Privacy Policy
Last updated: October 5, 2026
This Privacy Policy explains how Viralflicks ("Viralflicks," "we," "us"), operated by Craftisanlabs Limited, collects, uses, and protects information when you use our web platform at https://viralflicks.ai to create, manage, and analyze video content across YouTube, Instagram, and TikTok.
1. Who we are
Viralflicks is a creator productivity platform. You can upload or generate video content, connect social accounts you own, view analytics for those accounts, and send content to platforms you have authorized. Contact us at privacy@viralflicks.ai.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account information | Name, email (optional), phone number, password (hashed) | Provided by you at signup |
| Uploaded content | Video files, captions, thumbnails you upload to Viralflicks | Provided by you |
| Connected platform data | Public profile (username, avatar), your own video list and metadata, and performance metrics for accounts you explicitly connect | Retrieved from YouTube, Instagram, or TikTok official APIs only after you authorize the connection on that platform's consent screen |
| Usage data | Log data, device/browser type, general usage patterns | Automatically collected |
3. TikTok data (Login Kit and Content Posting API)
If you sign in with TikTok ("Continue with TikTok") or connect TikTok from your dashboard, we receive only what you approve on TikTok's consent screen:
- user.info.basic — display name and avatar so we can show your connected TikTok identity in Viralflicks. We never see your TikTok password.
- user.info.stats — follower, following, likes, and video counts for analytics on your own account.
- video.list — your own public TikTok videos and platform-reported metrics (views, likes, comments, shares). We do not access other users' content.
- video.upload — when you explicitly tap Publish, we upload that video to your TikTok inbox as a draft (Upload to TikTok). You finish caption and posting in the TikTok app. We do not use Direct Post and we do not post live to your TikTok profile from Viralflicks.
Access and refresh tokens from TikTok are stored encrypted at rest and used only to perform the actions above on your behalf. You can disconnect TikTok at any time from your dashboard; we then delete the stored TikTok tokens.
3A. Instagram data (Instagram API with Instagram Login)
If you connect Instagram from your Viralflicks dashboard, you are redirected to Meta/Instagram's official consent screen. We never see or store your Instagram password. After you approve, we may receive only what you authorize, including:
- Profile information needed to show your connected Instagram identity in Viralflicks (such as username and profile picture)
- Your own media list and related metadata (for example captions, media type, and engagement counts where provided by the API)
- Insights / performance metrics for your own Instagram Business or Creator account, used only to display analytics inside Viralflicks
We use Instagram data solely to operate analytics and related features you request in Viralflicks. We do not sell this data. We do not access other people's Instagram accounts. Access tokens are stored encrypted at rest and used only for authorized Instagram API calls on your behalf.
You can disconnect Instagram at any time from your dashboard. When you disconnect, we delete the stored Instagram access tokens. If you delete your Viralflicks account, we delete associated Instagram tokens and cached Instagram data as described in “User data deletion” below.
4. How we use your information
- To operate your account and let you upload, manage, and distribute video content you initiate
- To display analytics and performance for accounts you have connected
- To generate insights from platform-reported metrics (we do not automatically analyze video file contents for recommendations)
- To maintain and secure the service
For TikTok specifically, "distribution" means sending a draft to your TikTok inbox when you request it—not live posting. For YouTube, publishing happens only when you explicitly start that action. Instagram is connected for analytics (profile, media, and insights); Instagram publishing from Viralflicks is not offered at this time.
We do not sell your data. We do not access or display data belonging to any account other than ones you have explicitly connected and authorized.
5. How we access connected platforms
When you use "Continue with TikTok," "Connect TikTok," or Connect for YouTube/Instagram, you are redirected to that platform's official login/consent screen. We never see or store your password for that platform. After you approve, the platform sends Viralflicks an access token, which we store encrypted and use solely for authorized API calls you request.
Viralflicks never posts, schedules, or publishes anything without you directly initiating that action.
6. Data retention
We retain account data and connected-platform tokens while your account is active. If you disconnect a platform, we delete the associated access tokens. If you delete your account, we delete account data and cached platform data within a reasonable period, except where retention is required by law.
7. Data sharing
We do not sell personal information. We may share data with:
- Infrastructure providers who process data on our behalf under confidentiality obligations
- YouTube, Instagram, and TikTok, strictly as required to perform actions you request (for TikTok: draft upload to your inbox)
- Authorities, only where required by law
8. Your rights
You may access, correct, export, or delete your account data, and disconnect any linked platform, from your account settings or by contacting privacy@viralflicks.ai. For full deletion steps, see User data deletion.
9. Security
We use encryption for stored platform access/refresh tokens and industry-standard practices to protect your data. No system is 100% secure; use a strong, unique password.
10. Changes
We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date.
11. User data deletion
You can request deletion of your Viralflicks account and related personal data in either of these ways:
- From your Viralflicks account settings (delete account), if available; or
- By emailing privacy@viralflicks.ai from the email/phone associated with your account, with the subject “Data deletion request.”
When we process a deletion request, we will:
- Delete your Viralflicks account credentials and profile information
- Delete stored OAuth access and refresh tokens for connected platforms (including YouTube, Instagram, and TikTok)
- Delete or anonymize cached platform data (such as media lists and analytics snapshots) linked to your account
We aim to complete deletion within 30 days of verifying your request, except where we must retain limited information to comply with law, resolve disputes, or enforce our terms.
If you only want to stop Instagram (or another platform) access without deleting your whole Viralflicks account, disconnect that platform from your dashboard. We then delete the tokens for that platform.
12. Contact
Questions about this policy: privacy@viralflicks.ai
Company: Craftisanlabs Limited · Product: Viralflicks · https://viralflicks.ai
Registered office: 25 Pecked Lane, Bishops Cleeve, Cheltenham, England, GL52 8JH · Company no. 16760267 (registered in England and Wales)
