Last updated: May 29, 2026
ViralRise ("we," "our," or "us") operates the viralrise.app platform and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using ViralRise, you agree to the data practices described in this policy. If you do not agree, please discontinue use of the Service.
We collect the following categories of information: a) Information you provide directly: • Email address and password (for account creation) • Business website URL (to generate content) • Payment information (processed by Gumroad — we do not store card details) b) Information collected automatically: • Usage data: pages visited, features used, content generated • Log data: IP address, browser type, referring URLs, timestamps • Session data stored in your browser (sessionStorage) c) Information from third-party integrations (when you connect accounts): • Instagram: account username, user ID, access token, follower count, media count, profile avatar • TikTok: Open ID, username, access token, follower count, profile avatar We collect only the minimum data necessary to provide our Service.
We use your information solely to provide and improve the ViralRise Service: • Analyze your business website to create relevant marketing content • Generate product photos and marketing videos on your behalf • Publish content to your connected social media accounts (Instagram, TikTok) only when you explicitly request it • Maintain your account and subscription • Send transactional emails (receipts, service notifications) • Comply with legal obligations We do NOT use your data for advertising. We do NOT sell your personal information to any third party.
When you connect your TikTok account to ViralRise, we request the following permissions (scopes): • user.info.basic — to display your TikTok username and profile in the app • user.info.stats — to display your follower count in the dashboard • video.upload — to upload marketing videos to your TikTok account • video.publish — to publish uploaded videos to your TikTok profile Data we receive from TikTok: • Open ID (anonymous user identifier) • Username and profile avatar URL • Follower count • Access token and refresh token (stored encrypted in our database) How we use this data: • We use your TikTok credentials exclusively to post content you generate and approve within ViralRise • We do NOT access your TikTok inbox, followers list, or any content beyond what is required for publishing • We do NOT share your TikTok data with any third parties • We do NOT use TikTok data for advertising or analytics beyond our own Service Our use of TikTok API data complies with TikTok's Developer Terms of Service and Developer Data Sharing Agreement.
When you connect your Instagram account, we request the following permissions: • instagram_business_basic — to display your username and profile info • instagram_business_content_publish — to publish photos and Reels to your account Data we receive from Meta/Instagram: • Instagram User ID, username, profile avatar • Access token (stored encrypted in our database) • Follower count and media count We use this data exclusively to publish content you explicitly approve. Our use complies with Meta's Platform Terms and Developer Policies.
Your data is stored in Supabase (PostgreSQL database hosted on AWS). We implement the following security measures: • Encryption in transit (TLS 1.2+) for all data transfers • Access tokens stored in encrypted form • Row-level security (RLS) policies — users can only access their own data • No plaintext storage of passwords (handled by Supabase Auth) Despite these measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
We retain your data as follows: • Account data: retained while your account is active • Generated content URLs: retained for 12 months • Social media tokens: retained until you disconnect the account or delete your account • Post history: retained for 12 months Disconnecting a social account: If you disconnect your Instagram or TikTok account from the Connect Accounts page, we immediately delete your stored access tokens and account data for that platform from our database. Account deletion: To request full deletion of your account and all associated data, email us at privacy@viralrise.app. We will complete deletion within 30 days and confirm via email. You may also revoke ViralRise's access to your TikTok account at any time directly through TikTok's app settings under "Manage App Permissions."
We use the following third-party services to operate ViralRise: • Supabase — database and authentication (supabase.com/privacy) • Vercel — hosting and serverless functions (vercel.com/legal/privacy-policy) • Vercel Blob — media file storage • OpenAI — AI content generation (openai.com/privacy) • Replicate — AI video and image generation (replicate.com/privacy) • Gumroad — payment processing (gumroad.com/privacy) • Meta Graph API — Instagram publishing (privacycenter.fb.com) • TikTok Content Posting API — TikTok publishing (tiktok.com/legal/privacy-policy) Each provider has its own privacy policy. We share only the minimum data required for each provider to perform their function.
Depending on your location, you have the following rights regarding your personal data: • Access: Request a copy of the data we hold about you • Correction: Request correction of inaccurate data • Deletion: Request deletion of your account and data • Portability: Receive your data in a structured, machine-readable format • Withdrawal of consent: Disconnect social accounts or delete your account at any time California residents (CCPA): You have the right to know what data is collected, opt out of data sale (we do not sell data), and request deletion. EU/EEA residents (GDPR): You have the right to lodge a complaint with your local data protection authority. Instagram data: You can delete the data we store for a connected Instagram account at any time — by removing ViralRise from your Instagram account, disconnecting it in your dashboard, or following the steps at https://viralrise.app/data-deletion. To exercise any right, contact: privacy@viralrise.app
We use the following browser storage: • Session cookies: Required for authentication (Supabase Auth) • sessionStorage: Temporarily stores social media tokens during your session — cleared when you close the browser tab • No third-party advertising cookies We do not use cookies for advertising or cross-site tracking.
ViralRise is intended for business use and is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, contact us at privacy@viralrise.app and we will delete it immediately.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via email. Continued use of the Service after changes constitutes acceptance of the updated policy.
For questions, data requests, or privacy concerns: ViralRise Email: privacy@viralrise.app Website: https://viralrise.app We respond to all privacy inquiries within 5 business days.