1. Introduction
This policy explains what personal information Viral Lab ("we," "us," or "our") collects when you use virallab.studio, why we collect it, who we share it with, and what control you have over it.
By using the Platform you agree to the practices described here. If you disagree, please don't use it.
2. What we collect
Information you give us
| Data | Why |
|---|---|
| Name and email address | To create your account and contact you |
| Profile photo and display name | Shown on your dashboard and to campaign brands |
| Country | To determine campaign eligibility |
| Social media handles | To attribute posts to you and measure their performance |
| Signed campaign agreements | To record which terms you accepted and when |
If you sign in with Google
We receive your name, email address, and profile picture from Google. We do not receive your Google password and we cannot access anything else in your Google account.
Content and performance data
When you take part in a campaign we record the posts you submit or that we detect on your registered handle, along with view, like, and comment counts collected from the public data on those platforms. We also store your earnings, payout requests, and payment history.
We only collect metrics for content published from a handle you have registered with us, and only for content posted after you registered it.
Payment information
Payouts run through Stripe. You provide your bank or payout details directly to Stripe, and identity documents where they require them. We never see or store your full bank account or card numbers. We keep only an identifier for your Stripe account and whether it is cleared to receive payouts.
Collected automatically
Like most websites we record basic technical information when you visit: IP address, approximate location by country, browser and device type, and which pages you used. This helps us keep the service secure and working.
Sensitive information
We do not ask for or intentionally collect sensitive categories of personal data such as racial or ethnic origin, health information, religious beliefs, or sexual orientation.
3. How we use it
- Create and run your account, and sign you in
- Match you with campaigns you are eligible for
- Measure how your content performs and calculate what you have earned
- Review posts for compliance with the campaign brief and our Terms
- Process payouts and meet tax reporting obligations
- Detect and prevent fraud, including artificially inflated views
- Send you messages about campaigns, payouts, and account activity
- Diagnose problems and improve the Platform
We use your information only where we have a lawful reason to: to perform our agreement with you, to meet a legal obligation, with your consent, or for legitimate interests such as fraud prevention and keeping the service secure.
5. We don't sell your data
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
7. How long we keep it
We keep your personal information for as long as your account is open. If you ask us to delete your account we will remove your personal data within 30 days.
Two exceptions: records connected to payments and tax reporting are kept for up to seven years because financial law requires it, and records connected to fraud may be retained to stop the same activity recurring.
8. Security
All traffic to the Platform is encrypted in transit with TLS. Passwords are stored hashed, never in plain text. Access to the production database is restricted to the people who need it, and payment credentials are held by Stripe rather than by us.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach ever affects your personal data we will notify you and the relevant authorities as the law requires.
9. Your rights
- Access: ask for a copy of the personal data we hold about you
- Correction: fix anything inaccurate, most of which you can edit yourself in your profile
- Deletion: ask us to delete your account and personal data, subject to the retention rules above
- Objection and restriction: ask us to stop or limit certain processing
- Portability: receive your data in a machine-readable format
- Withdraw consent: where we relied on your consent, withdraw it at any time
Email support@virallab.studio to exercise any of these. We will respond within the period the applicable law allows, normally 30 days, and we will not treat you differently for asking.
You can opt out of non-essential email at any time. Messages about your account, campaigns, and payouts are operational and continue while your account is open.
10. US state privacy rights
If you live in California, Colorado, Connecticut, Virginia, Texas, or another state with a comprehensive privacy law, you have the rights listed in section 9, including the right to know what we collect, to request deletion, and to opt out of the sale or sharing of personal information. As stated above, we do not sell or share personal information for advertising.
The categories we collect are identifiers, commercial information, internet activity, geolocation by country, and professional information. We collect them for the purposes in section 3 and share them only as described in section 4.
To exercise these rights, or to appeal a decision we have made about a request, email support@virallab.studio.
11. International transfers
Our systems are hosted in the United States. If you use the Platform from outside the US, your information will be transferred to and processed there, where privacy laws may differ from those in your country. Where required, we rely on appropriate safeguards such as standard contractual clauses for those transfers.
12. Children
The Platform is for adults. You must be at least 18 to hold an account, and we do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has given us their information, contact us.
13. Changes to this policy
We may update this policy. When the changes are material we will notify you by email or through the Platform at least 30 days before they take effect, and we will update the date at the top of this page.
14. Contact
For any privacy question, or to exercise your rights, email support@virallab.studio.