Privacy Policy

1. Introduction

This Privacy Policy explains how ViraFlow ("ViraFlow", "we", "us", or "our") collects, uses, stores, and shares information when you visit https://viraflow.org/, create an account, analyze videos, upload content, purchase credits or subscriptions, or use any related ViraFlow services.

ViraFlow helps creators analyze short-form videos from TikTok, Instagram Reels, YouTube, or uploaded files, then turn the analysis into reusable scripts, shot breakdowns, prompt drafts, structured manifests, and AI video or image generation workflows.

By using ViraFlow, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you create or manage an account, we may collect:

• Name or display name
• Email address
• Profile image, if provided by you or an authentication provider
• Login method, authentication identifiers, and account status
• Account preferences, language settings, and security-related metadata

We use this information to create and secure your account, keep you signed in, send service messages, and provide support.

2.2 Video Inputs and User Content

When you use ViraFlow, you may submit:

• TikTok, Instagram Reel, YouTube, or other supported video URLs
• Uploaded video files
• Titles, captions, creator names, cover images, or source metadata
• Prompts, instructions, generation settings, and edited drafts
• Generated analysis results, prompt drafts, raw manifests, normalized results, images, videos, and task outputs

We process this content to provide the core Service, including video source resolution, AI analysis, result display, prompt drafting, credit accounting, task history, and follow-up generation workflows.

You are responsible for ensuring that you have the necessary rights and permissions to upload or submit any content to ViraFlow.

2.3 Usage and Task Data

We collect information about how the Service is used, including:

• Pages and features visited
• Analysis and generation task status
• Source platform, input type, provider, model, and processing metadata
• Credit consumption, credit grants, subscription status, and billing events
• Error codes, diagnostic logs, fraud prevention signals, and abuse-prevention events

We use this information to operate the Service, improve reliability, prevent misuse, calculate credits, troubleshoot failed tasks, and maintain billing records.

2.4 Device, Log, and Technical Information

We may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Referring pages, timestamps, and request logs
• Approximate location derived from IP address
• Cookie identifiers and session identifiers

We use this information for security, analytics, product improvement, localization, fraud prevention, and service operations.

2.5 Payment and Billing Information

When you purchase a subscription or credits, payment information is processed by our payment providers, including Creem, Stripe, PayPal, or other supported providers shown at checkout.

We may receive and store limited billing information, such as:

• Payment provider
• Order number, subscription number, transaction ID, and payment session ID
• Payment status, amount, currency, plan name, credits granted, and billing interval
• Billing email and receipt metadata
• Refund, cancellation, dispute, or chargeback status

We do not store complete credit card numbers, CVV codes, or full payment credentials on our servers.

3. How We Use Information

We use the information we collect to:

• Provide, operate, and improve ViraFlow
• Analyze videos and generate structured analysis results
• Create prompt drafts, raw manifests, and normalized result pages
• Enable AI video, image, and related generation workflows
• Authenticate users and protect accounts
• Process purchases, subscriptions, credits, refunds, receipts, taxes, and billing support
• Detect, prevent, and investigate fraud, abuse, spam, policy violations, and security incidents
• Enforce our Terms of Service and Acceptable Use Policy
• Provide customer support and respond to inquiries
• Send transactional emails, such as login, billing, security, support, and service notices
• Analyze usage trends and improve performance, reliability, and user experience
• Comply with legal, tax, accounting, and regulatory obligations

4. AI Processing and Third-Party Providers

To provide video analysis and generation features, we may send relevant user inputs and task data to third-party service providers, including AI model providers, video source processing providers, storage providers, payment providers, authentication providers, analytics providers, email providers, and hosting infrastructure providers.

Depending on the feature used, these providers may include services such as Google AI/Gemini, OpenAI, Kie, Replicate, Fal, Cloudflare, Vercel, Creem, Stripe, PayPal, Better Auth related infrastructure, Resend, Google OAuth, GitHub OAuth, Google Analytics, OpenPanel, or similar providers configured for the Service.

We share only the information reasonably necessary for the provider to perform services for us. Third-party providers process information according to their own privacy policies and contractual terms.

AI outputs may be probabilistic and may not be accurate, complete, or suitable for every use case. Do not submit confidential, sensitive, regulated, or highly personal information unless you have the right to do so and accept the processing involved.

5. Cookies and Similar Technologies

ViraFlow uses cookies and similar technologies to:

• Keep you signed in
• Maintain session security
• Remember preferences such as language or interface settings
• Capture referral or UTM information
• Support payments, subscriptions, and checkout flows
• Measure usage, diagnose performance, and improve the Service

Some cookies are essential for the Service to work. Analytics or preference cookies may be controlled through your browser settings or, where available, cookie consent tools. If you block essential cookies, account login, payment, subscription management, and paid features may not work correctly.

Third-party services, such as authentication providers, analytics providers, payment providers, and customer support tools, may set their own cookies when you interact with their features.

6. How We Share Information

We do not sell your personal information. We may share information in the following situations:

• Service providers: with vendors who help us provide hosting, storage, AI processing, authentication, analytics, email, customer support, payments, fraud prevention, and infrastructure.
• Payment and tax processing: with payment providers or merchant-of-record providers to process checkout, subscriptions, refunds, taxes, receipts, disputes, and compliance requirements.
• Legal compliance: when required by law, legal process, regulation, court order, or government request.
• Safety and enforcement: to protect ViraFlow, users, third parties, or the public from fraud, abuse, security threats, illegal activity, or policy violations.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, asset sale, or similar transaction.
• With your direction: when you ask us to share information or connect ViraFlow with another service.

7. Data Retention

We keep information for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, resolve disputes, enforce agreements, and maintain billing records.

Typical retention considerations include:

• Account information is kept while your account remains active.
• Billing, tax, refund, and transaction records may be kept as required by accounting and legal obligations.
• Analysis tasks, uploaded videos, generated outputs, raw manifests, prompt drafts, and normalized results may be kept so you can access task history and continue workflows.
• Logs and security records may be kept for fraud prevention, diagnostics, and abuse investigation.

You may request deletion of your account or certain personal information by contacting us. Some information may be retained where required by law, payment compliance, fraud prevention, dispute handling, or legitimate business needs.

8. Security

We use reasonable administrative, technical, and organizational measures to protect information, including access controls, authentication, encryption in transit where appropriate, logging, and provider-level security protections.

No internet service, storage system, or transmission method is completely secure. We cannot guarantee absolute security, and you are responsible for keeping your account credentials safe.

9. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access personal information we hold about you
• Correct inaccurate information
• Delete certain information
• Object to or restrict certain processing
• Request data portability
• Withdraw consent where processing is based on consent
• Opt out of certain analytics or marketing communications

To make a privacy request, contact us at support@viraflow.org. We may need to verify your identity before completing your request.

10. International Processing

ViraFlow may process and store information in countries other than your own. These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.

11. Children's Privacy

ViraFlow is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

Users must also comply with our Terms of Service, including restrictions on content involving minors.

12. Third-Party Links and External Platforms

The Service may include links to third-party websites or process content from third-party platforms such as TikTok, Instagram, and YouTube. We are not responsible for the privacy practices, content, or terms of those third-party platforms. Your use of those platforms is governed by their own terms and policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "updated_at" date above or provide additional notice when required by law. Your continued use of ViraFlow after changes become effective means you accept the updated policy.

14. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, contact us:

ViraFlow
Website: https://viraflow.org/
Email: support@viraflow.org
Subject line: Privacy Request

We aim to respond to user support and privacy requests within 3 business days where practicable.