Privacy Policy

Viralo ("we", "us", "our") is operated by NilpachStudio. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application at viralo.studio (the "Service").

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile picture via our authentication provider (Clerk). We do not store your password.

Usage Data

We automatically collect:

• Pages visited and features used (via PostHog analytics)
• Device type, browser, and operating system
• IP address (anonymized for analytics)
• Error reports (via Sentry, for debugging)

Content You Provide

• Video URLs you submit for analysis
• Video files you upload
• Scripts you create and edit
• Feedback and ratings you provide

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To process video analyses and generate scripts
• To manage your account and subscription
• To send transactional emails (account, billing)
• To monitor and fix errors and performance issues
• To comply with legal obligations

3. Third-Party Services

We use the following third-party services that may process your data:

• Clerk — Authentication (stores login credentials)
• Stripe — Payment processing (stores payment details)
• Supabase — Database hosting (EU region)
• Cloudflare R2 — File storage (uploaded videos)
• Anthropic (Claude) — AI analysis (video content is sent for processing)
• OpenAI (Whisper) — Audio transcription
• PostHog — Product analytics (EU-hosted)
• Sentry — Error monitoring (EU-hosted)
• Vercel — Application hosting

4. Cookies and Tracking

We use essential cookies required for the Service to function (authentication, session). Analytics cookies (PostHog) are only set with your consent. You can manage your cookie preferences at any time via the cookie banner or by contacting us.

5. Data Retention

• Account data is retained while your account is active
• Uploaded video files are automatically deleted after processing (within 24 hours)
• Analysis results are retained until you delete them or your account
• Analytics data is retained for up to 12 months

6. Your Rights (GDPR / EEA)

If you are in the European Economic Area, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate personal data
• Erasure — Request deletion of your personal data
• Restriction — Restrict processing of your personal data
• Portability — Receive your data in a portable format
• Objection — Object to processing based on legitimate interests
• Withdraw consent — Withdraw consent for analytics cookies at any time

To exercise these rights, contact us at privacy@viralo.studio. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls. However, no method of transmission over the Internet is 100% secure.

8. International Transfers

Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

9. Children

The Service is not intended for users under 16 years of age. We do not knowingly collect data from children.

10. Changes

We may update this policy from time to time. We will notify you of material changes via email or a notice on the Service.

11. Contact

For privacy-related inquiries, contact us at privacy@viralo.studio.