PRIVACY POLICY — RoketViral

This Privacy Policy explains how RoketViral (“RoketViral,” “we,” “our,” or “us”) collects, uses, discloses, and safeguards information when you use our mobile application (the “App”) and related services (including our backend services, APIs, and integrations).

By using RoketViral, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account information you provide (such as email, display name, username, profile image—if you choose to provide them).
• User content you submit in the App, including:
  • Uploaded videos (for analysis, posting to third-party platforms or scheduling to post)
  • Titles, captions, descriptions, hashtags
  • Feedback, support requests, and other messages you send us

1.2 Social Media Account Connections & Platform Data (Analytics + Publishing)

If you choose to connect a third-party social media account, RoketViral will request permission through the platform’s official authorization flow (such as OAuth or similar secure mechanisms).

RoketViral does not request or store your social media platform passwords. Access to connected accounts is granted only through the platform’s authorization flow using secure, scoped permissions.

Depending on the platform and the permissions (scopes) you grant, we may collect and process:

• Platform analytics and performance metrics, such as views, likes, comments, shares, engagement, reach, watch time, audience and traffic metrics (where available), and related insights.
• Basic account/channel identifiers needed to provide the integration (e.g., channel/user ID, display name, profile image, authorized scopes, and connection status).
• Content metadata about posts/videos you choose to analyze or manage through the App.

You control your connected accounts and can revoke access at any time by disconnecting the account in the App (where available) and/or revoking RoketViral’s access in the platform’s security or settings pages. Once access is revoked, RoketViral can no longer fetch new platform analytics or perform platform actions for that account using that authorization.

1.3 AI-Derived Content Features (Tier-Based)

For advanced-tier features, we may generate and store derived features about your content (for example, structured tags, performance factors, or content attribute signals used to tailor advice). These features:

• Are used to personalize and improve the App’s analytics and AI suggestions for you.
• Are stored securely in our database under access controls.
• Are not used to build advertising profiles or sold to third parties.

1.4 Automatically Collected Data (App & Device)

We may automatically collect:

• Device and app information (device model, OS version, app version, language, time zone)
• App usage events (feature usage, screens viewed, interactions)
• Diagnostics (crash logs, performance metrics, network/performance data)

1.5 Subscription & Billing Information (Stripe)

Subscriptions and payments are processed by Stripe. We may receive and store:

• Subscription tier, interval, status, and renewal/cancellation state
• Payment confirmations and billing-related events (e.g., successful renewal, cancellation effective date)

We do not store full credit card numbers or sensitive payment credentials. Payment information is handled by Stripe under their policies.

2. How We Use Your Information

We use information to:

• Provide the App’s core functionality (analytics, insights, recommendations, scheduling workflows)
• Retrieve and display social media analytics you request after you connect an account
• Enable uploading/publishing features only when you initiate them
• Analyze your uploaded content using AI to generate predictions, analytics, and suggestions
• Personalize your experience (including tier-based features and tailored advice)
• Maintain security, prevent fraud/abuse, and enforce our Terms
• Provide support, troubleshoot issues, and improve performance and reliability
• Manage subscriptions, billing state, and entitlement access

3. AI Processing & Third-Party Service Providers

RoketViral uses AI systems to generate analytics, predictions, and suggestions. This may include services such as Google Vertex AI/Gemini and OpenAI.

List of Service Providers
We maintain a current and comprehensive list of all third-party sub-processors (including our AI providers and cloud infrastructure partners) on our Third-Party Services page. We update this list periodically as our technology stack evolves.

When you upload content for analysis, we may transmit the following to our AI providers as needed to produce results:

• Video frames or compressed representations
• Captions, titles, descriptions, hashtags, and other metadata
• Audio transcripts (where applicable)

If you do not consent to AI processing, please refrain from uploading content for AI analysis or using AI-enabled features within the App.

4. Storage and Retention

We retain information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

5.1 Video Storage

• Videos may be temporarily stored (e.g., in Firebase Storage, Cloudflare, or equivalent) to enable AI analysis and upload scheduling.
• General Workflows: Videos uploaded for analysis or immediate publishing are typically stored for less than 24 hours and are removed from our storage immediately upon the completion of the upload or analysis workflow.
• Scheduled Workflows: Videos uploaded for future scheduling may be stored for up to 7 days to facilitate the scheduled publish time. These files are removed promptly after the scheduled publishing action is completed.

5.2 Text Metadata Retention (Up to 35 Days)

We may retain the following text and metadata for up to 35 days for analytics, history, and product functionality:

• Thumbnails (where applicable)
• Titles
• Descriptions
• Hashtags
• Platform video/post IDs and related identifiers

5.3 Account and Connection Data

We retain your basic account identifiers (such as your email address) for as long as your account remains active to provide our services. We also store platform authorization tokens required to maintain your connections; you may revoke these at any time via the App or the respective social media platform settings.

5.4 Logs and Diagnostics

We retain system logs and diagnostic data as needed for security, abuse prevention, and platform reliability. This data is purged periodically and is not used to create long-term user behavior profiles.

5.5 Data Deletion

We do not maintain long-term archives of your content. Once your data is purged from our active systems (in accordance with the timelines in Section 4), it is removed from our production environment. You may request the immediate deletion of your account and all associated identifiers at any time by contacting: [email protected].

5. Sharing of Information

We do not sell your personal information.

We may share limited information in the following cases:

6.1 Service Providers and Processors

We may share information with vendors that help us operate the App, including:

• Billing and subscription management (e.g., In-App Purchase, Google billing, or equivelent)
• AI providers (processing only to generate results)
• Analytics / crash reporting providers (to measure performance and stability)
• Cloud infrastructure providers (hosting, storage, security controls)

6.2 Connected Social Media Platforms

When you connect a third-party social media account, we exchange data with that platform to facilitate the services you request. We interact with these platforms to:

• Retrieve Analytics: Fetching performance metrics and insights you have requested and authorized us to access.
• Enable Publishing: Sending content and metadata to the platform only when you explicitly initiate an upload or scheduling action.
• Maintain Authorization: Validating your connection status and managing authorized scopes to ensure we only access the data you have permitted.

We only interact with these platforms based on the specific permissions granted through your user account.

6.3 Legal and Safety Disclosures

We may disclose information if required to comply with law, respond to lawful requests, protect rights and safety, investigate fraud/abuse, or enforce our Terms.

6. Security

We use administrative, technical, and organizational measures designed to protect your information, including:

• Authentication and access control: We use industry-standard authentication (such as Firebase Authentication) to ensure you can only access and manage your own data.
• Encryption in transit: All data transmitted between your device and our services is protected using secure, encrypted channels (HTTPS/TLS).
• Secure infrastructure: Our services are hosted on reliable, managed cloud infrastructure (such as Google Cloud), incorporating modern network security, authorization checks, and access filtering to keep your data safe.
• Token protection: We never store your social media passwords. We use secure, scoped authorization tokens to manage account connections. These tokens are encrypted at rest using a managed Key Management Service (KMS), and we employ strict access controls to ensure they are never exposed in our App UI.

No method of transmission or storage is 100% secure, but we are committed to taking rigorous steps to safeguard your information.

7. Your Rights and Choices

Depending on your location, you may have rights regarding your personal information, including the right to request access to or deletion of your data.

Exercising Your Rights
Because our platform is designed to be lean—automatically purging most content and metadata after 35 days—we may have very little data to provide if you contact us. However, if you wish to request the deletion of your account or any remaining information associated with your identity, please contact us at [email protected].

Social Account Controls

You maintain full control over your social media connections. You may disconnect your accounts or revoke our access permissions at any time through the settings of the respective social media platform or directly within our App. Once revoked, we are unable to access your platform data.

8. Device Permissions

Depending on your use of the App, RoketViral may request device permissions such as:

• Photos/Media (to select videos)
• Camera (to record content)
• Microphone (if recording)
• Notifications (to send updates)

Clipboard Access: With your permission, RoketViral may check your device clipboard when you first use the app to identify a RoketViral referral code associated with the link you used to install the app. RoketViral does not store or transmit unrelated clipboard contents.

You can control permissions in your device settings. Some features may not work if permissions are denied.

9. International Data Transfers

Your information may be processed and stored in countries other than your own (for example, where our service providers operate). We use safeguards intended to protect your data consistent with this Privacy Policy.

10. Children’s Privacy

RoketViral is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted in the App with a revised “Last Updated” date.

12. Contact Us

Email: [email protected]
Email: [email protected]