Privacy Policy

Who is responsible for your data

Viralnik is provided by Neatsoft Sp. z o.o., ul. Solipska 3/5, 02-482 Warszawa, Poland, KRS 0000980365, NIP 5223229943. The company decides why and how your personal data is processed, which makes it the data controller under the EU General Data Protection Regulation (GDPR). Questions about your data: info@viralnik.ru.

What data we process

• Your Viralnik account: email address, password hash and settings.
• A connected Instagram account (via the Instagram API with Instagram Login, only with your consent): account ID and username, profile picture, follower count, the list of your posts, comments on them, the Direct messages the service sends on your behalf, and the access token (stored encrypted).
• People who comment on your posts or message you in Direct on posts with an active funnel: their Instagram-scoped ID, username and the text of the comment or message. We use this data only to reply to that person on your behalf and to show you funnel statistics.
• A connected YouTube channel (via Google sign-in, only with your consent): channel ID, title, URL and avatar, subscriber count and access tokens (stored encrypted). The videos you schedule in the calendar are uploaded to this channel.
• YouTube topic search: your search query and the video and channel titles, thumbnails and view, like and comment counts returned by the YouTube API, as well as the IDs and links of videos you uploaded through Viralnik.
• Telegram: your bot token (stored encrypted), the IDs and names of users who started your bot, and whether they are subscribed to your channel.
• Website visits: if you allow cookies, Yandex Metrica and the VK Ads pixel run on the home page and on the sign-in and sign-up pages. They receive the page address, the referrer, your device and browser type and your actions on the page. See Cookies for details. There are no analytics counters inside the app.
• Videos and files: videos you upload, frames, transcripts and processing results; public metrics of videos from public accounts you added for analysis.

Why we process data and on what legal basis

We use your data to:

• publish videos to your Instagram account and YouTube channel on schedule;
• reply to comments and send Direct messages according to the rules you set up;
• check subscriptions to your Telegram channel and deliver the promised material;
• show you statistics for your videos and funnels.

We do not sell data, do not show ads and do not use Instagram or YouTube data for anything other than the purposes above. One user's data is never visible to other users.

Legal bases under the GDPR: performance of our contract with you (Art. 6(1)(b)) for your account, connected accounts, publishing, funnels and the Telegram bot; legitimate interest (Art. 6(1)(f)) for replying to people who wrote a keyword or a message to the creator themselves and for protecting the service from abuse; consent (Art. 6(1)(a)) for visit analytics. You can withdraw your consent at any time.

Who we share data with

• Meta (Instagram), Google (YouTube) and Telegram, only to the extent needed to deliver your posts and messages;
• DeepSeek: the texts you ask us to generate a caption or keyword variants from. Commenters' personal data is never sent there;
• Yandex (Metrica) and VK (VK Ads pixel): data about visits to public pages, to measure where visitors come from. Only if you allowed cookies;
• the hosting provider whose servers run the service.

Speech recognition runs on our own servers; videos are not sent to third-party services.

Where data is stored

Viralnik's servers are located in Belarus. Some of the recipients listed above also operate outside the European Economic Area: Meta and Google in the USA, DeepSeek in China, Yandex and VK in Russia. Data is transferred to countries without an adequacy decision of the European Commission under the EU Standard Contractual Clauses (Art. 46 GDPR) or because the transfer is necessary to fulfil your request, for example to publish a video to your account (Art. 49(1)(b) GDPR).

Google and YouTube data

Viralnik's YouTube features use YouTube API Services. Viralnik requests two permissions from Google: youtube.upload, to upload to your channel the videos you scheduled yourself, and youtube.readonly, to show which channel is connected (title, avatar, subscriber count) and to search public Shorts by a topic you enter. We do not modify or delete your videos, do not read comments or private channel data, do not share data received from Google with third parties and do not use it to train AI models.

By connecting YouTube you agree to the YouTube Terms of Service; your data is also processed under the Google Privacy Policy. You can revoke access at any time: disconnect the channel in My accounts (we revoke the token with Google immediately) or remove Viralnik on the Google third-party access page.

Viralnik's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep data

• events from Instagram (incoming webhooks): 14 days;
• video metrics history: 90 days;
• account data, tokens and funnel statistics: while you use the service or until you ask us to delete them;
• YouTube channel data is refreshed daily and never kept unrefreshed for more than 30 days; YouTube search results and video thumbnails are kept for no more than 30 days; tokens are kept until you disconnect the channel. If you revoke access in your Google account, we delete the channel data within 30 days; if you disconnect the channel in Viralnik or delete your account, we delete it right away, and in any case within 7 days.

How to delete your data

Disconnect the account in My accounts or remove the app in Instagram (Settings → Apps and websites). We immediately delete the access token and profile data and revoke YouTube access with Google. Your whole Viralnik account, together with videos, funnels and statistics, is deleted in Settings with the Delete account button; if you cannot sign in, email info@viralnik.ru and we will delete it within 7 days. See Data deletion for details.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict its processing, receive it in a machine-readable format and object to processing based on legitimate interest. Write to info@viralnik.ru and we will reply within one month. If you believe we are violating your rights, you can lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or with the supervisory authority in your country of residence.

Security

Instagram, YouTube and Telegram tokens are stored encrypted (AES-256-GCM), connections are protected with HTTPS and incoming Meta webhooks are verified by signature. To report a vulnerability, email info@viralnik.ru.

Contact

Questions about your data and requests to exercise your rights: info@viralnik.ru. Postal address: Neatsoft Sp. z o.o., ul. Solipska 3/5, 02-482 Warszawa, Poland.