Privacy Policy
How ViralVideoAI handles the photos you upload, the biometric data derived from them, your account information and your rights.
Last updated: 2026-10-25
Introduction
This Privacy Policy explains how ViralVideoAI ("we", "us") collects, uses and protects your information when you use viralvideoai.app and the services on it. It applies to everything on the site, including the pages that generate AI videos from the photos you upload.
By using the service, you agree to the practices described below. If you do not agree, do not use the service.
Who we are and how to reach us
ViralVideoAI operates viralvideoai.app. For any privacy question, including a request to access, correct, export or delete your data, email privacy@viralvideoai.app. For takedown requests about a specific video or face, see "Takedown" at the bottom of this page.
Information we collect
Account information. Your email, authentication identifiers (OAuth subject if you sign in with Google), display name and password hash (if you use email + password).
Uploaded photos. The photos you upload to generate a video. Photos are stored only to render the video you asked for and are deleted on the schedule described in "Data retention" below. We never use your uploaded photos to train any AI model.
Biometric data derived from your photos. To generate a video, the model receives a face region from your photo and derives an internal numeric representation of it (a face embedding). This representation is used only to render your video and is discarded on the same schedule as the photo itself. We treat face embeddings as special category personal data under GDPR Article 9 and as biometric information under state biometric laws (including the Illinois Biometric Information Privacy Act, BIPA). We do not sell, lease, trade or otherwise profit from this data, and we do not disclose it to third parties except as required to render your video.
Generated videos. The videos the service produces for you. We retain them so you can download them from your library; see "Data retention".
Usage data. Pages visited, features used, templates generated, timestamps, and error logs. Used to operate and improve the service and to detect abuse.
Device information. Device type, operating system, browser type, and language.
Cookies and local storage. Session cookies for login, preferences such as locale, and privacy-friendly analytics cookies where you have consented (Plausible / self-hosted analytics; no third-party ad network).
Payment information. Billing details are handled by Stripe or another supported payment processor. We do not store full card numbers on our servers; we store only the processor's customer identifier, the last four digits of the card (as returned by the processor), the plan or pack you purchased and the invoice history.
How we use your information
We use the data we collect to:
- Provide, maintain and improve the service.
- Render the videos you ask us to generate (uploaded photos + face embedding).
- Process payments and send receipts.
- Send technical notices, security alerts and support messages.
- Respond to your questions and support requests.
- Detect, prevent and address fraud, abuse and violations of our Terms.
- Comply with legal obligations and lawful requests.
We do not sell your personal information. We do not use your uploaded photos, face embeddings or generated videos to train any AI model, our own or anyone else's.
Biometric data and your consent
By uploading a photo and tapping Generate, you give us your written informed consent, under BIPA and comparable laws, to derive a face embedding from that photo for the sole purpose of rendering the video you asked for, and to retain that embedding and the source photo for the retention period described below. You can withdraw this consent at any time by deleting the uploaded photo in your library or by writing to privacy@viralvideoai.app; withdrawing consent does not undo videos already rendered.
Data retention
| What | How long we keep it | |---|---| | Uploaded photos | Deleted from active storage within 24 hours after your download, or 30 days from upload, whichever comes first | | Face embeddings derived from your photos | Deleted together with the source photo on the same schedule, and never longer than 30 days from upload | | Generated videos | Available in your library for 90 days after render; deleted after that unless you have downloaded them to your own device | | Account information | While your account is active, and for 30 days after you ask us to delete it (we hold it that long for fraud and chargeback review) | | Payment records | 7 years, to meet tax and accounting obligations | | Logs and usage data | 30 days for debugging logs; aggregated analytics retained longer with no individual identifiers |
If you ask us to delete your account, we delete your photos and face embeddings immediately, your library within 7 days, and account records at 30 days.
How we share your information
We share information only in these cases:
- Service providers who help us operate the service (hosting, storage, AI model inference, payments, email delivery, analytics, support) under written contracts that limit their use of your data. The AI model providers receive the face region needed to render your video; they do not retain it after the job and do not train on it. A current list is available on request to privacy@viralvideoai.app.
- To comply with the law or respond to a valid legal request.
- To protect our rights, property or safety, or that of our users, including investigating fraud or abuse.
- With your explicit consent for anything else.
We do not sell your personal information in the sense of CCPA/CPRA, we do not share it for cross-context behavioural advertising, and we do not transfer uploaded photos or face embeddings outside the service providers listed above.
International transfers
Our servers and service providers may be located outside your country. Where we transfer personal data out of the European Economic Area, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism.
Your rights
Depending on where you live, you have some or all of the following rights:
- Access a copy of the personal data we hold about you.
- Correct inaccurate data.
- Delete your data ("right to be forgotten" / "right to deletion").
- Export your data in a machine-readable format (data portability).
- Object to or restrict certain processing.
- Withdraw consent at any time (does not affect past processing).
- Opt out of sale/share of personal information (CCPA/CPRA). We do not sell or share your personal information, but you can confirm this via the request below.
- Non-discrimination for exercising your rights.
To exercise any of these rights, write to privacy@viralvideoai.app. We respond within 30 days.
If you are in the EEA/UK and believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority.
Children
The service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. In jurisdictions where the minimum age is higher (16 in parts of the EU/UK), the local minimum age applies. If you believe a child under the applicable age has given us personal information, write to privacy@viralvideoai.app and we will delete it.
Security
We encrypt data in transit (TLS) and at rest (AES-256 on our storage buckets), apply least-privilege access controls, log administrative actions, and review our security posture regularly. No online service is 100% secure; we work continuously to protect your information and will notify you and the appropriate authorities of a breach as required by law.
Takedown
If a video or an uploaded photo shows you or someone whose face you have the right to represent, and you want it removed from the service, write to takedown@viralvideoai.app with the URL or job identifier. We remove it within 72 hours of a valid request. See the Terms of Service for the full DMCA and right-of-publicity takedown procedure, including the designated agent address.
Changes to this Policy
We may update this Privacy Policy. We will update the "updated_at" date at the top of this page and, for material changes, notify you by email or through the service before the change takes effect.
Contact
Privacy questions: privacy@viralvideoai.app. Takedown: takedown@viralvideoai.app. General support: support@viralvideoai.app.