1. Introduction

ViralVibes ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it.

We process data in accordance with applicable privacy law, including the General Data Protection Regulation (GDPR) where applicable.

2. Information We Collect

We collect the following categories of information:

• Account data: Your name and email address provided via Google OAuth when you sign in.
• Usage data: Pages visited, features used, and interactions within the Service — collected via Vercel Web Analytics (privacy-focused, no cookies, no cross-site tracking).
• User content: Playlist URLs and dashboard data you submit or save.
• Communications: Email addresses submitted via the newsletter signup form.

3. How We Use Your Data

We use the information we collect to:

• Provide, operate, and improve the Service.
• Authenticate your account and maintain session security.
• Store your saved dashboards and analysis history.
• Send product updates or newsletters (only where you have opted in).
• Understand how the Service is used in aggregate to guide product decisions.

4. Data Storage and Security

Account and dashboard data is stored in Supabase, a cloud database provider, with servers located in the European Union (AWS eu-west-2 / eu-central-1). Data is encrypted in transit (TLS) and at rest.

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

5. Third-Party Services

The Service integrates with the following third-party services, each governed by their own privacy policies:

• Google OAuth — for authentication. Subject to Google's Privacy Policy.
• YouTube Data API — for public channel and playlist data. Subject to YouTube's Terms of Service.
• Supabase — for database and storage. Subject to Supabase's Privacy Policy.
• Vercel — for hosting and analytics. Subject to Vercel's Privacy Policy.

6. Cookies

ViralVibes uses only a single session cookie required for authentication. We do not use advertising cookies or third-party tracking cookies.

Our analytics provider (Vercel Web Analytics) does not use cookies and does not track users across sites.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to or restrict certain processing.
• Data portability — receive a copy of your data in a structured format.

To exercise any of these rights, please contact us at privacy@viralvibes.app. We will respond within 30 days.

8. Data Retention

We retain your account data for as long as your account is active. Newsletter subscribers are retained until you unsubscribe. You may request deletion of your data at any time.

9. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact

For privacy-related questions or requests, please contact us at privacy@viralvibes.app.