Privacy Policy

1. Introduction

Welcome to Viralance. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered video generation platform ("Service"). Please read this privacy policy carefully.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use the Service.

We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

2.1 Information You Provide

Account Information: When you register using Google Authentication, we collect:

• Email address
• Display name
• Profile photo URL (from Google)
• Google User ID

Content Data: When you use our video generation service, we collect:

• Video prompts and descriptions you submit
• Video captions you create
• Model selection (VEO 3 or SORA 2)
• Video duration preferences (4-12 seconds)
• Generated video files and metadata

TikTok Connection Data: When you connect your TikTok account, we collect:

• TikTok Open ID and Union ID
• TikTok username and display name
• Profile picture URL
• Account statistics (followers, likes, video count)
• OAuth access tokens and refresh tokens
• Verification status

Payment Information: Payment data is processed by Stripe and includes:

• Credit package purchased
• Transaction amount and date
• Stripe Customer ID (we do NOT store credit card details)

2.2 Automatically Collected Information

Usage Data: We automatically collect:

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Pages visited and features used
• Time and date of access
• Time spent on pages
• Referring website addresses

Technical Data: We collect:

• Firebase Authentication session data
• API request logs and error reports
• Performance metrics (video generation time, success rates)
• Credit usage history

2.3 Information from Third Parties

We may receive additional information from:

• Google: Profile information when you sign in with Google
• TikTok: Profile and account statistics when you connect your TikTok account
• Stripe: Payment confirmation and transaction details

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 To Provide and Maintain the Service

• Authenticate your account and manage sessions
• Generate AI videos based on your prompts
• Store and display your generated videos
• Post videos to TikTok on your behalf
• Process credit purchases and manage your balance
• Send service-related notifications and updates

3.2 To Improve Our Service

• Analyze usage patterns and trends
• Monitor performance and fix technical issues
• Develop new features and improve existing ones
• Conduct research on AI video generation quality
• Optimize credit pricing and model selection

3.3 For Security and Fraud Prevention

• Detect and prevent fraudulent transactions
• Protect against abuse and violations of Terms of Service
• Ensure account security and prevent unauthorized access
• Comply with legal obligations and enforce our policies

3.4 For Communication

• Send important service announcements
• Notify you about account activity
• Respond to your inquiries and support requests
• Send promotional emails (with your consent, you can opt out anytime)

4. Data Sharing and Third-Party Services

We do not sell your personal information. We may share your information with the following third-party service providers:

4.1 Firebase (Google Cloud)

Purpose: Authentication, database, hosting, and cloud functions

Data Shared: Account information, video metadata, usage data

Privacy Policy: firebase.google.com/support/privacy

Data Location: United States (us-central1 region)

4.2 FAL.AI

Purpose: AI video generation (VEO 3 and SORA 2 models)

Data Shared: Video prompts, model preferences, duration settings

Privacy Policy: fal.ai/privacy

Note: Generated videos are processed by FAL.AI and returned to our servers. FAL.AI may use anonymized data for model improvement.

4.3 TikTok

Purpose: OAuth authentication and video posting

Data Shared: Video files, captions, OAuth tokens

Privacy Policy: tiktok.com/legal/privacy-policy

Note: When you connect TikTok, you authorize us to post videos on your behalf. TikTok will process your videos according to their own privacy policy.

4.4 Stripe

Purpose: Payment processing for credit purchases

Data Shared: Transaction amounts, Stripe Customer ID, email

Privacy Policy: stripe.com/privacy

Note: We do NOT store your credit card information. All payment data is securely processed by Stripe.

4.5 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government investigations).

4.6 Business Transfers

If Viralance is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Storage and Security

5.1 Where We Store Your Data

Your data is stored in secure servers provided by:

• Firebase Firestore: User accounts, video metadata, TikTok tokens (us-central1 region)
• Firebase Authentication: Login sessions and credentials
• FAL.AI Storage: Generated video files (temporary storage during generation)

5.2 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (Firebase encryption)
• Secure OAuth 2.0 authentication with CSRF protection
• Firebase Security Rules for database access control
• Automatic token refresh and expiration management
• Regular security audits and monitoring
• Secure secret management (Google Cloud Secret Manager)

5.3 Data Security Limitations

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

You are responsible for:

• Keeping your Google account credentials secure
• Not sharing your account access with others
• Logging out from shared or public devices
• Notifying us immediately if you suspect unauthorized access

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

6.1 Access and Portability

• Right to Access: Request a copy of the personal data we hold about you
• Right to Data Portability: Receive your data in a structured, machine-readable format

6.2 Correction and Deletion

• Right to Rectification: Update incorrect or incomplete information in your Settings page
• Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal data

6.3 Restriction and Objection

• Right to Restriction: Request that we limit how we use your data
• Right to Object: Object to processing of your data for certain purposes (e.g., marketing)

6.4 TikTok Connection

• You can disconnect your TikTok account at any time from Settings page
• Disconnecting will revoke Viralance's access to your TikTok account
• Your TikTok OAuth tokens will be deleted from our servers

6.5 Marketing Communications

• Opt out of promotional emails by clicking "Unsubscribe" in any email
• You will still receive essential service-related emails (payment confirmations, security alerts)

6.6 How to Exercise Your Rights

To exercise any of these rights, please contact us at info@alimertgulec.com with:

• Your full name and email address associated with your account
• Description of the right you wish to exercise
• Any additional information needed to verify your identity

We will respond to your request within 30 days. Some requests may take longer depending on complexity and legal requirements.

7. Cookies and Tracking Technologies

7.1 What Cookies We Use

We use cookies and similar tracking technologies to track activity on our Service:

• Essential Cookies: Required for authentication and basic functionality (Firebase session cookies). These cannot be disabled without preventing use of the Service.
• Analytics Cookies: Help us understand how users interact with the Service (if we implement analytics in the future).

7.2 Third-Party Cookies

Third-party services may set cookies:

• Google/Firebase: Authentication and session management
• Stripe: Payment processing and fraud prevention

7.3 Managing Cookies

You can control cookies through your browser settings. However, disabling essential cookies may prevent you from using the Service.

8. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18.

If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us at info@alimertgulec.com. If we discover that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ.

Data Locations:

• Firebase: United States (us-central1 region)
• FAL.AI: Various regions depending on model availability
• Stripe: Processes data globally with appropriate safeguards

By using the Service, you consent to the transfer of your information to the United States and other countries. We ensure appropriate safeguards are in place when transferring data internationally.

9.1 GDPR Compliance (EU Users)

If you are in the European Economic Area (EEA), we comply with GDPR requirements:

• Data is transferred based on Standard Contractual Clauses (SCCs)
• You have all rights outlined in Section 6 (Your Rights and Choices)
• You can file a complaint with your local data protection authority

9.2 CCPA Compliance (California Users)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do NOT sell your data)
• Right to non-discrimination for exercising your CCPA rights

10. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account Information: Retained until you delete your account, plus 30 days for backup deletion
• Generated Videos: Retained while your account is active and accessible in your dashboard
• TikTok Tokens: Retained until you disconnect your TikTok account or tokens expire
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Logs: Retained for 90 days for troubleshooting and analytics
• Inactive Accounts: Accounts with no activity for 24 months may be deleted with 60 days' notice

After the retention period, we will delete or anonymize your personal data. Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud prevention).

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top
• Sending an email notification for significant changes
• Displaying a prominent notice in the dashboard (for material changes)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days. For urgent security concerns, please mark your email as "URGENT: Security Issue" in the subject line.