Last updated: August 1, 2026 · Effective: August 1, 2026
This Privacy Policy describes how Gantima ("Viral Volt", "we", "us") collects, uses, and shares information when you use viralvolt.ai (the "Service"). By using the Service, you agree to this Privacy Policy and our Terms of Service.
Account information: name, email address, password (hashed), and profile preferences when you create an account.
Subscription & payment information: billing details processed by Stripe. We never store your full credit card number on our servers.
Connected social platform data: when you connect a TikTok, Instagram, YouTube, X, or other social account, we receive and store your OAuth access token and refresh token, plus profile information the platform provides (username, user ID, avatar URL, follower/subscriber counts, and the specific scopes you approved). We also store metadata for content you publish, schedule, or analyze via the Service (post IDs, captions, timestamps, engagement metrics). You can disconnect any platform in Account → Connections and, separately, revoke access from the platform's own security settings.
Usage data: the tools you use, prompts you submit, videos generated, hashtags created, and frequency of use, so we can improve the product and enforce plan limits.
Device & log data: IP address (which we truncate for analytics), browser type, device identifier, operating system, referring URL, and timestamps.
Cookies & similar tech: essential cookies for session management, functional cookies for preferences, and analytics cookies. You can disable non-essential cookies in your browser settings or in our cookie banner (EU/UK visitors).
To provide and improve the Service, process payments, personalize your experience, publish content to platforms you have connected, calculate analytics you have requested, send transactional emails (receipts, password resets, plan changes), respond to support requests, detect and prevent fraud or abuse, and comply with legal obligations.
Prompts you submit to our AI features are sent to our AI providers (currently Google's Gemini and Veo 3 APIs). Content you submit may be processed by those providers in accordance with their privacy policies. We do not use your prompts to train our own models. If we add other AI providers in the future, we will update this section and notify existing users.
We share personal data only with:
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA).
We retain account data while your account is active and for up to 12 months after deletion for tax, accounting, and legal-compliance purposes. Generated content history is retained for 90 days unless you save or download it. Backups are rotated on a 30-day cycle. When we no longer need personal data, we delete or anonymize it.
Depending on where you live, you may have rights to:
To exercise any of these rights, email viralvolt-privacy@gantima.com with the subject line "Verifiable Consumer Request" and include the email address associated with your account. We will verify your identity (usually by confirming account ownership) and respond within 45 days as required by applicable law. Authorized agents may submit a request on your behalf with written authorization.
California residents may also request the categories of personal information we collect and the purposes for which we use it — that information is provided throughout this Policy.
The Service is not intended for users under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe a child has provided us data, email viralvolt-privacy@gantima.com and we will delete it.
We use industry-standard safeguards: TLS in transit, AES-256 at rest, AWS Cognito for authentication, least-privilege IAM roles, and encrypted secret storage. No system is 100% secure, but we take reasonable measures to protect your data. If you discover a vulnerability, please report it responsibly to viralvolt-security@gantima.com.
If we experience a data breach affecting your personal information, we will notify you and, where required, the appropriate supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33 and applicable U.S. state breach-notification laws.
Your data may be processed in the United States and other countries where our service providers operate. For transfers of EU/UK personal data outside the EEA/UK, we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the UK IDTA. Contact us for a copy.
We may update this Policy. Material changes will be announced via email or in-app notice at least 7 days before taking effect. The "Last updated" date at the top reflects the current version.
Questions or requests: viralvolt-privacy@gantima.com. Security reports: viralvolt-security@gantima.com.
EU/UK users: if you feel we have not addressed your concern, you may contact your local data-protection authority.
Gantima · viralvolt.ai