Legal
Delete your account and data
You can request deletion of your ViralCore account and personal data at any time. This page explains how, what is removed, what we must keep for a while, and how to disconnect the Google or Facebook login and any social accounts you linked.
Delete by request. Email privacy@viralcore.app from the address on your account with the subject “Delete my ViralCore account”. We verify control of the account, cancel the subscription if you are the owner, and complete deletion within 30 days. There is no charge.
1. Before you delete
- Cancel the subscription first if you pay for the workspace, so you are not charged again. Deleting an account does not by itself cancel a Stripe subscription.
- Export what you need. Approved posts, renders, brand notes and reports are removed with the account. Published posts stay on the platforms (see section 5).
- Workspace members: a workspace owner can remove a member from the workspace at any time without deleting that person’s own login. Removing the last owner requires transferring ownership or deleting the workspace.
2. What we delete
- Your account and login identifiers: email, name, avatar, password hash or Google/Facebook identifier, sign-in method, session tokens and role assignments.
- Your profile, preferences and consent records that are not required for legal proof.
- Brand data you uploaded: voice notes, examples, brand assets and settings.
- Generated drafts, captions, scripts, images, renders and stored files.
- Approval decisions, schedule entries, engagement and lead records belonging to your workspace.
- Research results and derived format tags tied to your workspace.
- Platform connection records and the OAuth tokens we hold for your accounts.
3. What we may keep, and why
Where the law requires, we keep limited records: billing, invoice and tax records for up to 7 years; a record that consent was given; security, abuse and enforcement records for up to 24 months (longer where needed for a legal claim); and server logs with a pseudonymous identifier for up to 12 months. Encrypted backups are purged within 30 days. We keep nothing longer than necessary, then delete or anonymise it.
4. Revoke Google or Facebook sign-in
Deleting your ViralCore account removes the link on our side, but you can also remove ViralCore from your provider’s list:
- Google: open myaccount.google.com/permissions, select ViralCore and choose Remove access.
- Facebook: open Settings & privacy → Settings → Apps and Websites (or Business Integrations), select ViralCore and choose Remove.
5. Connected social accounts and published posts
We delete the OAuth tokens we hold, so ViralCore can no longer read or post for you. Posts already published live on the platform under your account and are not deleted by us; remove them in the platform’s own app. You can also revoke ViralCore’s access from each platform’s connected-apps settings (Instagram/Meta, TikTok, X, YouTube/Google, LinkedIn, Pinterest, Snapchat, Reddit).
6. Third parties and backups
Deletion removes your data from our processors — Supabase (database, auth, storage), Vercel (hosting and logs) and Stripe (billing records retained as required) — in line with our Privacy Policy. Residual copies may remain in encrypted backups for up to 30 days before they rotate out. Billing records in Stripe are retained for the tax period described above.
7. Timing and confirmation
We acknowledge your request, verify the account, and complete deletion within 30 days. You will receive a confirmation when it is done. If we need more information to verify you, the clock starts when we receive it.
8. Contact
Deletion and privacy requests: privacy@viralcore.app · Support: support@viralcore.app. Postal: DotShop LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.