Privacy Policy

1. Introduction

Qviral.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website qviral.ai and use our AI-powered social media automation services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account and subscribe to our services
• Complete SMS verification during signup
• Make subscription payments or purchase booster packs
• Contact us via email or support channels
• Upload content or provide business information for AI content generation
• Connect your social media accounts

This information may include:

• Name and business information (restaurant name, location details)
• Contact information (email address, phone number)
• Payment information (processed securely through third-party payment processors)
• Account credentials (username, password - encrypted)
• Subscription history and usage data
• Social media account information and access tokens
• Content preferences and AI generation settings
• Images, videos, and text you provide for content creation

2.2 Automatically Collected Information

When you access our website or services, we may automatically collect:

• Device information (IP address, browser type, operating system, device identifiers)
• Usage data (pages visited, features used, time spent, click patterns)
• Location data (for multi-location management features)
• Cookies and similar tracking technologies
• API usage metrics and generation statistics

2.3 Social Media Integration Data

To provide our automated posting services, we collect:

• Social Media Account Access: Access tokens and permissions for Instagram, TikTok, Facebook, and LinkedIn
• Publishing Data: Post performance metrics, engagement statistics, follower counts
• Content Metadata: Timestamps, captions, hashtags, and posting schedules

We only request the minimum permissions necessary to post content on your behalf. You can revoke access at any time through your social media account settings.

2.4 SMS Verification Data

For account security and US-only service delivery:

• Phone Numbers: US phone numbers for SMS verification during signup
• Verification Status: Records of verification attempts and success
• SMS Service Provider: We use Twilio for SMS delivery and verification

Phone numbers are used solely for account verification and security purposes. We do not use your phone number for marketing without explicit consent.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Generate AI-powered content, post to social media platforms, manage your subscriptions and locations
• Content Generation: Use your business information, uploaded images, and preferences to create personalized social media content using artificial intelligence and machine learning technologies
• Payment Processing: Securely process subscription payments and booster pack purchases through trusted third-party payment processors
• Account Verification: Verify US phone numbers via SMS to ensure service eligibility
• Account Management: Create and manage your user account, authenticate users, manage multi-location access
• Customer Support: Respond to inquiries, provide technical support, resolve issues
• Communication: Send important updates, usage reports, and notifications about your subscriptions
• Service Improvement: Analyze usage patterns to improve AI quality, develop new features, optimize content performance
• Legal Compliance: Comply with legal obligations, prevent fraud, protect our rights
• Marketing: Send promotional materials about new features and upgrades (with your consent, you may opt-out anytime)

4. Information Sharing and Disclosure

4.1 With AI and Content Generation Service Providers

We share necessary information with artificial intelligence and machine learning service providers to generate your content, including:

• Image Generation: AI services that create images and graphics based on your prompts
• Video Generation: AI services that produce and edit video content
• Text Generation: AI services that create captions, descriptions, and written content
• Audio Generation: AI services that may be used for voice and audio content

These providers process your content according to their privacy policies. We do not share personally identifiable information beyond what's necessary for content generation. We carefully select providers that maintain high security and privacy standards.

4.2 With Social Media Platforms

We share content with social media platforms as directed by you:

• Supported Platforms: Instagram, TikTok, Facebook, LinkedIn, and other social media platforms you connect
• Publishing Services: Third-party APIs and services that facilitate automated posting
• Content Data: Images, videos, captions, and scheduling information you authorize us to post

4.3 With Service Providers

We may share information with third-party service providers who perform services on our behalf:

• Payment Processors: Trusted payment processing services for secure billing and subscription management
• SMS Verification Services: Phone number verification providers for account security
• Cloud Infrastructure: Cloud hosting and storage providers for reliable service delivery
• Database Services: Secure database providers for data storage and management
• Analytics: Usage analytics and performance monitoring tools
• Email Services: Email delivery services for transactional emails and notifications
• CDN Providers: Content delivery networks for fast, reliable access

All service providers are carefully vetted and contractually obligated to protect your data and use it only for the purposes we specify.

4.4 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government or regulatory requests
• Protection of our rights, property, or safety
• Prevention of fraud or illegal activities

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure password storage using industry-standard hashing (bcrypt)
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Employee training on data protection
• Secure payment processing (PCI DSS compliant via Stripe)
• Secure API communications with all third-party services
• Regular data backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security.

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Receive your data in a portable format
• Objection: Object to processing of your information for certain purposes
• Restriction: Request restriction of processing
• Withdraw Consent: Withdraw consent for processing (where applicable)
• Opt-Out: Unsubscribe from marketing communications
• Revoke Social Media Access: Disconnect social media accounts at any time

To exercise these rights, please contact us at info@qviral.ai

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate and secure your account
• Analyze site usage and improve performance
• Provide personalized content recommendations
• Track content generation and posting success rates

You can control cookies through your browser settings. However, disabling cookies may limit functionality of our services.

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill subscription commitments
• Comply with legal, tax, and accounting obligations (typically 7 years for financial records)
• Resolve disputes and enforce our agreements
• Maintain audit trails and usage analytics

When information is no longer needed, we securely delete or anonymize it.

Content Retention:

• Generated Content: AI-generated images and videos are stored for 90 days after posting
• Source Materials: Uploaded images and content are retained for the duration of your subscription
• Social Media Tokens: Access tokens are revoked immediately upon account deletion or disconnection

9. Third-Party Links

Our website and services may contain links to third-party websites or services (e.g., social media platforms, AI providers, payment processors). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, and shared
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your rights

To exercise your CCPA rights, contact us at info@qviral.ai

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). We process your information based on:

• Contract: To fulfill our services to you
• Legitimate Interests: To improve our services and prevent fraud
• Consent: For marketing communications (you may withdraw anytime)
• Legal Obligation: To comply with applicable laws

You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

12. International Data Transfers

Our services operate globally and may involve transfers of your information to:

• United States: Primary data storage and processing infrastructure
• Service Providers: AI, payment, and cloud infrastructure providers, primarily located in the United States
• Social Media Platforms: Based on your connected accounts and their data centers worldwide

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses and compliance with applicable data protection laws (GDPR, CCPA, and other privacy regulations).

13. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected information from a child under 13 without parental consent, we will take steps to delete that information promptly.

14. Account Deletion

How to Delete Your Account

You can delete your Qviral.ai account at any time by:

1. Logging into your dashboard
2. Going to Account Settings
3. Scrolling to "Account Management"
4. Clicking "Delete Account"
5. Confirming the deletion

Note: You cannot delete your account if you have an active subscription. Please cancel your subscription first, then wait until the current billing period ends.

What Happens When You Delete Your Account

Data That Is Deleted:

• Your phone number and contact information
• Your name and business profile information
• All uploaded images and source content
• Social media connection tokens (access is revoked)
• AI generation preferences and settings
• All generated content (images, videos, captions)

Data That Is Kept (Anonymized):

• Subscription records: Historical subscription data for audit and financial record-keeping, with all personally identifiable information removed
• Transaction records: Financial transaction records for accounting and tax compliance (anonymized)
• Usage analytics: Aggregated, anonymized usage statistics for service improvement
• Account identifier: Account ID for data integrity, cannot be linked back to you

Data Retention Period

Anonymized data (subscription records, transaction records) is retained for 7 years for audit, accounting, and legal compliance purposes. However, all personally identifiable information is permanently deleted within 30 days of account deletion request.

Alternative: Email Request

If you cannot access your account, you may request account deletion by emailing us at info@qviral.ai with your registered phone number and email address.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification (for significant changes)
• Displaying a notice in your dashboard (for service users)

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

16. Contact Us

By using our services, you acknowledge that you have read and understood this Privacy Policy.