Privacy Policy

This Privacy Policy explains how Virals! (“we”, “us”) collects, uses and protects information when you use the Virals! platform. Virals! is powered by Yefta.net and built by Kreatif.ninja.

1. Information we collect

• Account data: your name, email address, hashed password and, optionally, phone/WhatsApp number, company and website.
• Assets you add: website URLs and social media usernames/URLs you choose to analyze, plus keywords and competitors you track.
• Analysis data: publicly available website signals collected by our crawler, and data returned by official APIs you connect (e.g. YouTube Data API, Instagram Graph API, TikTok API, Facebook Graph API, X API, Google PageSpeed Insights, search data providers).
• Data you provide manually: metrics you enter yourself (labeled “User-provided”).
• Technical data: IP address, browser user agent, session identifiers and security logs (e.g. sign-in attempts).

2. How we use information

• To provide analyses, scores, historical tracking, reports, notifications and recommendations.
• To secure the service: authentication, rate limiting, fraud and abuse prevention (including Google reCAPTCHA).
• To communicate with you about your account, reports and support requests.
• If an AI provider is enabled by the operator, relevant analysis data (not your password or API keys) may be sent to that provider to generate summaries and recommendations.

3. What we do not do

• We do not sell your personal information.
• We do not access private competitor data. Competitor analysis uses publicly available or legitimately provided data only.
• We do not bypass platform authentication, API restrictions or terms of service.

4. Third-party services

Depending on configuration, Virals! may use: Google reCAPTCHA, Google PageSpeed Insights, YouTube Data API, Meta (Instagram/Facebook) Graph API, TikTok API, X API, search ranking data providers (e.g. SerpApi), AI providers (OpenAI or Anthropic), email delivery (SMTP) and WhatsApp click-to-chat links. Each provider processes data under its own privacy policy.

5. Security

Passwords are hashed (Argon2id/bcrypt) and never stored in plain text. API credentials are encrypted at rest. We use HTTPS, secure cookies, CSRF protection, rate limiting and role-based access controls. No method of transmission or storage is 100% secure, but we work to protect your data.

6. Data retention

Historical snapshots are kept while your account is active so you can compare performance over time. You can delete assets (and their history) at any time, or delete your account from Settings. Security logs are retained for a limited period.

7. Your choices and rights

You can access and update your profile, export reports (PDF/CSV), manage email notifications and delete your account. Depending on where you live, you may have additional rights (such as access, correction or deletion). Contact us to exercise them.

8. Children

Virals! is not intended for people under 18.

9. Changes

We may update this policy. Material changes will be communicated in the app or by email.

10. Contact

Questions? Email me@yefta.net or use the contact page.