Privacy Policy
Last updated: 31 July 2026
This policy explains what ViralSync collects, why, and who else processes it on our behalf.
Draft — this document is a structural scaffold, not legal advice. Company details marked [ … ] must be completed and the whole text reviewed by a qualified lawyer before launch.
Who is responsible
The controller for the processing described here is [LEGAL ENTITY NAME], [STREET ADDRESS], [POSTCODE CITY], [COUNTRY].
You can reach us about anything on this page at [PRIVACY CONTACT EMAIL].
What we collect
Account data: your email address, authentication identifiers, and — if you sign in with Google — the profile fields that provider returns.
Content data: the messages you send the agent, the media you upload, and the videos, scripts, and audio produced on your behalf.
Connection data: OAuth tokens for the social and productivity accounts you connect, together with the account handle and the permissions granted.
Usage data: which tools ran, how long they took, what they cost, and the errors they produced.
Why we process it
To provide the service you asked for — running the agent, producing media, and publishing to the accounts you connected.
To meter and bill usage against your plan.
To keep the service secure, debug failures, and prevent abuse.
Processors we use
Infrastructure and data: Neon (database), Cloudflare (edge, storage, execution), Vercel (application hosting), Modal (media rendering).
Model and media providers: the AI providers used to generate text, speech, and imagery for your content.
Integrations: Composio, which brokers the connections to your social and productivity accounts.
[Complete this list and add the corresponding data processing agreements before launch.]
Connected accounts
Access tokens are stored against your user account, not a shared workspace, and are used only to carry out actions you or your agent initiated.
You can disconnect any account at any time. Revoking access in the provider's own settings also terminates our access immediately.
Retention
Account and content data is kept while your account is open. Deleting your account removes it, subject to any retention period we are legally required to observe.
[Confirm concrete retention periods per data category before launch.]
Your rights
You can request access, correction, deletion, restriction, portability, and object to processing. Write to [PRIVACY CONTACT EMAIL].
If you are in the EU or UK you may also complain to your local supervisory authority.