Política de Privacidad

Última actualización: 31 de agosto de 2026

VIRAL DAY LLC, a legal entity, acting as Data Controller under applicable data protection laws including GDPR and CCPA, presents our Privacy Policy, which establishes how personal data collected through the "Viral Day" platform is processed.

1. Important Definitions

Personal Data: Any information related to an identified or identifiable natural person.
Processing: Any operation performed with personal data.
Data Subject: Natural person to whom personal data refers.
Controller: Legal entity responsible for decisions regarding personal data processing.
Legal Basis: Legal foundation that authorizes personal data processing.

2. Legal Bases for Processing

We process personal data based on the following legal grounds:

Consent: When you expressly authorize the collection and use of your data.
Contract Performance: To provide services requested by you.
Legitimate Interest: When necessary to improve our services and user experience.
Legal Obligation Compliance: To meet legal and regulatory requirements.

3. Personal Data Collected

3.1 Data provided directly by the user:

Identification and contact data (name and email)
Preferences and interests (dark mode, heat map [where and when clicked])

3.2 Automatically collected data:

Device Data:
- Unique identifiers (device ID)
- Operating system
- Device model
- Application version
Usage Data:
- IP address
- Geolocation data
- Application interaction logs
- Viewed offers history

4. Processing Purposes

Service Provision:
- Availability of personalized offers
- Processing interactions with offers
- Sending notifications about promotions
Service Improvement:
- Analysis of usage patterns
- Development of new features
- Conducting research and statistical analysis
Security:
- Protection of user rights

5. Data Sharing

We may share your data with:

Service providers: Trusted companies that assist us in operating the platform (cloud hosting, analytics, customer support) under strict data protection agreements.
AI apps you connect: Only when you expressly authorize it, as described in Section 5.1 below.
Legal compliance: When required by law, court order, or to protect our rights and users' safety.

We will NEVER sell your personal data to third parties.

5.1 AI apps you connect

You may connect third-party AI apps (for example Claude, ChatGPT, Cursor, VS Code or Gemini) to your account through the platform's MCP server, using the OAuth standard. A connection only exists if you start it from the AI app and approve it on a consent screen of the platform, where you choose the workspace and the permissions granted.

What is shared. While the connection is active, and only when you ask the AI app for something, it receives: your name, plan and credit balance; titles, descriptions, thumbnails and the video files of the projects and clips in the chosen workspace; and the analyses generated about them (transcripts, scores and suggested segments). Your e-mail, phone number and payment details are not shared through this channel.

Purpose. Carrying out the requests you yourself make to the AI app (listing projects, estimating and creating clips, rendering), within the permissions and the daily credit budget you set at consent.

Independent controller. The AI app vendor is a third party that processes this data as an independent controller under its own privacy policy, not as our processor. We recommend reading the vendor's policy before connecting.

International transfer. These vendors process data outside Brazil and possibly outside your country. The transfer relies on your specific and prominent consent, collected on the consent screen (for Brazilian users, under Article 33, item VIII of the LGPD), and is limited to the data and permissions you authorized.

Retention. The authorization record (app, workspace, permissions, date and origin of consent) and the connection's usage log are kept for 90 (ninety) days after revocation, for security, audit and request-handling purposes, and deleted afterwards.

Revocation. You can revoke a connection at any time under Settings › Connected apps in the app. Revocation immediately stops the AI app's access; data it has already received remains subject to the vendor's policy, and you may exercise your rights directly with the vendor.

6. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

Data encryption in transit and at rest
Strict access controls
Continuous security monitoring
Regular team training in security practices
Data backup and recovery policy

7. Your Rights

Under applicable data protection laws (GDPR, CCPA), you have the following rights:

Confirmation and Access: Know if we process your data and access it.
Correction: Request correction of incorrect or outdated data.
Anonymization, Blocking or Elimination: Request these actions for unnecessary or excessive data.
Portability: Receive your data in structured format.
Deletion: Request deletion of your personal data.
Information: Be informed about data sharing.
Consent Revocation: Withdraw your consent at any time.
Objection: Object to processing based on legitimate interest.

8. Account Deletion

You can delete your account at any time by accessing Settings → Security within the application.

Important: Account deletion is a permanent and irreversible action. When you delete your account:

All your personal data will be removed from our systems
All created content, videos, projects, and settings will be permanently deleted
Connections with third-party platforms (YouTube, TikTok, Instagram) will be unlinked
Usage history and preferences will be eliminated
It will not be possible to recover the account or any information associated with it afterwards

We recommend that you back up any important content before requesting account deletion.

9. Retention Period

We maintain your personal data for the time necessary to:

Fulfill the purposes for which they were collected
Meet legal and regulatory obligations
Exercise rights in judicial or administrative proceedings

After the necessary period, data will be deleted or anonymized.

10. Cookies and Similar Technologies

We use cookies and similar technologies to:

Improve browsing experience
Personalize content and offers
Analyze application usage

You can manage your cookie preferences through the application settings.

11. Transferencias Internacionales de Datos

La prestación de los servicios de la Plataforma implica operaciones internacionales de almacenamiento, acceso y tratamiento de datos, como se describe a continuación.

11.1 Infraestructura en Estados Unidos

La base de datos, el frontend, las aplicaciones y el backend de la Plataforma están alojados y operados en Estados Unidos. Por ello, los datos de registro y de cuenta, los registros de uso y los demás datos descritos en esta Política pueden almacenarse y tratarse en ese país para operar, mantener, proteger y brindar soporte a la Plataforma.

11.2 Tratamiento temporal de videos en Asia

Únicamente los archivos de video enviados por el usuario pueden transmitirse de forma segura y ser tratados automáticamente por proveedores de servicios en entornos ubicados en China, Taiwán y Japón. Este tratamiento se realiza exclusivamente para prestar las funciones de análisis de video y generación de clips solicitadas por el usuario.

Los videos pueden contener datos personales, incluidas imágenes, voces y otra información presente en el propio contenido. Los datos de registro y la base de datos de la Plataforma no se transfieren a estos tres países como parte de este tratamiento de video.

Los archivos de video permanecen en estos entornos de tratamiento por un plazo máximo de 60 (sesenta) días naturales desde su envío y se eliminan de dichos entornos después de ese período.

11.3 Garantías y derechos del titular

Los proveedores involucrados actúan como encargados o subencargados del tratamiento, deben tratar los archivos de acuerdo con nuestras instrucciones y no están autorizados a utilizarlos para fines propios. Seguimos siendo responsables de las decisiones relativas al tratamiento de los datos personales.

Las transferencias internacionales se realizan para prestar los servicios solicitados por el usuario y se basan en los mecanismos aplicables exigidos por la legislación de protección de datos, incluida, según corresponda, la necesidad contractual y las garantías contractuales. Aplicamos medidas como la minimización de datos, obligaciones de confidencialidad, controles de acceso, protección de los datos durante la transmisión y medidas de seguridad adecuadas a los riesgos del tratamiento.

Las transferencias a aplicaciones de IA conectadas por ti no se rigen por esta sección: se realizan bajo el régimen propio de la Sección 5.1 (el proveedor como responsable independiente, con base en tu consentimiento específico).

Puedes solicitar información adicional sobre las transferencias internacionales y ejercer los derechos descritos en la Sección 7 a través del canal indicado en la Sección 17.

12. Use of Artificial Intelligence

We use Artificial Intelligence (AI) technologies to enhance functionality, security, and personalization of the user experience on the platform. AI applications include, but are not limited to:

Facial recognition:
- Identification of who is speaking in the scene, with the objective of automatically suggesting visual focus in generated short videos.
- Analysis of interactions and usage patterns to improve accuracy and relevance of suggestions.
- Continuous optimization of content editing and consumption experience.
Audio transcription:
- Automatic conversion of speech to text to facilitate indexing, searching, and video editing.
- Analysis of preferences and consumption patterns to suggest relevant cuts and themes.
- Identification of recurring topics and content trends.
Security:
- Detection of suspicious activities
- Fraud prevention
- Protection against platform misuse
Speech diarization:
- Separation of speech by speaker with the objective of refining automated editing and cut personalization.
- Extraction of contextual information such as accent, regionalism, and humor.

AI systems are used ethically and transparently, always respecting your privacy and applicable data protection principles.

13. YouTube Integration

13.1 YouTube Account Connection

When you connect your YouTube account to our platform, you authorize us to:

Publish videos: Upload content created on our platform directly to your YouTube channel
Update videos: Modify titles, descriptions, tags, and other properties of videos published through our platform
Delete videos: Remove from YouTube only videos that were originally published through our platform

13.2 Access Limitations

We can only manage videos that were published through our platform
We do not have access to or ability to modify videos you published directly on YouTube
You can revoke these permissions at any time through your Google/YouTube account settings

13.3 YouTube Data Collection

When you connect your YouTube account, we collect:

Basic channel information: Channel name, channel ID, profile picture
Published video statistics: Views, likes, comments for videos created through our platform
Upload status: Information about successful or failed uploads

13.4 Use of YouTube Information

We use YouTube data to:

Facilitate content publishing
Display performance statistics for your videos
Improve our integration functionality
Provide technical support when needed

13.5 YouTube Policy Compliance

Our integration is in full compliance with:

YouTube Terms of Service
YouTube Privacy Policy
YouTube API Services Terms of Service

Important: You can disconnect your YouTube account at any time through the platform settings, which will revoke all granted permissions.

14. TikTok Integration

14.1 TikTok Account Connection

When you connect your TikTok account to our platform, you authorize us to:

Publish videos: Upload content created on our platform directly to your TikTok profile
Update videos: Modify titles, descriptions, hashtags, and other properties of videos published through our platform
Delete videos: Remove from TikTok only videos that were originally published through our platform

14.2 Access Limitations

We can only manage videos that were published through our platform
We do not have access to or ability to modify videos you published directly on TikTok
You can revoke these permissions at any time through your TikTok account settings

14.3 TikTok Data Collection

When you connect your TikTok account, we collect:

Basic profile information: Username, user ID, profile picture
Published video statistics: Views, likes, comments for videos created through our platform
Upload status: Information about successful or failed uploads

14.4 Use of TikTok Information

We use TikTok data to:

Facilitate content publishing
Display performance statistics for your videos
Improve our integration functionality
Provide technical support when needed

14.5 TikTok Policy Compliance

Our integration is in full compliance with:

TikTok Terms of Service
TikTok Privacy Policy
TikTok Developer Terms

Important: You can disconnect your TikTok account at any time through the platform settings, which will revoke all granted permissions.

15. Instagram Reels Integration

15.1 Instagram Account Connection

When you connect your Instagram account to our platform, you authorize us to:

Publish Reels: Upload content created on our platform directly as Instagram Reels to your profile
Update Reels: Modify titles, descriptions, hashtags, and other properties of Reels published through our platform
Delete Reels: Remove from Instagram only Reels that were originally published through our platform

15.2 Access Limitations

We can only manage Reels that were published through our platform
We do not have access to or ability to modify content you published directly on Instagram
You can revoke these permissions at any time through your Instagram/Facebook account settings

15.3 Instagram Data Collection

When you connect your Instagram account, we collect:

Basic profile information: Username, user ID, profile picture
Published Reels statistics: Views, likes, comments for Reels created through our platform
Upload status: Information about successful or failed uploads

15.4 Use of Instagram Information

We use Instagram data to:

Facilitate content publishing
Display performance statistics for your Reels
Improve our integration functionality
Provide technical support when needed

15.5 Instagram Policy Compliance

Our integration is in full compliance with:

Instagram Terms of Service
Instagram Privacy Policy
Instagram API Terms
Meta/Facebook Developer Policies

Important: You can disconnect your Instagram account at any time through the platform settings, which will revoke all granted permissions.

16. Policy Changes

This policy may be updated periodically. The most recent version will always be available in the application. Significant changes will be communicated through notification in the application.

17. Contact

To exercise your rights or clarify doubts:

Email: privacy@viral.day
Data Protection Officer: privacy@viral.day
Response time: up to 30 days

18. Governing Law

This Privacy Policy is governed by the laws of Delaware, United States. Any disputes will be resolved in the courts of Delaware.

Data Controller:

VIRAL DAY LLC