. Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your personal data in accordance with this Privacy Policy and applicable data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. We will notify you of significant changes by updating the "Last updated" date above and, where appropriate, by sending you an email at the address associated with your account.

12. Legal Basis for Processing

Where required by applicable data protection laws, we process your personal data on the following legal bases: contractual necessity, legitimate interests, legal obligation, and consent.

13. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at info@viralflow.ink. For privacy-related inquiries specifically, please include "Privacy Inquiry" in your email subject line.