Privacy Policy

Last updated: 5 April 2026

ViralStack ("we", "us", or "our") is operated by Digital Data Cloud. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website at viralstack.app and our content generation platform (the "Service").

By using ViralStack, you agree to the collection and use of information in accordance with this policy.

---

1. Information We Collect

We collect the following types of information:

• Account information — email address when you join our waitlist or create an account
• Usage data — content you generate, brand workspaces you create, and how you interact with the platform
• Connected account data — if you connect social media or email accounts (e.g. Gmail, LinkedIn), we access only the scopes you explicitly authorise
• Technical data — IP address, browser type, device type, and pages visited, collected automatically via server logs

2. How We Use Your Information

We use your information to:

• Provide and improve the ViralStack Service
• Generate content on your behalf using the brand context you provide
• Send you product updates, early access notifications, and service-related emails
• Monitor usage for rate limiting and fraud prevention
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your content to train AI models.

3. Data Storage and Security

Your data is stored securely on Supabase (EU region) and Railway (EU infrastructure). We use industry-standard encryption in transit (HTTPS/TLS) and at rest.

We retain your account data for as long as your account is active. You may request deletion at any time by emailing privacy@viralstack.app.

4. Third-Party Services

ViralStack uses the following third-party services to operate:

• Anthropic Claude API — for AI content generation. Prompts and outputs are processed by Anthropic. See Anthropic's Privacy Policy.
• Supabase — database and authentication. See Supabase's Privacy Policy.
• Railway — hosting infrastructure. See Railway's Privacy Policy.
• YouTube Data API — for detecting trending content on YouTube. Subject to Google's Privacy Policy.

5. Connected Accounts (OAuth)

When you connect third-party accounts (such as Gmail or social media platforms), we request only the minimum permissions needed to perform the actions you request. We store access tokens securely and never access your accounts beyond the actions you explicitly trigger within ViralStack.

You can revoke connected account access at any time from within the ViralStack dashboard or directly from the third-party platform's security settings.

6. Cookies

ViralStack uses only essential session cookies required for authentication and security. We do not use tracking or advertising cookies.

7. Your Rights (UK & EU)

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Data portability — receive your data in a machine-readable format

To exercise any of these rights, contact us at privacy@viralstack.app. We will respond within 30 days.

8. Children's Privacy

ViralStack is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

For any privacy-related questions or requests:

• Email: privacy@viralstack.app
• Website: viralstack.app
• Operated by: Digital Data Cloud, United Kingdom