Privacy Policy

ViraCreator LLC ("ViraCreator," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

1. Information We Collect

Personal Information

When you create an account, we collect:

• Name (first and last)
• Email address
• Company/team name
• Password (stored in encrypted form)

Content and Usage Data

When you use our services, we may collect:

• AI avatar configurations and prompts you create
• Product information and images you upload
• Generated video content and metadata
• Usage patterns, feature interactions, and preferences
• Device information, browser type, and IP address

Automatically Collected Information

We automatically collect certain information when you visit our platform, including:

• Log data (IP address, browser type, pages visited, time spent)
• Device identifiers
• Cookies and similar tracking technologies (see our Cookie Policy)

2. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our services
• Process and generate AI avatars, product showcases, and UGC video ads
• Manage your account and provide customer support
• Send transactional emails (account confirmations, password resets, etc.)
• Analyze usage trends and optimize our platform
• Detect, prevent, and address security issues and abuse
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share information with:

• Service Providers: Third-party services that help us operate our platform (cloud hosting, AI generation APIs, payment processing, analytics)
• Team Members: Other users within your account/team as configured by your account settings
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with a merger, acquisition, or sale of assets

4. Third-Party AI Services

Our platform uses third-party AI services to generate avatars, scripts, and video content. Current providers include Anthropic (Claude via AWS Bedrock), Google (Veo), Kuaishou (Kling), and ByteDance (Seedance). This list may change as we add or remove providers. When you use these features:

• Your prompts and content inputs may be processed by these third-party services
• Generated content is stored on our servers and in secure cloud storage (AWS S3)
• We recommend reviewing the privacy policies of these AI providers

5. Data Storage and Security

We implement industry-standard security measures to protect your data, including:

• Encryption of passwords and sensitive data
• Secure HTTPS connections
• Regular security audits and updates
• Access controls and authentication requirements

Your data is primarily stored on servers located in the United States. For information about international transfers, see Section 10 below.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account data: Retained while your account is active and for 90 days after account deletion
• Generated content: Retained while your account is active; deleted within 90 days of account closure
• Usage and analytics data: Retained in anonymized or aggregated form for up to 2 years
• Billing records: Retained for up to 7 years as required for tax and accounting compliance

You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at privacy@viracreator.ai. We will respond within 30 days (or sooner if required by applicable law).

8. Additional Disclosures for California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, IP address, account ID
• Commercial information: Subscription history, billing records, credit usage
• Internet or electronic network activity: Browsing history on our platform, feature usage, interaction data
• Geolocation data: Approximate location derived from IP address
• Audio, electronic, visual, or similar information: Images and videos you upload or generate
• Professional or employment-related information: Company name (if provided)
• Inferences: Usage patterns and preferences derived from your activity

How We Use and Disclose Personal Information

We use and disclose personal information for the business purposes described in Sections 2 and 3 above. We share personal information with service providers who assist in operating our platform, as described in Section 3.

Sale and Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.

Your California Privacy Rights

As a California resident, you have the right to:

• Know and access: Request the categories and specific pieces of personal information we have collected about you
• Delete: Request deletion of your personal information, subject to certain exceptions
• Correct: Request correction of inaccurate personal information
• Opt out of sale/sharing: We do not sell or share your personal information, so no opt-out is necessary
• Non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at privacy@viracreator.ai or legal@viracreator.ai. We will verify your identity before fulfilling your request. You may also designate an authorized agent to submit requests on your behalf.

Sensitive Personal Information

We do not collect or process sensitive personal information as defined under CPRA (e.g., Social Security numbers, financial account credentials, precise geolocation, racial or ethnic origin) for purposes other than providing the Service.

9. Additional Disclosures for European Economic Area, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent local laws provide you with additional rights and protections.

Data Controller

The data controller for your personal information is:
ViraCreator LLC
2915 N. Classen Ste 120-F #1208, Oklahoma City, OK 73106
Email: privacy@viracreator.ai

Legal Basis for Processing

We process your personal information on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): Processing necessary to provide the Service, manage your account, generate content, and process payments
• Legitimate interests (Art. 6(1)(f)): Improving our Service, preventing fraud, ensuring security, and conducting analytics — where these interests are not overridden by your data protection rights
• Consent (Art. 6(1)(a)): Analytics cookies (PostHog, Google Analytics), which you can accept or decline via our cookie consent banner
• Legal obligation (Art. 6(1)(c)): Where we are required by law to retain or disclose information (e.g., tax records, law enforcement requests)

International Data Transfers

Your personal data is transferred to and processed in the United States. We rely on the EU-U.S. Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs) approved by the European Commission to provide adequate safeguards for international transfers. You may request a copy of the applicable transfer mechanisms by contacting us.

Your GDPR Rights

In addition to the rights listed in Section 7, EEA, UK, and Swiss residents have the right to:

• Lodge a complaint with your local data protection supervisory authority
• Object to processing based on legitimate interests
• Restrict processing while we verify the accuracy of your data or assess an objection

To exercise these rights, contact us at privacy@viracreator.ai. We will respond within 30 days.

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected data from a child under 16, we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For material changes, we will also provide notice via email or through the Service at least 30 days before the changes take effect.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@viracreator.ai
• Mailing address: 2915 N. Classen Ste 120-F #1208, Oklahoma City, OK 73106