Privacy policy

What we store

• Account: your username and sign-in details (via Supabase Auth). No email is needed.
• Brand data: products, accounts, plans, generated stills, clips and exported videos, stored privately in your folder.
• Brand faces: live photos of a person who consented, their typed name, the time, a one-way hash of their network address, and fingerprints of the photos as a consent record. Face photos are biometric-adjacent data: we use them only to generate that brand's videos and never for identification or training.
• API keys you add, encrypted in Supabase Vault. We only ever show the last 4 characters.
• Public post data from TikTok and Instagram scans (captions, counts, links). We analyze a trending video once and do not keep the video file.

Who processes it

• Supabase (database, storage, functions), Vercel (website hosting).
• Higgsfield receives the prompts and reference images needed for each generation (through Viral Scout's account).
• Stripe handles card payments for credits. We never see or store your card details.
• Anthropic Claude analyzes trending videos (cover image and caption), checks consent photos (one adult, same person, not a photo of a screen) and writes plans. If you add your own Google Gemini key, Gemini does this for you instead.
• Apify collects public post data for scans.

Your choices

• Download all your data or delete your account at any time in Settings. Deleting removes your files, faces, consent records, keys and rows.
• A person who appears as a brand face can withdraw consent by asking the brand to delete the face, or by reporting at /report.
• Questions: support@viralscout.app.

Retention

Data stays until you delete it or your account. Higgsfield keeps its own copies of outputs for about 7 days. Scan data older than 90 days may be removed.