Privacy Policy
Last updated: March 24, 2026
ViralOps ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our platform at vrlops.com.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and role (Builder or Creator). If you sign in with Google, we receive your name, email, and profile picture from Google.
Profile Information
Builders may provide company name, product name, product URL, and bio. Creators may provide bio and connect social media accounts (platform, handle, follower count).
Payment Information
Payment processing is handled by Stripe. We do not store credit card numbers or bank account details on our servers. We store Stripe customer IDs and Connect account IDs to facilitate payments.
Campaign & Content Data
We collect campaign details (titles, briefs, budgets, compensation models), post submission URLs, and social media metrics (views, likes, comments, shares) fetched from platform APIs.
Usage Data
We collect standard web analytics data including IP address, browser type, pages visited, and timestamps. This data is used to improve the Service and is not sold to third parties.
2. How We Use Your Information
- To operate and maintain the platform
- To process campaign payments and creator payouts
- To track and verify social media metrics for campaigns
- To send transactional emails (application updates, payout notifications)
- To prevent fraud and abuse
- To improve and develop new features
3. Information Sharing
We share your information only in these circumstances:
- Between users: Builders see Creator profiles (name, bio, social accounts) when reviewing applications. Creators see Builder profiles (company, product) on campaign pages.
- Service providers: Stripe (payments), Resend (email), Supabase (database and storage), Vercel (hosting), Inngest (background jobs).
- Legal obligations: When required by law, regulation, or legal process.
We do not sell your personal information to third parties.
4. Social Media Data
When Creators connect social media accounts, we access public profile information and post metrics through official platform APIs. We only fetch metrics for posts submitted to campaigns on ViralOps. We do not access private messages, unpublished content, or unrelated posts.
5. Data Retention
We retain your account data for as long as your account is active. Campaign data and transaction records are retained for 7 years for financial compliance. You may request account deletion by contacting us at the email below.
6. Data Security
We implement industry-standard security measures including encryption in transit (TLS), secure authentication (bcrypt password hashing, OAuth 2.0), and access controls. Payment data is handled entirely by Stripe and never touches our servers.
7. Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict processing of your data
- Withdraw consent at any time
To exercise these rights, contact us at privacy@vrlops.com.
8. Cookies
We use essential cookies for authentication (session management) and theme preferences. We do not use advertising or tracking cookies. No cookie consent banner is required as we only use strictly necessary cookies.
9. International Transfers
Your data may be processed in the United States (Vercel, Stripe) and the European Union (Supabase). We ensure appropriate safeguards are in place for international data transfers in accordance with GDPR requirements.
10. Children's Privacy
ViralOps is not intended for users under 18 years of age. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Data Controller
ViralOps is operated from the Netherlands. For questions about this Privacy Policy or to exercise your data rights, contact: