Privacy policy

Who we are

Viral Folder (“we”) operates viralfolder.com from Morocco. This policy explains what personal data the site, the free calculator, and the signed-in lab use, and why.

Privacy requests go to hello.elhaidi@gmail.com.

Information we collect

• Account. Email address, the name you set, and how you signed in (email, Google, or Apple). Passwords are stored by our auth provider. We never see the password itself.
• What you create. Search keywords, saved research, project briefs, ideas, drafts, notes, public profile links you add, and files you upload.
• Public social content. When you research a niche or a profile, we retrieve publicly available posts and profile information from TikTok, Instagram, and X. That content belongs to the people who published it.
• Billing. If you subscribe, Polar processes the payment. We store your plan, subscription status, billing period, and Polar customer id. Card numbers stay with Polar.
• Product use. Page views, product events (such as a search starting or a draft being generated), error reports, and session replay. Signed-in use is tied to your account id and email.
• Writing requests. Text you ask the lab to score or write, and the model’s response, are sent to the writing provider in use. Those prompts and responses may also be kept in our product analytics so we can see whether a generation worked.
• Calculator. The counts you type into the TikTok engagement calculator stay in your browser. We may record that a calculation ran, including whether saves were included. We do not receive the counts.
• Preferences. Your theme choice stays on your device. If you ask to hear about a plan, we store that choice on your account.
• Technical data. Our host and analytics providers process IP address, browser, and device data to deliver the site and to understand roughly where it is used.

How we use it

We use this information to run your account, do the research you ask for, write and save ideas, bill the plan you choose, keep the product working, and answer you if you email us. We also use product analytics to see which parts of Viral Folder people actually use.

We do not sell personal data.

Who else processes it

These providers process data for us. Several of them are outside Morocco, including in the United States and the European Union.

• Vercel hosts the website.
• Supabase stores accounts, the database, uploaded files, and any model keys you choose to add. A key is kept as a secret. The product shows only its last four characters.
• Polar handles checkout, subscriptions, invoices, and the billing portal.
• PostHog provides product analytics, session replay, error reports, and records of AI prompts and responses.
• Google and Apple share your name and email with us when you choose their sign-in. Their own policies cover that sign-in step.
• Monid collects the public posts and profiles you ask us to research.
• TikHub reads public TikTok posts and comments when a breakdown needs them.
• TypeSafe labels public posts so we can describe what the breakouts have in common.
• The writing provider generates ideas, hooks, briefs, and drafts from what you submit. That can be Anthropic (Claude), or a provider you connect: OpenAI, xAI, Google Gemini, DeepSeek, Mistral, Groq, or OpenRouter. If you have not connected a key, a platform default may be used instead.

Cookies and storage on your device

A sign-in cookie from Supabase keeps you logged in. PostHog uses cookies to recognise a browser across visits, measure the product, and record sessions. Your theme is stored in local storage on your device, not in a cookie.

We do not use advertising cookies.

How long we keep it

Account data and the work you create stay until you delete them, or until you delete the account. Settings → Delete account removes the account, projects, searches, ideas, and uploaded files.

Cancel a paid plan in Settings → Manage billing before you delete the account. Deletion removes your Viral Folder data. It leaves the Polar subscription in place until you cancel it, and the period you already paid for is not refunded.

Polar keeps payment records for tax and accounting. We keep product analytics for as long as we need them to operate and fix Viral Folder. You can ask us to delete the personal data we still hold about you.

Your choices and rights

You can update your name, email, and password in Settings, export research as CSV where the product offers it, and delete the account yourself.

Moroccan law No. 09-08 on the protection of individuals with regard to the processing of personal data gives you the right to access your personal data, correct it, and object to processing, including any use for prospecting. Email hello.elhaidi@gmail.com and we will respond. We may ask you to confirm that the request is yours.

You can also contact the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) at cndp.ma.

Children

Create an account only if you are 18 or older. The lab is not for children.

Changes

When this policy changes, we update the date at the top. The Terms of use cover the service itself.