Back to Studio

Privacy Policy

1. Introduction

Welcome to Viralth ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

  • Personal Information: When you sign in with Google, we collect your name, email address, and profile picture.
  • User Content: We collect images you upload (backgrounds, faces) and the thumbnails generated by our AI.
  • Usage Data: We may collect information about how you access and use the service, such as your IP address, browser type, and access times.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our services.
  • Process your transactions and manage your credits.
  • Improve, personalize, and expand our services.
  • Communicate with you, including for customer service and updates.

4. Data Storage and Security

Your data is stored securely using Supabase (database) and Cloudflare R2 (storage). We implement appropriate technical and organizational security measures to protect your personal information. However, please note that no method of transmission over the internet is 100% secure.

5. Third-Party Services

We use third-party services such as Google (for authentication and AI generation) and Stripe (for payments). These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

5c. Your saved face photos (“My face”)

  • If you choose to save photos of yourself, we store up to 5 of them to use as references when you generate a thumbnail with your face. It is optional; you can always upload a photo for a single thumbnail instead, and that photo is not kept as a reference.
  • Legal basis: your explicit consent, which you give before the first upload and which we record with its date and the wording you accepted. You can withdraw it at any time; we stop using the photos the moment you do.
  • Where: in a private storage bucket that only your account and our server can read. The photos are never public and have no shareable link.
  • Who processes them: Supabase stores them for us; Google's Gemini API receives up to 3 of them only while generating a thumbnail with your face, to produce that image.
  • What we never do: use them for anything other than your own thumbnails, show them to anyone else, or use them to identify you. Upload only photos of yourself — using someone else's likeness requires their permission.
  • How long: until you delete them (one photo at a time, or all at once, which also withdraws consent). If you ask us to close your account, we delete them with it.

5b. YouTube API Services

If you connect a YouTube channel, Viralth uses the YouTube API Services. Connecting is optional and separate from signing in; nothing is read from YouTube until you do it.

  • What we read: your channel's id, name and avatar, and the titles, ids and thumbnails of your recent uploads. If you allow it (optional), each video's daily thumbnail impressions and click-through rate from YouTube's reporting service. We ask Google for three permissions — to see your channel's videos, to set their thumbnails and, optionally, to read those reports — and cannot upload, edit or delete videos.
  • What we store: the channel's id, name and avatar; the refresh token Google issues, kept encrypted in our database's secret store; which thumbnail you published to which video and when; and, with the optional permission, those daily impressions and click-through figures for up to 180 days. The list of your videos is fetched when you open it and is not stored.
  • How we use it: to show your recent videos so you can take a title from one, to set a video's thumbnail when you press Publish, and to show you that video's click-through rate before and after. Nothing is changed on your channel without that action.
  • Automatic drafts (off unless you turn them on): YouTube notifies us when your channel publishes a video; we read that video's title and make thumbnails from it, spending your credits up to the monthly limit you set, and email you. They are drafts: nothing is set on your channel until you publish one.
  • Sharing: your YouTube data is not sold or shared with anyone. It is only sent back to Google to carry out the action you asked for.
  • Removing access: Disconnect in your Dashboard revokes Viralth's access at Google and deletes at once the token, the channel details, the reach figures, the record of published thumbnails and the drafts' video titles. You can also revoke it from your Google security settings; deleting your Viralth account deletes it too.

By connecting a channel you agree to be bound by the YouTube Terms of Service, Google Privacy Policy, Google security settings (revoke access)

6. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@viralth.com

Last updated: October 2026