Privacy Policy

This Privacy Policy describes how Viral AI Lab (“Viral AI Lab,” “we,” “us,” or “our”) collects, uses, and protects information when you use our website at viralailab.appand our related services (collectively, the “Service”). By using the Service, you agree to the practices described in this policy.

1. Information we collect

Account information

When you sign in or create an account, we collect your phone number for the purpose of one-time-password (OTP) authentication via SMS. We do not collect or store passwords because the Service does not use them.

Waitlist information

When you join our waitlist, we collect your phone number, IP address, user-agent string, and timestamp. This information is used to manage your waitlist position and to prevent automated abuse.

Content you upload

To generate videos, you upload reference video clips and character images. These files are stored privately in our cloud storage and passed to our AI generation provider solely to produce your output. We delete the original input files shortly after the generation completes (typically within 30 minutes).

Generated outputs

Videos generated through the Service are saved to your account history until you delete them. You can download or remove them at any time.

Usage analytics

We use a third-party analytics provider to collect aggregated event data about how visitors interact with the Service (page views, button clicks, generation completions). This data helps us improve the product and is not used for marketing or advertising.

Device and log information

Like most web services, our servers automatically record standard log information when you visit, including your IP address, browser type, device type, and the pages you visit. This data is used for security, debugging, and abuse prevention.

2. How we use information

• To verify your identity through SMS one-time passwords
• To process and deliver the video generations you submit
• To prevent fraud, abuse, and unauthorized account access
• To improve the Service through aggregated, anonymized analytics
• To send you transactional notifications related to your account (sign-in codes, generation completions, important service updates)
• To comply with legal obligations

3. Information we do NOT do

• We do not sell your personal information to anyone.
• We do not rent, license, or trade your phone number to third parties.
• We do not share your information for marketing or promotional purposes.
• We do not use your phone number for messages other than account verification and account-related notifications.

4. Service providers we use

We work with the following processors to operate the Service. Each operates only on our behalf under their respective privacy and security commitments:

• Supabase— database, authentication, file storage
• Twilio— SMS delivery for verification codes
• Kling AI— AI video generation
• Railway— application hosting
• PostHog— aggregated, anonymized usage analytics

5. SMS messaging

We send SMS messages to deliver one-time verification codes and account-related notifications. Standard message and data rates may apply depending on your mobile plan. You may opt out of non-essential SMS messages at any time by replying STOP to any message we send. Note that opting out of SMS will prevent you from signing in via OTP. For help, reply HELP or email us at support@viralailab.app.

6. Data retention

• Account profile and phone number: retained until you delete your account.
• Uploaded reference media and character images: deleted shortly after the generation completes.
• Generated output videos: retained in your account history until you delete them or close your account.
• Analytics events: retained in aggregated, anonymized form for up to 12 months.
• Server access logs: retained for up to 90 days for security and debugging.

7. Your rights and choices

You may request to access, correct, or delete the personal information we hold about you. To delete your account and associated data, email support@viralailab.app. We will process such requests within 30 days.

8. Security

We use industry-standard safeguards to protect your information, including encryption in transit (HTTPS), private storage buckets, and row-level security on our database. No system is completely secure, but we work hard to minimize risk and respond quickly to incidents.

9. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International users

The Service is operated from the United States. By using the Service, you consent to the transfer and processing of your information in the United States and any other country where our service providers operate.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the “Last updated” date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact us

Questions or concerns? Email support@viralailab.app.