Privacy Policy

1. Introduction

ViralSignal ("the Platform", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform and services. By using ViralSignal, you agree to the data practices described in this policy.

2. Data We Collect

We may collect the following types of data:

• Contact information: Email address (when you join the waitlist or create an account)
• Account information: Display name, language preference, market selection (TW/HK)
• Usage data: Pages visited, features used, generation history, timestamps, and interaction patterns — collected to improve the service
• Device data: Browser type, operating system, IP address (anonymized), screen resolution — collected automatically for analytics
• Payment data: Processed securely by Stripe. We do not store your credit card number, CVV, or full card details on our servers
• Threads public data: Publicly available Threads posts accessed via the official Meta Threads API, used solely for aggregated trend analysis. We do not access private messages, non-public content, or private user profiles

3. How We Use Your Data

We use the data we collect for the following purposes:

• To provide, operate, and improve the ViralSignal platform
• To send product launch notifications and early-bird offers (waitlist subscribers)
• To analyze publicly available Threads post trends for content pattern research
• To personalize your content generation experience based on your creator profile
• To process payments and manage subscriptions
• To provide customer support
• To comply with legal obligations

4. Meta Threads API Data Usage

ViralSignal uses the Meta Threads API to access publicly available post data for content trend analysis. Our commitments regarding Threads data:

• We only access publicly visible Threads posts via the official API
• We do not store personally identifiable information of Threads users
• We do not access private messages, non-public posts, or protected content
• Search results are used only for aggregated trend analysis, never to target specific individuals
• We do not sell, rent, or share Threads data with any third party
• All data usage complies with the Meta Platform Terms and Meta Developer Policy
• Cached Threads data is refreshed periodically and old data is purged within 30 days

5. Data Sharing & Third-Party Services

We do not sell your personal data. We share data only with the following service providers, strictly for the purposes of operating our platform:

• Google Sheets: Waitlist data collection and management
• Supabase: Database hosting and authentication
• Vercel: Website hosting and deployment
• Stripe: Payment processing
• Anthropic (Claude API): AI-powered content analysis and generation
• OpenAI: Text embedding generation for semantic search
• Meta Threads API: Public post data access for trend analysis

Each provider has its own privacy policy. We encourage you to review them.

6. Data Storage & Security

Your data is stored on secure cloud servers provided by Supabase and Vercel, using industry-standard encryption (TLS in transit, AES-256 at rest). We implement the following security measures:

• All API communications are encrypted via HTTPS/TLS
• Database access is restricted via role-based access controls
• API keys and secrets are stored in environment variables, never in source code
• Payment data is handled entirely by Stripe (PCI DSS compliant) and never touches our servers
• We conduct periodic security reviews of our codebase and infrastructure

7. Data Retention & Deletion

We retain your data only as long as necessary to provide our services or as required by law.

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Waitlist data: Retained until product launch or until you request removal.
• Usage analytics: Anonymized and retained for up to 12 months.
• Threads cached data: Refreshed periodically; old entries purged within 30 days.

8. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (see Section 7 above)
• Portability: Request your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link in any email
• Withdraw consent: Withdraw consent for data processing at any time

To exercise any of these rights, email viralsignalapp@gmail.com. We will respond within 30 days.

9. Cookies

We use essential cookies to ensure the platform functions correctly, and analytics cookies to understand usage patterns. You can manage cookie preferences in your browser settings. We do not use cookies for advertising or cross-site tracking.

10. Children's Privacy

ViralSignal is not intended for users under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.

11. Legal Compliance

This Privacy Policy is designed to comply with applicable data protection regulations, including but not limited to Taiwan's Personal Data Protection Act (PDPA) and Hong Kong's Personal Data (Privacy) Ordinance (PDPO). We may disclose personal data if required to do so by law, regulation, or valid legal process.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify users via email or a prominent notice on the platform. The "Last updated" date at the top of this page indicates when this policy was last revised.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: