Privacy Policy
ViralMind GPT helps creators fetch their own social media performance data and receive AI-assisted content strategy. This Privacy Policy explains what data we collect, why we collect it, and how users can request deletion.
Information We Collect
- Account information such as email address and ViralMind user ID.
- OAuth tokens needed to connect supported platforms such as Instagram and YouTube.
- Connected-account profile details such as channel or account ID, display name, username, profile-picture URL, connection status, and last refresh time.
- Creator analytics returned by connected platforms, such as reach, views, saves, shares, comments, captions, thumbnails, and post metadata.
- Analysis-delivery records, such as which saved content items were included in a ViralMind analysis, when they were included, and the related credit entry.
- Payment-related metadata needed to credit user accounts, such as Razorpay order and payment IDs, amount, currency, and credits purchased. ViralMind does not store card numbers, UPI PINs, or banking passwords.
- Promo-code redemption records needed to enforce total and per-user usage limits.
How We Use Information
- To authenticate users and connect their ViralMind account to ChatGPT.
- To fetch creator KPIs only after the user authorizes the relevant platform connection.
- To generate content strategy, profile snapshots, hook ideas, caption improvements, and posting plans.
- To manage pay-as-you-go credits and prevent unauthorized account access.
- To show a private ViralMind dashboard and reuse the user’s most recently saved creator data when a live platform refresh is temporarily unavailable.
OAuth And Platform Data
ViralMind uses OAuth to let users connect their own social accounts. We do not ask users for their Instagram, Facebook, YouTube, or Google passwords. Platform access can be revoked by the user through the relevant platform settings.
Data Storage
ViralMind stores account records, credits, connected-account metadata, recent creator content metadata, analysis-delivery history, credit activity, promo redemptions, OAuth tokens, and selected generated artifacts in Supabase. OAuth tokens are kept in a separate server-only table and are not sent to the dashboard browser. Tokens are used only to provide user-requested ViralMind features.
Login Cookies
ViralMind uses secure, HTTP-only cookies to keep a user signed in to the private dashboard. These cookies are not available to page scripts and are not used for advertising.
Instagram Public Previews
The private Screenshots page may display official embeds for public Instagram Reels connected to the signed-in user. When an embed loads, the user’s browser may connect to Instagram and share standard browser connection information. ViralMind does not send the user’s Instagram access token or ViralMind login credentials with these embed requests.
Payments
Payments are processed by Razorpay using server-created payment orders. ViralMind verifies the payment signature and captured amount on the server and also receives signed webhook events to update user credit balances idempotently. We do not store card numbers, UPI PINs, or banking credentials.
Data Sharing
We do not sell user data. Data is shared only with service providers required to operate ViralMind, such as Supabase, Netlify, Razorpay, OpenAI/ChatGPT, Meta, and Google/YouTube, depending on the features used by the user.
User Control And Deletion
Users can disconnect Instagram or YouTube from the private dashboard. Disconnecting removes ViralMind’s stored provider token and the saved profile and content metadata for that social account. Users can request deletion of their full ViralMind account data and stored generated artifacts by contacting us at compliance@viralmindgpt.in.
Security
ViralMind uses HTTPS, short-lived one-time OAuth state, PKCE for dashboard Google login, HTTP-only login cookies, rate limits, server-side token access controls, row-level database rules, and restrictive browser security headers. No system can be guaranteed completely secure, but we aim to collect only what is needed for the product to work.
Contact
For privacy questions or deletion requests, email compliance@viralmindgpt.in.