Privacy Policy

1. Who we are and how to contact us

Viralix operates the Viralix.Video Platform and generally acts as the "data controller" for personal data collected via the Platform, unless stated otherwise in a specific agreement (for example, a Data Processing Addendum with a business customer).

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at:

Email: support@viralix.video

2. Information we collect

We collect information in three main ways: (a) you provide it directly, (b) it is collected automatically when you use the Platform, and (c) we receive it from third parties.

2.1 Information you provide

When you interact with the Platform, you may provide:

• Account and profile data – name, business name, role, email address, password (stored in hashed form), profile photo, bio, languages, niches, tools you use, and links to portfolio or social profiles.
• Business and billing details – company name, billing address, VAT or tax numbers (where applicable), and limited payment method details as processed by our payment providers.
• Project and brief information – information about your product or service, campaigns, target audience, offers, scripts, references, brand guidelines, and other information you include in a brief.
• Assets and content – files you upload (for example, logos, product images, videos, reference creatives, music, voiceover files), text content, and other materials needed to produce deliverables.
• Communications – messages exchanged via the Platform (Client ↔ Creator or with Viralix support), feedback, reviews, and other correspondence.
• Support and feedback – information you provide when you contact support, complete surveys, or give product feedback.

2.2 Information collected automatically

When you use the Platform, we may automatically collect:

• Usage data – pages viewed, actions taken (for example, brief submitted, message sent), time spent on pages, features used, referring URLs, and approximate location based on IP address.
• Device and technical data – IP address, browser type and version, device type, operating system, language settings, and similar technical information.
• Cookies and similar technologies – identifiers associated with your browser or device, session tokens, and analytics cookies. For more details, see our Cookie Policy.

2.3 Information from third parties

We may receive information about you from:

• Payment providers – limited payment and billing information, fraud indicators, and transaction status (for example, from Stripe or similar services). We do not store full card details on our own servers.
• Authentication or social platforms – if you choose to sign in or connect via a third‑party service, we may receive basic profile information as permitted by that service.
• Analytics, marketing, and attribution partners – aggregated or inferred data about how you found us or how campaigns perform.
• Public sources – publicly available information (for example, public portfolio links, social profiles) to help verify Creators and improve trust on the Platform.

3. How we use your information

We use personal data for the following purposes:

• To operate and provide the Platform – creating and managing accounts, enabling briefs, proposals, orders, messaging, file uploads, deliveries, reviews, and facilitating payments, payouts, and invoicing through our payment providers.
• To improve and customize the Platform – understanding how Clients and Creators use features so we can improve workflows, build new tools for AI video projects, and personalize your experience (for example, remembering preferences or recently viewed Creators).
• To communicate with you – sending transactional messages (for example, account notices, order updates, payout updates, security alerts), responding to support requests, and, where permitted, sending product updates or relevant marketing communications (with opt‑out options).
• To maintain trust, safety, and compliance – detecting and preventing fraud, abuse, circumvention of the Platform, spam, and security incidents; enforcing our Terms of Service, Content & IP Policy, and other policies; handling disputes, chargebacks, and investigations; and complying with legal obligations.
• For analytics and business operations – measuring performance of the Platform, features, and campaigns; and producing aggregate statistics and insights that do not identify individuals.

We do not sell personal data in the sense commonly understood under privacy laws.

4. Legal bases for processing (EEA/UK users)

Where the EU or UK General Data Protection Regulation ("GDPR" or "UK GDPR") applies, we rely on one or more of the following legal bases:

• Performance of a contract – to operate the Platform and provide services you or your organization request (for example, processing briefs, facilitating orders and payouts).
• Legitimate interests – to run and improve our business, maintain security, prevent abuse, and communicate with you about the Platform, where these interests are not overridden by your rights.
• Consent – for certain activities such as non‑essential cookies, some marketing communications, or optional data you choose to share. You can withdraw consent at any time where applicable.
• Legal obligations – to comply with laws, regulations, and requests from authorities.

5. How we share your information

We may share personal data with the following categories of recipients:

• Other users on the Platform – Clients and Creators see each other's profiles and project‑relevant information as needed to collaborate (for example, profile info, brief details, and files necessary to complete a project).
• Service providers and partners – including payment processors and financial partners, hosting and storage providers, analytics and product tooling providers, and customer support and communication tools. These providers process personal data on our behalf and are bound by contractual obligations to protect it.
• Professional advisors and legal authorities – lawyers, accountants, auditors, or similar advisors where necessary; and law enforcement or regulatory authorities where we are legally required or allowed to do so, or to protect our rights, users, or the public.
• Business transfers – in connection with a merger, acquisition, financing, or sale of all or part of our business, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

We do not sell lists of personal data to third parties for their independent marketing.

6. International data transfers

Because we operate a remote‑first, globally accessible Platform, your information may be processed in countries other than the one you reside in.

Where we transfer personal data from the EEA, UK, or Switzerland to countries that do not have an adequacy decision from the European Commission, we use appropriate safeguards such as standard contractual clauses (where applicable) or rely on other mechanisms permitted by law.

7. Data retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including:

• for as long as you maintain an account on the Platform;
• for the duration of an active project plus a reasonable period afterward to handle support, disputes, and reorders; and
• for as long as required by law (for example, financial and tax records must be kept for a set period).

When data is no longer needed, we will either delete it or anonymize it so that it can no longer be linked to an individual.

8. Your rights and choices

Depending on your location and applicable law (for example, GDPR, UK GDPR, or other privacy laws), you may have some or all of the following rights:

• Access – to request a copy of the personal data we hold about you.
• Correction – to ask us to correct inaccurate or incomplete personal data.
• Deletion – to request deletion of your personal data in certain circumstances.
• Restriction – to ask us to restrict processing of your personal data in certain circumstances.
• Portability – to obtain a machine‑readable copy of certain data you have provided.
• Objection – to object to certain processing, including direct marketing, based on our legitimate interests.
• Withdraw consent – where we rely on consent, you may withdraw it at any time.

To exercise these rights, contact us at support@viralix.video. We may ask for additional information to verify your identity before acting on your request.

You may also have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can try to resolve your concerns.

9. Cookies and similar technologies

We use cookies and similar technologies to operate and improve the Platform, measure performance, and remember your preferences.

For more details about the types of cookies we use and how you can manage your preferences, please see our Cookie Policy.

10. AI tools, content, and project data

Creators on Viralix frequently use third‑party AI tools (for example, video generation, editing, or avatar tools) to produce deliverables.

• Project content and assets you upload (such as scripts, logos, reference videos, or brand materials) may be processed by these tools as part of delivering the services you request.
• We expect Creators to comply with the terms of those tools and applicable law, and we set rules in our Content & IP Policy.
• Unless you ask us to delete project data (subject to legal and contractual limits), some content may remain available to you and the relevant Creator within the Platform for reorders, support, or reference.

We do not use your private briefs or project files to train our own models in a way that would make your confidential content visible to other customers, unless we clearly explain this and you choose in.

11. Security

We take reasonable technical and organizational measures to protect personal data, including using reputable hosting and infrastructure providers, limiting access to systems and data to authorized personnel, and applying security measures such as encryption in transit where appropriate.

However, no method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security, and you are responsible for choosing strong passwords and keeping your credentials confidential.

12. Children's privacy

The Platform is not intended for children under 18, and we do not knowingly collect personal data from children under 18. If you believe that a child has provided us with personal data, please contact us at support@viralix.video and we will take appropriate steps to remove the data.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will take reasonable steps to notify you (for example, by updating the "Last updated" date, sending an email, or displaying a notice in your account).

Your continued use of the Platform after the updated Privacy Policy becomes effective means you agree to the changes.

14. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, you can contact us at support@viralix.video.