Privacy Policy

1. Who we are

ViraLab AI provides tools for creating, managing, downloading, and publishing AI-assisted ecommerce images and videos. References to “ViraLab AI”, “we”, “us”, or “our” in this policy refer to the operator of the ViraLab AI service.

For privacy questions or requests, contact privacy@viralabai.com.

2. Information we collect

• Account information: email address, display name, profile image, authentication identifiers, and account preferences.
• Creative content: prompts, task names, product or reference images, generated images and videos, generation settings, and related metadata.
• Usage information: feature activity, generation status, credit activity, timestamps, errors, and security or diagnostic logs.
• Payment information: purchased pack, payment status, Stripe customer or checkout references, and transaction history. Stripe processes payment-card details; we do not store complete card numbers.
• TikTok information: when you connect TikTok, we may receive your TikTok account identifier, username, display name, avatar, granted permissions, creator settings, encrypted access and refresh tokens, and publication status.
• Technical information: IP address, browser or device information, request metadata, and cookies required for authentication and security.

3. How we use information

• Authenticate users, maintain sessions, and protect accounts.
• Store reference assets and run requested image or video generations.
• Display generation history, process downloads, and create variations.
• Calculate credit balances, fulfil purchases, issue generation refunds, and prevent duplicate transactions.
• Connect a TikTok account and publish only after the user reviews the settings and explicitly confirms the post.
• Operate, troubleshoot, secure, analyse, and improve the service.
• Comply with legal obligations and enforce our Terms of Service.

4. TikTok data and publishing

Connecting TikTok is optional. We use TikTok account data and tokens only to provide the connection, retrieve current publishing capabilities, submit content you explicitly approve, and check publication status. We do not receive or store your TikTok password.

Before publishing, ViraLab AI asks you to review the destination account, caption or title, privacy level, interaction settings, commercial-content disclosures, and final consent. TikTok applies its own terms, privacy policy, review processes, and platform restrictions to every post.

You can revoke ViraLab AI access from your TikTok account settings. Revocation prevents future publishing but does not remove content already posted to TikTok.

5. When we share information

We share information only as needed to operate the service, including with:

• Supabase for authentication, database, and storage services.
• Vercel for application hosting and delivery.
• Trigger.dev for background generation jobs.
• fal.ai and underlying model providers for processing submitted prompts and reference media.
• Stripe for checkout and payment fulfilment.
• Google when you choose Google authentication.
• TikTok when you connect an account or request publication.
• Professional advisers, authorities, or other parties when required by law, security, fraud prevention, or a business transfer.

We do not sell personal data.

6. Legal bases

Where UK or European data-protection law applies, we process data to perform our contract with you, pursue legitimate interests in operating and securing the service, comply with legal obligations, and obtain consent where required. You may withdraw consent for optional connections, but this does not affect earlier lawful processing.

7. Storage, security, and international transfers

We use access controls, Row Level Security, restricted server credentials, encrypted transport, and encryption for stored TikTok tokens. No online service can guarantee absolute security. Our service providers may process data in countries outside your own; where required, we rely on appropriate contractual or legal transfer safeguards.

8. Retention

We retain account and creative data while your account is active or as needed to provide the service. TikTok tokens are retained until disconnection, revocation, account deletion, or expiry. Transaction records may be retained for accounting, fraud-prevention, and legal requirements. Security logs are retained only as reasonably necessary for operations and investigation. We may retain limited records after deletion where required by law or to resolve disputes.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data; object to certain processing; withdraw consent; and complain to a supervisory authority. Contact privacy@viralabai.com to make a request. We may need to verify your identity before acting.

10. Cookies

ViraLab AI uses essential cookies and similar storage for authentication, session security, OAuth state, and account preferences. These are necessary for signed-in features to function. We will provide additional controls before introducing non-essential advertising or cross-site tracking cookies.

11. Children

The service is intended for business users aged 18 or older and is not directed to children. Contact us if you believe a child has provided personal data.

12. Changes to this policy

We may update this policy as the service or legal requirements change. We will update the date above and provide additional notice when a material change requires it.