Privacy Policy

What we collect

• When you fill in the signup form: your email, your Instagram handle, the plan, offer, currency and language you chose, your time zone, the exact text you ticked, your IP address and browser information. We keep this even if you do not complete payment.
• When you buy: your email, your name (if you enter it at checkout), your Instagram handle, your country, the plan and currency, and your payment status. Card details are handled by Stripe. We never see or store your full card number.
• Your content: the photos and videos you upload, and the public posts we use if you do not upload.
• Results: your public follower count at the start and end of each period, plus screenshots and links to the posts that featured you.
• Communication: the emails you send us and the emails we send you, including when they were sent.
• Consent records: the exact text and version you accepted, the time, your IP address and the checkout session ID.
• Website data: your IP address, browser and device information, the pages you visit, and the ad or link you came from, such as UTM parameters and the Facebook click ID.

Why we use it

• To deliver the service you bought: taking payment, promoting your profile, sending receipts, reminders and results, and handling cancellations and refunds. Legal basis: our contract with you.
• To meet legal duties: accounting records and records of your consent to renewal. Legal basis: legal obligation.
• To measure and improve our ads: with the Meta Pixel and Meta Conversions API. Legal basis: our legitimate interest in knowing which ads work. You can object at any time (see below).
• To answer questions and prevent misuse, such as more than one start week per person. Legal basis: our legitimate interest.

Meta Pixel and Conversions API

• Our website uses the Meta Pixel. When you take actions such as viewing our plans, starting checkout or buying, the Pixel sends that information to Meta.
• When you buy, our server also sends the purchase event to Meta through the Conversions API. This includes your email in hashed (scrambled) form, your IP address, your browser information and Meta's click and browser IDs.
• Meta uses this to match the purchase to an ad and to show our ads to similar people.
• Meta's own privacy policy applies to Meta's use of the data.

Who we share data with

• Stripe: payments, receipts and the subscription portal.
• Resend: sending emails.
• Lovable Cloud and Supabase: hosting our website and database.
• Meta: ad measurement, as described above.
• Partner pages: they receive your content and your Instagram handle so they can feature and tag you.

We do not sell your personal data. Some of these providers are located outside your country, including in the United States. Where required, transfers are protected by standard contractual clauses or similar safeguards.

Cookies and similar technology

• We use a few cookies that the site needs to work, for example to remember your language, your currency, the offer and the ad or link you came from (for up to 30 days).
• We also use Meta cookies (_fbp and _fbc) to measure our ads. They are set by the Meta Pixel, or by our site when you arrive from a Meta ad.
• We do not show a cookie banner. You can block or delete cookies in your browser settings, use a tracking blocker, or turn off ad personalisation in your Meta account settings. Blocking these cookies does not stop you from buying.

How long we keep data

• Payment and accounting records: as long as accounting law requires, normally 5 years.
• Consent and reminder records: 3 years after your subscription ends.
• Uploaded content: deleted within 90 days after your subscription ends.
• Signup forms that never lead to a payment: deleted within 12 months.
• Emails with us: up to 3 years.
• Website data and data sent to Meta: according to Meta's retention rules, and on our side no longer than 2 years.

Your rights

• Depending on where you live, you can ask for access to your data, correction, deletion, a copy in a portable format, or restriction. You can also object to our use of your data for ad measurement.
• Email info@tryviralio.com and we reply within 30 days.
• In the EU or UK, you can also complain to your data protection authority. In Denmark this is Datatilsynet, and in the UK it is the ICO.

Children

Our service is only for people aged 18 and over. We do not knowingly collect data from children.

Changes

We may update this policy. The date at the top shows the latest version.