Go ViralPrivacy Policy
1. Introduction
This Privacy Policy explains what personal data Go Viral collects, how and why we use it, who we share it with, and the rights you have over it. It applies to your use of the Go Viral multi-platform video distribution service (the "Service").
We aim to collect only what we need to run the Service and to be transparent about how it is used. This policy forms part of, and should be read alongside, our Terms of Service.
2. Who We Are
Go Viral ("we", "us", "our") is the data controller responsible for your personal data. We operate the Service from Bolton, England, United Kingdom.
For any privacy question, or to exercise your rights, contact us at jack.willo1122@gmail.com.
3. Data We Collect
- Account information — your name, email address, and password (stored only as a secure hash).
- Video data — the videos you upload and their metadata (captions, hashtags, thumbnails, dimensions, duration).
- Platform credentials — the access and refresh tokens for the social platforms you connect (YouTube, TikTok, Instagram), stored encrypted at rest.
- Analytics data — performance metrics for your posts (views, likes, engagement) retrieved from connected platforms.
- Billing information — subscription plan, billing status, and payment identifiers. Full card details are handled by Stripe and are not stored on our servers.
- Usage, device, and log data — such as IP address, browser and device type, pages viewed, and actions taken, collected to operate and secure the Service.
4. How We Use Data
- To provide and operate the Service, including publishing your videos to the platforms you connect;
- To authenticate you, keep your account secure, and prevent fraud and abuse;
- To process subscriptions, payments, and billing;
- To produce analytics about your content's performance;
- To send you service-related communications, notifications, and support responses;
- To improve, develop, and troubleshoot the platform;
- To comply with our legal and regulatory obligations.
5. Legal Bases for Processing
Under the UK GDPR and EU GDPR, we rely on the following legal bases to process your personal data:
- Contract — to provide the Service you have signed up for, including publishing your videos and managing your subscription.
- Legitimate interests — to secure, improve, and develop the Service and prevent abuse, balanced against your rights.
- Legal obligation — to keep financial records and comply with applicable law.
- Consent — for non-essential cookies and any optional communications; you can withdraw consent at any time.
6. Third Parties & Processors
We share personal data only as needed to run the Service, with the following categories of recipient:
- The social platforms you connect (YouTube, TikTok, Instagram), to publish your videos and retrieve analytics at your instruction.
- Stripe — our payment processor, to process subscriptions and payments.
- Resend — our email service, to deliver transactional and account emails.
- Supabase — our database and hosting provider (PostgreSQL), where account and content data is stored.
These providers act as our processors under contract and may only use your data to provide services to us. We may also disclose data where required by law or to protect our rights. We do not sell your personal data.
7. International Data Transfers
Some of our providers process data outside the United Kingdom and European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards — such as UK adequacy regulations, the UK International Data Transfer Addendum, or the EU Standard Contractual Clauses — to ensure your data receives an equivalent level of protection.
8. Data Security
- All traffic is encrypted in transit using HTTPS.
- Passwords are hashed and never stored in plain text.
- Platform access tokens are encrypted at rest (AES-256-GCM).
- Access to production data is restricted and logged.
- We review our systems and dependencies for security issues on an ongoing basis.
9. Data Retention
- We keep your personal data for as long as your account is active.
- You can delete your account and data at any time from your account settings.
- After deletion, we apply a 30-day grace period before data is permanently removed, except where longer retention is required by law (for example, financial and tax records).
- Disconnecting a platform revokes our access to it; tokens for that platform are deleted.
10. Your Rights (UK/EU GDPR)
If you are in the UK, EU, or EEA, you have the following rights over your personal data:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request deletion of your data ("right to be forgotten").
- Restriction — ask us to limit how we process your data.
- Portability — receive your data in a portable, machine-readable format.
- Objection — object to processing based on our legitimate interests.
- Withdraw consent — where we rely on consent, withdraw it at any time.
To exercise any of these rights, contact us at jack.willo1122@gmail.com. We will respond within the time required by law (generally one month).
12. Children's Privacy
The Service is not intended for anyone under 18, and you must be at least 18 to use it. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at jack.willo1122@gmail.com and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
14. Contact & Complaints
For privacy questions or to exercise your data rights, contact us:
- Email: jack.willo1122@gmail.com
- Location: Bolton, England, United Kingdom
If you are in the UK and believe we have not handled your data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EU/EEA, you may complain to your local supervisory authority. We would appreciate the chance to address your concerns first.