Privacy Policy

Account data. Your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google. We never see your Google password.

Subscription and billing data. Your plan, trial and billing period dates, subscription status and a subscription reference from our payment provider. Card and payment details are entered directly with Dodo Payments; we do not receive or store your full card number.

Service data. The Instagram and TikTok accounts you choose to track, video links you submit for analysis, the analyses and alerts we generate for you, and your usage of plan limits.

Telegram data. If you connect Telegram for alerts, we store the Telegram chat ID needed to send you messages.

Support data. Messages and details you send us through support tickets or email.

Technical data. Session cookies that keep you signed in, security and rate-limiting records (such as IP address), server logs, and error reports (such as browser type, the page where an error occurred and technical details of the error).

Usage data. How you use the website and app: pages you visit, buttons you click, features you use (for example adding a competitor or running a hook analysis), whether you started or completed checkout, and general device details such as browser, operating system, screen size and approximate location (country or city) worked out from your IP address. Once you are signed in, this is linked to your account. We do not record what you type into forms.

To provide the service, ViralSpy collects publicly available information from Instagram and TikTok accounts that our users choose to track, such as public usernames, public posts and videos, captions and public engagement counts (views, likes, comments). We do not access private accounts or private messages.

If you are the owner of a public account and want us to stop processing your account's data or delete it from ViralSpy, email bizxronyo@gmail.com with a link to the account and we will act on your request.

• To create and secure your account, verify your email and sign you in.
• To provide the service: track competitors, detect viral spikes, run AI hook analysis and send alerts.
• To run your free trial and subscription and to process payments through our payment provider.
• To send essential emails such as email verification, password resets and important service or billing notices.
• To respond to support requests and complaints.
• To keep the service secure, prevent fraud and abuse, enforce plan limits and fix errors.
• To understand how people use ViralSpy (product analytics), so we can improve features, fix confusing steps and decide what to build next.
• To comply with legal obligations, such as tax and accounting rules.

We do not sell your personal data, and we do not use it for third-party advertising.

We process your personal data on the basis of your consent, which you give when you create an account and use ViralSpy, and for the legitimate uses permitted by law, including providing the service you signed up for, complying with law and preventing fraud. Where GDPR or similar laws apply, our legal bases are performance of our contract with you, our legitimate interests (such as security, analysing public social media content for the service and understanding how the product is used) and compliance with legal obligations. You can withdraw consent at any time by deleting your account (see section 8). This does not affect processing already carried out.

We share personal data only with service providers that help us run ViralSpy, and only as needed for them to do their job:

• Dodo Payments (merchant of record): checkout, payments, invoices, taxes and subscription management.
• Google: "Sign in with Google", and Google Gemini AI models used to analyse video hooks.
• Apify: collecting public Instagram and TikTok data for the accounts you track.
• Resend: sending account and service emails.
• Telegram: delivering alerts, if you connect it.
• Sentry: error monitoring so we can find and fix bugs.
• PostHog: product analytics, to understand how ViralSpy is used (data stored in the United States).
• Our hosting and infrastructure providers: servers and databases that store and run the service.

We may also disclose data if required by law, court order or a government authority, to protect our rights, users or the public, or as part of a sale, merger or transfer of the ViralSpy business (in which case this policy will continue to protect your data).

Some of our service providers store or process data outside India, for example in the United States or the European Union. By using ViralSpy you acknowledge that your data may be transferred to and processed in those countries, which are not restricted under Indian law. We choose providers that use reasonable safeguards to protect personal data.

• Account and service data: for as long as your account is active.
• After you delete your account: we delete or anonymise your personal data within 30 days, except data we must keep longer by law (for example billing records needed for tax and accounting) or to resolve disputes and prevent fraud.
• Server logs and error reports: kept only as long as needed for security, troubleshooting and fixing errors.
• Usage (analytics) data: kept only as long as it is useful for understanding how the product is used, and no longer than our analytics provider's retention period.
• Support conversations: kept while needed to handle your request and for a reasonable period afterwards.

Depending on where you live, you have the right to:

• access the personal data we hold about you and how it is used;
• correct or update inaccurate or incomplete data;
• have your data erased and your account deleted;
• withdraw consent at any time;
• receive a copy of your data in a portable format, or object to or restrict certain processing (where GDPR or similar laws apply);
• nominate another person to exercise your rights in the event of your death or incapacity (under India's DPDP Act); and
• raise a grievance with us, and, if unresolved, with the relevant data protection authority, such as the Data Protection Board of India.

To exercise any of these rights, including deleting your account, email bizxronyo@gmail.com from the email address on your account. We may need to verify your identity. We respond within 30 days. Deleting your account does not cancel a subscription automatically: please cancel it first (see our Refund & Cancellation Policy).

Necessary cookies. We use cookies and similar browser storage to keep you signed in, protect your account and remember preferences such as the display theme. ViralSpy cannot work without these.

Analytics cookies. We use PostHog to understand how people use ViralSpy. PostHog stores a random identifier in a first-party cookie and in your browser's local storage so it can tell visits apart and, once you sign in, link them to your account. This data is used only by us to improve ViralSpy.

We do not use advertising or cross-site tracking cookies, and we do not sell your data. Our payment provider may set its own cookies on its checkout pages.

Opting out. You can turn off analytics on this device with the button below. We also turn analytics off automatically if your browser sends a "Do Not Track" signal. Opting out does not affect how ViralSpy works for you.

We use reasonable security practices to protect your data, including encrypted HTTPS connections, hashed passwords, access controls and rate limiting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the relevant authorities as required by law.

ViralSpy is only for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

We may update this policy from time to time. We will change the "Last updated" date above, and for significant changes we will notify you by email or in the app before they take effect. Continuing to use ViralSpy after a change means you accept the updated policy.

In accordance with the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, our Grievance Officer is:

Lalit Prajapati
Email: bizxronyo@gmail.com
Address: Gurukripa Residency, Sanawad Road, Khargone, Madhya Pradesh 451001, India

We acknowledge complaints within 48 hours and aim to resolve them within one month of receipt.