Last updated: 5 July 2026

Privacy Policy

How ViralSeeker handles your personal data, under the EU GDPR and Spanish data-protection law.

1. Data controller

ViralSeeker is operated from Spain and is the controller of your personal data. Our full provider identification (legal name, NIE and registered address, as required by law) is set out in the Provider details section of our Terms of Service. For any privacy question or request, contact support@viralseeker.com.

2. What we collect

• Account data — your email address and a password, which we store only as a salted hash (we never see or store your password in plain text).
• Billing data — handled by Stripe. We do not receive or store your full card number; Stripe processes the payment. We keep your Stripe customer and subscription identifiers and your billing email to manage your subscription.
• Usage & security data — basic request/rate-limit counters, access logs, and IP address, used to run the service and prevent abuse.
• Support messages — if you contact us through the support form or by email, we keep your message and email address to answer you.
• Cookies — one essential authentication cookie (vl_gate) that keeps you logged in, and one preference cookie (vl_lang) that remembers your language choice. We do not use advertising or third-party tracking cookies.

2b. A note on Transcribe

When you use the Transcribe feature, the video is processed on our own backend infrastructure; the audio is not sent to any third-party AI transcription service.

3. Why we use it & legal basis

• To provide your account and the service, and to process your subscription — performance of a contract.
• To secure the service and prevent fraud/abuse — our legitimate interests.
• To keep accounting and tax records — legal obligation under Spanish law.

4. Who we share it with (processors)

We use a small number of service providers who process data on our behalf, under data-processing terms:

• Stripe — payments & subscription billing.
• Cloudflare — website hosting, DNS, CDN, and security.
• Fly.io — backend compute (e.g. the Transcribe feature).

Some of these providers are based outside the EU (e.g. in the United States). Where data is transferred internationally, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. We do not sell your personal data.

5. How long we keep it

We keep your account data while your account is active. After you cancel, we delete or anonymise your account data within a reasonable period, except records we must retain to meet Spanish accounting and tax obligations (invoices are typically retained for the legally required number of years).

6. Your rights

Under the GDPR you can request access, rectification, erasure, restriction, portability, and objection, and withdraw consent where processing relies on it. To exercise any of these, email support@viralseeker.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).

7. Security

We protect your data with measures including salted password hashing (PBKDF2), encrypted connections (HTTPS/TLS), and access controls. No system is perfectly secure, but we take reasonable steps to safeguard your information.

8. Children

ViralSeeker is not intended for anyone under 18, and we do not knowingly collect data from children.

9. Changes to this policy

We may update this policy; we’ll post the new version here and, for material changes, notify you by email.

10. Contact

For any privacy question or request: support@viralseeker.com.

ViralSeeker · Spain · support@viralseeker.com
Terms of Service · Privacy Policy · Support