This Privacy Policy sets out the procedure for collecting, processing, storing, and protecting personal data by Viral Studio / virale.uno(hereinafter referred to as the "Controller"). This policy is formulated in strict accordance with the Law of Ukraine "On Protection of Personal Data" dated June 1, 2010, No. 2297-VI (as amended) and applicable international data protection regulations (GDPR).
1. Personal Data Controller
The owner and controller of personal data collected through the service is Viral Studio (virale.uno). For all matters regarding personal data processing, consent withdrawal, or exercising your rights as a data subject under Article 8 of the Law of Ukraine No. 2297-VI, please contact our dedicated Data Protection Officer at:
Email: billing@virale.uno | Support Telegram: @Viralengin_bot
2. Categories of Collected Personal Data
Under Article 6 of the Law of Ukraine "On Protection of Personal Data", we process only personal data that is adequate, relevant, and necessary for specified processing purposes:
- Identification & Account Data: Full name, email address, profile picture URL, unique user ID.
- Social & Messenger Identifiers: Unique Telegram ID and Telegram username for authentication and video delivery.
- Technical & System Data: IP address, device model, operating system version, browser parameters, session cookies, and local IndexedDB cache metadata.
- Uploaded Media & Inputs: User-provided video recordings, voice samples, script inputs, and Digital DNA content generation preferences.
- Billing Metadata: Subscription status, credit transaction logs, and payment metadata. Note: Raw payment card numbers are processed exclusively by our PCI-DSS certified Merchant of Record (Paddle / Tribute).
3. Purposes of Personal Data Processing
Personal data is collected and processed for the following legitimate purposes:
- Providing and maintaining access to the Viral Studio AI content generation platform.
- User authentication, account security, fraud prevention, and session synchronization across web and mobile (PWA).
- Processing AI video synthesis, voice generation, avatar rendering, and script customization.
- Delivering rendered video materials, scripts, and status alerts directly via our official Telegram bot.
- Processing paid subscriptions, credit balance management, and customer support communications.
4. Rights of the Data Subject (Article 8 of Law No. 2297-VI)
In accordance with Article 8 of the Law of Ukraine "On Protection of Personal Data", as a data subject, you have the right:
- To know about the sources of collection, location of your personal data, location of the controller or processor, or to issue a corresponding mandate for obtaining this information.
- To receive information about the conditions for granting access to personal data, including information about third parties to whom your personal data is transferred.
- To access your personal data.
- To receive a response regarding whether your personal data is being processed, as well as to receive the contents of such personal data no later than thirty calendar days from the date of receipt of the request.
- To submit a reasoned demand to the controller objecting to the processing of your personal data.
- To submit a reasoned demand regarding the modification or destruction of your personal data by any controller if these data are processed unlawfully or are inaccurate.
- To protect your personal data from unlawful processing and accidental loss, destruction, or damage due to intentional concealment or failure to provide data.
- To file complaints regarding the processing of your personal data to the Ukrainian Parliament Commissioner for Human Rights (Ombudsman) or to a court.
- To apply legal remedies in case of violation of legislation on personal data protection.
- To withdraw consent to the processing of personal data at any time.
5. Third-Party Data Transfers & Security
We do not sell, rent, or trade your personal data. Data may be shared strictly with authorized infrastructure processors necessary to provide the service:
- Supabase Inc.: Encrypted cloud database and authentication provider.
- AI Synthesis Partners (Fal.ai, Anthropic, HeyGen, Groq): Used solely for script generation, image synthesis, and avatar rendering under strict confidentiality terms.
- Paddle / Tribute: PCI-DSS compliant payment processing partners.
We implement industry-standard encryption protocols (TLS/HTTPS), strict access controls, and automated rate-limiting to protect your data against unauthorized access or disclosure.
6. Consent & Data Retention
By registering an account, checking the explicit consent box during registration, or connecting your Telegram profile, you grant your free, informed, and explicit consent to the processing of your personal data as outlined in this Policy.
Personal data is stored for the duration of your active account registration. Upon receipt of an account deletion request or consent revocation sent to billing@virale.uno, all associated user data and uploaded media assets will be permanently purged within 14 calendar days.
Official Document Version: 2.0 (English Edition) | Effective Date: September 6, 2026.
Viral Studio / virale.uno · Formatted under the Law of Ukraine "On Protection of Personal Data" No. 2297-VI.