Privacy Policy

1. Introduction

WINRA SAS, a French société par actions simplifiée registered with the Nanterre Trade and Companies Register under SIREN 951 112 630, with its registered office at 40 rue Madeleine Michelis, 92200 Neuilly-sur-Seine, France ("we", "our", or "us"), operates the viral-managers.com platform and acts as the data controller for the personal data described below. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials (via Google OAuth or email/password).

Social Media Data

When you connect Instagram or TikTok accounts, we collect publicly available data only, including posts, captions, engagement metrics (likes, comments, views), and public profile information. We do not access private messages, private account data, or login credentials for those platforms.

Instagram data is collected and processed via the Instagram API in compliance with the Meta Platform Terms and Developer Policies. We only request the permissions strictly necessary to operate the features you use (reading publicly available profile and post data, and publishing content you explicitly schedule). We use such data solely to provide the analysis, organization, and publishing features you request, and never to build advertising profiles or sell your data.

TikTok data is collected and processed in compliance with TikTok's Developer Terms of Service and Community Guidelines. We use such data solely to provide the analysis and organization features you request. When you disconnect an Instagram or TikTok account, we stop collecting its data and delete the associated data in accordance with the retention periods described below.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, and device information.

3. How We Use Your Information

• To provide and maintain our service, including AI-powered content analysis
• To process your subscription and payments via Stripe
• To send you service-related communications and updates
• To detect, prevent, and address technical issues
• To improve and personalize your experience

4. Data Storage & Security

Your data is stored securely using industry-standard practices. We use Supabase (hosted on AWS) for database storage, Cloudflare R2 for asset storage, and Google Cloud Run for application hosting. All data is encrypted in transit (TLS/SSL) and at rest.

Retention periods:

• Social media posts and engagement data: automatically deleted after 60 days of inactivity
• Account information (name, email): retained until you delete your account
• Billing records: retained as required by applicable law (typically 7 years)
• Application logs: retained per Google Cloud's standard log retention policy

You can permanently delete your account and all associated data at any time from your Settings → Security page.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe — Payment processing and subscription management
• Supabase — Database and authentication (hosted on AWS)
• Google Cloud — Application hosting
• Cloudflare — CDN and asset storage (R2)
• Resend — Transactional email delivery
• RocketAPI — Retrieval of publicly available Instagram profile and post data on behalf of users who connect Instagram accounts
• TikAPI — Retrieval of publicly available TikTok profile and post data on behalf of users who connect TikTok accounts
• OpenAI — AI-powered analysis of social media content (captions, transcripts). Data is processed per OpenAI's API data usage policy and is not used to train OpenAI models when API Zero Data Retention is enabled.
• Google Gemini — AI-powered video frame analysis. Data processed per Google's API Terms of Service.

Some of these providers (in particular Stripe, OpenAI, and Google) are located outside the European Union. When personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) to ensure an adequate level of protection.

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Export your data in a portable format
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority — in France, the Commission Nationale de l'Informatique et des Libertés (CNIL, www.cnil.fr)

To exercise any of these rights, contact us at support@viral-managers.com.

7. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies or advertising cookies.

8. Children's Privacy

Our service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at support@viral-managers.com