Privacy Policy

1. Who is responsible

Bellential Inc., 3069 rue Cherrier, L'Île-Bizard, Quebec H9C 1C8, Canada is the controller of your personal data. For anything about privacy, write to privacy@viralshooter.com. We answer within 30 days, usually much sooner.

2. What we collect

Account data. When you sign in with Google we receive your name, email address and profile picture. We never receive your Google password and we never request access to your YouTube channel.
Content you create. Boards, notes, saved searches, alerts, watchlists, workspace names and invitations.
Preferences. Language, default region and start page, time zone and email settings.
Billing data. Your plan, seat count and subscription status. Card details are collected and stored by Stripe; we never see or store full card numbers.
Usage data. Which pages, API endpoints and MCP tools you or your connected agents call, when, and whether the call came from you or an agent. We use it for limits, billing and abuse prevention.
Technical data. IP address, browser and device type, and request logs, kept for security and troubleshooting.
Messages. What you send us by email, for example support requests.

We do not collect special categories of data, and we do not buy data about you from third parties.

3. Why we use it and our legal bases

To provide the service you signed up for: your account, boards, alerts, agent access and billing (performance of a contract).
To keep it secure and fair: rate limits, fraud and abuse prevention, debugging (legitimate interests).
To communicate about your account, receipts, security notices and, if you turned them on, alert and digest emails (contract; consent for optional emails, which you can switch off in Settings at any time).
To improve the product using aggregated, de-identified usage statistics (legitimate interests).
To meet legal obligations such as tax, accounting and responding to lawful requests (legal obligation).

We do not use your personal data for advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who we share it with

We share personal data only with service providers that process it on our behalf under contract, and only as needed:

Cloudflare — hosting, content delivery, security and transactional email.
Neon — database hosting.
Stripe — payments, invoicing and tax. Stripe acts as merchant of record for purchases and processes payment data under its own privacy policy.
Google — sign-in (Google OAuth).

We may also disclose data if required by law, to protect the rights, safety or property of our users or the public, or as part of a merger or acquisition, in which case this policy continues to apply. We do not sell or "share" personal data for cross-context behavioural advertising as those terms are defined under California law.

5. International transfers

Our providers operate globally, so your data may be processed outside your country, including in the United States. Where the law requires it, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

6. How long we keep it

Account data and content you create: until you delete your account. Deletion is immediate.
Request and security logs: up to 90 days.
Usage records: kept for billing and abuse accounting, but detached from your identity when you delete your account.
Billing records: as long as tax and accounting law requires (typically up to 7 years), held by us and Stripe.
Support emails: up to 2 years after the conversation ends.

7. Your rights and choices

Depending on where you live, you have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. You can do the most common of these yourself:

Export everything you created: Settings → Account → Export my data.
Delete your account and everything you saved: Settings → Account → Delete account.
Revoke viralshooter's access to your Google account at Google security settings.
Turn off optional emails in Settings → Preferences.

For anything else, email privacy@viralshooter.com. We may need to verify your identity first. We will not discriminate against you for exercising your rights. If you are in the EEA, the UK, Switzerland or the Republic of Korea, you may also complain to your local data protection authority; California residents may use an authorised agent.

8. YouTube API Services

viralshooter uses YouTube API Services to show public information about YouTube videos and channels. By using viralshooter you are also subject to the Google Privacy Policy. We do not access, store or act on your own YouTube account. Details of what we store from YouTube and for how long are in How we use YouTube data.

9. Security

Data is encrypted in transit and at rest, access is limited to the people who need it, and administrative actions are logged. No system is perfectly secure; if we learn of a breach affecting your data, we will notify you and the authorities as the law requires. Report vulnerabilities to security@viralshooter.com.

10. Children

viralshooter is not directed at children. You must be at least 16 years old (14 in the Republic of Korea, or older where local law requires) to create an account. If we learn we hold data from a child below that age, we delete it.

11. Cookies

We use only cookies that are strictly necessary to keep you signed in, remember your language and protect the service. We do not use advertising or cross-site tracking cookies. See the Cookie Policy.

12. Changes to this policy

We will post any change on this page and update the effective date. If a change is material, we will tell you by email or in the product before it takes effect.

13. Contact

Bellential Inc., 3069 rue Cherrier, L'Île-Bizard, Quebec H9C 1C8, Canada · privacy@viralshooter.com