Privacy Policy

1. Introduction

Welcome to goviral.to ("we", "us", "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media management platform and services.

By using goviral.to, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Create an account (name, email address, password)
• Update your profile information
• Create and schedule content through our platform
• Contact our support team
• Subscribe to our newsletter or marketing communications
• Participate in surveys or provide feedback
• Make payments (payment information is processed by our payment providers)

2.2 Information from Connected Social Media Accounts

When you connect your social media accounts to our Service, we collect and process information from these platforms:

X (Twitter) Account Data

When you authorize our application to access your X account, we collect:

• Profile information (username, display name, profile picture, bio, location)
• Account metadata (follower count, following count, verification status)
• Your tweets, retweets, and replies
• Engagement metrics (likes, retweets, replies, impressions, reach)
• Follower and following lists
• Direct messages (only if you explicitly enable DM management features)
• Account activity and posting history
• Tweet scheduling and draft information

We access this data through X's official API in accordance with X's Developer Agreement and Policy. We only use this data to provide our services to you and never share it with third parties except as described in this policy.

Instagram Account Data

When you connect your Instagram account through Meta's authorization, we collect:

• Profile information (username, profile picture, bio)
• Instagram posts, reels, and stories
• Engagement metrics (likes, comments, saves, shares, reach, impressions)
• Follower demographics and insights
• Direct messages (only if you enable Instagram DM management)
• Media content and captions
• Post scheduling and draft information

2.3 Automatically Collected Information

When you use our Service, we automatically collect certain information:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent on platform)
• Log data (access times, error logs, performance metrics)
• Cookies and similar tracking technologies (see our Cookie Policy)
• Analytics data (user behavior, feature usage, conversion metrics)

2.4 Payment Information

We use third-party payment processors (such as Stripe) to process subscription payments. We do not store your full credit card information on our servers. We may store:

• Last four digits of your card for identification
• Billing address
• Payment history and invoices
• Subscription status and plan information

3. How We Use Your Information

We use the collected information for various purposes:

3.1 To Provide and Maintain Our Service

• Create and manage your account
• Schedule and publish content to your connected social media accounts
• Provide analytics and insights about your social media performance
• Generate AI-powered content and ad creatives
• Manage direct messages across platforms
• Process your subscription and payments
• Provide customer support and respond to your inquiries

3.2 To Improve and Optimize Our Service

• Analyze usage patterns and trends
• Improve our AI models and content generation features
• Develop new features and functionality
• Monitor and ensure the security of our platform
• Debug and fix technical issues

3.3 To Communicate with You

• Send you service updates and notifications
• Respond to your comments and questions
• Send marketing and promotional communications (with your consent)
• Provide customer support
• Send administrative information (policy updates, billing notices)

3.4 For Compliance and Legal Purposes

• Comply with legal obligations and regulations
• Enforce our Terms of Service
• Protect our rights, property, and safety
• Prevent fraud and abuse
• Respond to legal requests from authorities

4. Social Media Platform Authentication and Data Usage

4.1 X (Twitter) Authentication

When you authenticate your X account with goviral.to:

• We use OAuth 2.0 authentication protocol in compliance with X's security requirements
• We request only the permissions necessary to provide our services
• We store access tokens securely and never share them with third parties
• You can revoke our access at any time through your X account settings
• We comply with X's Developer Agreement, Developer Policy, and Automation Rules
• We do not sell, rent, or share your X data with third parties for their marketing purposes
• We respect X's rate limits and API usage policies

4.2 Data Retention from Social Platforms

We retain data from your connected social media accounts:

• For as long as your account is active and connected
• Historical analytics data is retained to provide trend analysis
• When you disconnect a social media account, we delete or anonymize associated data within 90 days
• We may retain certain data longer if required by law or for legitimate business purposes

4.3 Your Control Over Social Media Data

You have control over the data we collect from social media platforms:

• You can disconnect any social media account at any time through your settings
• You can adjust permissions for each connected platform
• You can request deletion of specific data through our support team
• You can export your data before disconnecting accounts

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

5.1 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud hosting providers (for data storage and processing)
• Payment processors (Stripe) for billing and payments
• Analytics providers for usage analysis
• Email service providers for communications
• AI service providers (OpenAI, Google Gemini, HeyGen) for content generation
• Customer support tools

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 With Social Media Platforms

We share content and data with social media platforms (X, Instagram) only as necessary to:

• Post scheduled content to your accounts
• Retrieve analytics and performance data
• Manage direct messages on your behalf
• Comply with platform terms and policies

5.3 For Legal Reasons

We may disclose your information if required to do so by law or in response to:

• Legal processes (court orders, subpoenas)
• Government requests
• Protection of our rights and property
• Prevention of fraud or illegal activities
• Protection of the safety of our users and the public

5.4 Business Transfers

If goviral.to is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5.5 With Your Consent

We may share your information for other purposes with your explicit consent.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure storage of API tokens and credentials
• Regular backups and disaster recovery procedures
• Employee training on data protection and privacy
• Monitoring for security breaches and vulnerabilities

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Access and Portability

• Request access to your personal information
• Request a copy of your data in a portable format
• Export your content and analytics data

7.2 Correction and Updates

• Correct inaccurate or incomplete information
• Update your profile and account settings

7.3 Deletion

• Request deletion of your personal information
• Delete your account and associated data
• Note: We may retain certain information as required by law or for legitimate business purposes

7.4 Objection and Restriction

• Object to processing of your personal information
• Request restriction of processing in certain circumstances

7.5 Withdraw Consent

• Withdraw consent for marketing communications
• Disconnect social media accounts
• Opt-out of certain data collection

To exercise any of these rights, please contact us at privacy@goviral.to. We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track your activity for advertising purposes (with consent)

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for use by children under the age of 13 (or 16 in some jurisdictions). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

11. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. We will retain and use your information to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Provide historical analytics and insights

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it by law.

12. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling

We process your data based on the following legal bases: consent, contract performance, legal obligations, and legitimate interests.

14. Third-Party Links and Services

Our Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top
• Sending you an email notification for material changes
• Displaying a prominent notice on our Service

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry within 30 days.

17. Consent

By using our Service, you consent to our Privacy Policy and agree to its terms. If you do not agree with this policy, please discontinue use of our Service.