Privacy Policy

1. Scope and Who We Are

TiViral ("TiViral," "we," "us," or "our") operates the website at tiviral.com and the related applications and services (the "Service"). TiViral is the controller of the personal information described in this Privacy Policy.

The Service is an AI-powered slideshow studio that helps creators develop original content and publish or schedule it for platforms such as TikTok, Instagram, and YouTube Shorts. This policy applies when you visit our website, create an account, use the Service, contact us, or connect a third-party account.

2. Information We Collect

We collect the following categories of information:

• Account information — your name, email address, profile image, authentication provider, and a securely hashed password when you use email and password authentication.
• TikTok connection data — the TikTok account identifier, display name, avatar, access and refresh tokens, authorized permissions, connection time, and token expiration time supplied when you choose to connect TikTok. We do not receive your TikTok password.
• Content and publishing data — product details, source images and links, prompts, captions, style and schedule preferences, generated slideshows, publishing settings, TikTok publication identifiers, status information, and errors.
• Billing information — subscription, plan, payment status, and transaction information. Our payment provider processes card details; we do not store full payment card numbers.
• Usage and device data — IP address, browser and device information, pages visited, features used, referral information, and approximate location derived from IP address.
• Communications — messages and supporting information you send when requesting support or exercising a privacy right.

3. How We Receive Information

We receive information directly from you, automatically from your browser or device, from authentication and payment providers, and from third-party services that you choose to connect. TikTok provides connection data only after you use TikTok's authorization screen and grant the requested permissions.

4. How and Why We Use Information

We use personal information to:

• Provide, secure, maintain, and troubleshoot the Service
• Create and authenticate accounts and provide customer support
• Generate content and perform the publishing actions you configure
• Process subscriptions and send service and billing notices
• Measure performance and improve the reliability and usability of the Service
• Prevent fraud, abuse, unauthorized access, and other harmful activity
• Comply with legal obligations and enforce our Terms of Service

Where applicable data protection law requires a legal basis, we rely on performance of our contract with you, your consent, compliance with law, and our legitimate interests in securing and improving the Service. You may withdraw consent at any time, without affecting processing already carried out lawfully.

5. TikTok Integration

Connecting TikTok is optional. TiViral requests only the permissions needed for the features you choose: basic profile access (user.info.basic), upload access (video.upload), and direct publishing access (video.publish). TikTok shows these permissions to you before you authorize the connection.

We use TikTok connection data only to identify the account you connected, maintain the authorized connection, retrieve publishing capabilities and settings, upload content as a draft, publish content, and report publishing results. We do not sell TikTok Developer Services Data or use it for advertising, cross-context behavioral advertising, unrelated profiling, eligibility decisions, or training artificial intelligence models.

When you expressly authorize an upload, publication, or publishing schedule, we send TikTok the applicable images or media URLs, title, caption, disclosure and interaction settings, and visibility setting. TikTok processes that information under its own Privacy Policy. Content published on TikTok is controlled through your TikTok account and is subject to TikTok's policies.

We disclose TikTok data only to service providers that process it for us under appropriate confidentiality and data-protection obligations, to TikTok as needed to perform an action you request, or when disclosure is required by law. We do not permit those providers to use TikTok data for their own advertising.

6. AI Processing

Some features use AI and infrastructure providers to analyze content, suggest styles, or generate an output you request. Content submitted to those features may be processed by those providers to deliver the feature, subject to their applicable terms and our agreements with them. We do not send TikTok access tokens or TikTok basic-profile data to AI providers.

7. How We Share Information

We may share relevant information with:

• Service providers that support hosting, authentication, payments, analytics, email, security, and AI features on our behalf
• Connected platforms, such as TikTok, when you request or authorize an integration action
• Authorities and other parties when required by law or reasonably necessary to protect rights, safety, and security
• A successor organization in a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law

We do not sell personal information.

8. Retention, Disconnection, and Deletion

We retain personal information only for as long as needed to provide the Service, fulfill the purposes described in this policy, comply with law, resolve disputes, and protect the Service. Retention varies by data type and considers account status, operational need, legal requirements, and security risk.

TikTok access and refresh tokens and the related connection record are retained while your TikTok account remains connected. To disconnect TikTok, revoke access in TikTok's connected-app settings or email support@tiviral.com. After a valid disconnection or deletion request, we revoke the token where available and delete the stored connection record and its related TiViral automation and scheduled-post records, subject to limited retention in backups or where required for security, fraud prevention, legal compliance, or dispute resolution.

Disconnecting TiViral does not delete content already published on TikTok. You can manage or delete published content through your TikTok account. To request deletion of other TiViral account data, email support@tiviral.com.

9. Security

We use reasonable technical and organizational safeguards designed to protect personal information, including access controls and protection for stored authentication tokens. No transmission or storage system is completely secure, so we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. You may also withdraw consent and lodge a complaint with your local data-protection authority. To exercise a right, email support@tiviral.com. We may ask for information needed to verify your identity and will respond as required by applicable law. You will not be discriminated against for exercising a right.

11. International Transfers

We and our providers may process information in countries other than the country where you live. Where required, we use recognized legal mechanisms and safeguards for international transfers, such as adequacy decisions or standard contractual clauses.

12. Children

The Service is not directed to children under 16 or the minimum age required in their jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us so we can take appropriate action.

13. Cookies and Analytics

We use essential cookies for authentication, security, and preferences. We also use analytics technology to understand visits and feature usage and improve the Service. Analytics may collect device, usage, referral, and approximate-location data. Where consent is required by law, we request it before using non-essential cookies or similar technology.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the Service from working.

14. Changes and Contact

We may update this policy and will post the revised version here with a new "Last updated" date. Where required, we will provide additional notice or request consent before materially different processing begins.

The service operator and privacy contact is TiViral. Questions, complaints, and privacy requests can be sent to support@tiviral.com. Website: https://tiviral.com.