LAST UPDATED: OCTOBER 2026
Privacy Policy.
This Privacy Policy explains how GhostViral AI (“GhostViral”, “we”, “us”) collects, uses, shares and protects information when you use ghostviralai.com, our applications, our AI-agent (MCP) connection, and our video-generation services (together, the “Service”). GhostViral AI is the controller of the personal data described here. Contact: support@ghostviralai.com.
1. Information we collect
- Account data: email address, display name, sign-in method and, for Google sign-in, the profile details Google shares (such as profile photo), handled through Firebase Authentication.
- Profile and usage data: plan, credit balance, onboarding answers (goal, niche, preferred language, voice preference), generation settings, and account milestones (for example sign-up, first video, first payment).
- Content you provide: topics, prompts, scripts, caption settings, and Own Voice audio files you upload.
- Generated content: AI scripts, voiceover audio, caption timing, references to the licensed stock clips you select, and the finished videos and thumbnails saved to your Projects.
- Purchase data: subscription status, plan, and customer and order references from Polar, our merchant of record. Polar handles your payment details; we never receive full card numbers.
- Connected social accounts: when you connect YouTube, TikTok or Instagram for auto-post, the account’s username, profile picture and a connection identifier, plus a record of what you posted and the link to each post. You sign in on the platform itself: we never receive your password, and the access tokens are held by our posting provider, not by us.
- Posting plans: if you set up a plan that makes and posts videos on a schedule, its theme and topics, days, times and time zone, the accounts it posts to, and a record of each video it made, the credits it used and the links to its posts.
- AI-agent connections: when you connect an AI assistant through our MCP endpoint, the app name, its redirect address and hashed access tokens, so you can see and revoke the connection.
- Technical and security data: IP address, browser and request details processed by our hosting providers in server logs, used for security, abuse prevention and rate limiting.
- Invite programme: your invite code, who invited whom and the credits earned. To prevent abuse we keep a salted one-way hash of the IP address and of a random device identifier (gv_device) used when an invite is created or redeemed — never the IP address or identifier itself.
- Affiliate programme: if you open a creator’s affiliate link (ghostviralai.com/r/…), we store the link name and click time in the gv_via cookie and in local storage, and count the click in a daily total per link. To count unique clicks and ignore repeats, we keep a one-way hash of your IP address, salted differently each day, for two days. If you then create and verify a new account, we record which affiliate referred you, the click and sign-up times, and salted hashes of your IP address and device identifier (gv_device) to detect self-referrals and fake sign-ups. When you pay, the affiliate sees an anonymous entry (“Customer 3”) with the amount and their commission — never your name, email or account. If you are an affiliate, we keep your application (channel name, platform, channel link and how you promote us), your agreement to the Affiliate Terms, the payout method and details you give us, your commissions and payouts, and salted hashes of the IP addresses and devices you use your dashboard from. When you apply or edit a pending application, we email it (with your account email) to our team so we can review it.
- Analytics and device data — only with your consent: pages viewed, clicks, errors, feature use, render timing, and a device performance profile (number of CPU cores, device memory, graphics chip model, browser video-encoding support, screen size, connection type). If you also allow session recordings, a replay of page interactions with all typed text masked. See section 7.
2. How we use information and our legal bases
- To provide the Service (create accounts, generate scripts and voice, find stock footage, render and save your videos, manage credits and subscriptions, connect AI agents) — performance of our contract with you.
- To keep the Service secure (authentication, fraud and abuse prevention, rate limits, debugging outages) — our legitimate interests and, where required, legal obligations.
- To understand and improve the product with first-party, account-level statistics (such as how many users finish a first video) — our legitimate interests; and with PostHog analytics, device data and session recordings — only with your consent, which you can withdraw at any time.
- To run the affiliate programme (credit the creator whose link you used, calculate and pay commissions, and prevent fraud) — our legitimate interests and, for affiliates, performance of the Affiliate Terms.
- To communicate with you about your account (verification, password reset, service and billing notices) — contract and legitimate interests.
- To comply with law and enforce our Terms.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not use your content to train AI models.
3. Rendering on your device
Videos are assembled in your browser on your own device, using its graphics chip (GPU) where available and its processor (CPU) otherwise. To do this your browser downloads the selected stock clips directly from the licensed media providers, which therefore receive your IP address and standard request data, as with any web content. Unfinished renders are kept in your browser’s storage for up to 24 hours so an interrupted render can continue; finished videos are saved to your Projects (see section 6).
Videos made by a posting plan are the exception: because nobody needs to be at a browser, they are assembled on our servers from the same script, voice and licensed clips, stored for posting, and deleted seven days after they are posted.
4. Who we share information with
We share only what each feature needs, with service providers acting on our behalf:
- Google Firebase / Google Cloud — authentication, account and project database, cached generation results.
- Vercel — website and API hosting, and storage of Projects videos, thumbnails and voice files.
- DeepSeek — script writing from your topic and prompt, and planning stock visuals from your script when Gemini is unavailable.
- ElevenLabs — AI voiceover from your script, and transcription of Own Voice audio.
- Google (Gemini) — planning stock visuals from your script and checking that candidate stock images match your scenes.
- Pexels, Pixabay and other licensed or public-domain media sources — stock search and downloads.
- Polar — checkout, subscriptions and invoices (merchant of record).
- Resend — account emails such as verification and password reset, and the email that sends a new affiliate application to our team.
- PostHog — product analytics and session recordings, only with your consent.
- Cloud rendering and hosting providers used for videos you request through an AI-agent connection, and, for the mobile app, Creatomate where cloud rendering is used.
- AI assistants you connect — receive the data you authorise through the MCP connection.
- PostPeer — connects the social accounts you choose and posts to them on your instruction; receives the video, caption and post settings, and holds the platform access tokens.
- YouTube, TikTok and Instagram — receive the video and caption when you post to them. Auto-post to YouTube uses YouTube API Services, so the YouTube Terms of Service and the Google Privacy Policy apply; TikTok’s and Meta’s own terms and privacy policies apply to posts on those platforms. You can remove our access at any time in Settings, or from the platform’s own security settings (for Google: myaccount.google.com/permissions).
We may also disclose information if required by law, to protect rights and safety, or as part of a merger or acquisition, subject to this Policy.
5. International transfers
Our providers process data in the United States and other countries, including the People’s Republic of China for script generation by DeepSeek. Where data protection law requires it, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy framework, and send only the data the feature needs (for script writing: your topic, prompt and settings — not your email address).
6. Retention and deletion
- Account, profile and Projects data: while your account exists. Delete projects any time in Projects; delete your whole account in Settings.
- Temporary voice files used for rendering: deleted automatically within hours.
- Cached generation results (to recover a paid generation without charging again): kept with your account and deleted with it.
- Unfinished-render data in your browser: up to 24 hours, removed when the render finishes.
- Social account connections: until you disconnect them in Channels or delete your account. Videos already posted stay on the platform until you delete them there.
- Posting plans and their history: until you delete the plan or your account. Plan videos assembled on our servers: seven days after posting.
- Analytics data: kept no longer than 24 months; session recordings no longer than 90 days.
- Billing records: kept by Polar and us as long as tax and accounting law requires.
- Invite records and their hashed IP/device values: kept while the accounts involved exist, to prevent repeat abuse.
- Free-trial record: a salted one-way hash of the email address that used the free trial is kept after the account is deleted, only so the trial cannot be claimed again. It cannot be turned back into the address.
- Affiliate click hashes: two days. Daily click totals contain no personal data. The gv_via cookie expires after 60 days.
- Affiliate referrals and their hashed IP/device values: while the accounts involved exist. Commission and payout records: as long as tax and accounting law requires.
Deleting your account does not cancel a Polar subscription; cancel it in the billing portal to stop future charges.
7. Cookies, device storage and your choices
We use strictly necessary storage without asking, because the Service cannot work without it. Everything else runs only after you choose Accept all or enable it under Choose, and you can change your mind any time: . A Global Privacy Control signal from your browser is treated as “Reject all”.
Strictly necessary
- Firebase Authentication (IndexedDB / local storage) — keeps you signed in.
- gv_consent (local storage) — remembers your privacy choices.
- gv-create-flow (local storage / IndexedDB) — keeps the video you are creating if the page reloads.
- gv-render-resume (IndexedDB, up to 24 hours) — lets an interrupted render continue.
- gv_device and gv_pending_ref (local storage) — a random device identifier and an invite code entered at sign-up, used only to apply invite credits and prevent invite and affiliate abuse.
- gv_via (first-party cookie, 60 days) and gv_pending_via (local storage) — the affiliate link you arrived through and when, so the creator who referred you is credited when you sign up. Set only when you open an affiliate link; it holds no identifier.
- gv_visit_day (local storage) — counts one anonymous visit per browser per day for an aggregate visitor total; it contains only a date, and no identifier is created or shared.
- Browser cache of the video engine files used to render on your device.
Product analytics (optional)
- PostHog cookie and local storage (
ph_…_posthog) — a random identifier, session information and your device performance profile, so we can measure usage, errors and render speed by device type. When you are signed in, analytics is linked to your account. Requests go through our own domain.
Session recordings (optional, separate)
- PostHog session replay — a recording of page interactions (clicks, scrolling, page structure) to find usability problems. Everything you type into fields is masked and never recorded.
If you reject or withdraw consent, we stop analytics, delete the PostHog cookies and storage from your browser and stop sending server-side analytics for your account. Withdrawal does not affect processing that happened before it.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy (portability);
- correct inaccurate data;
- delete your data (you can also delete your account in Settings);
- restrict or object to processing based on legitimate interests;
- withdraw consent at any time ();
- opt out of the sale or sharing of personal information — we do neither;
- not be discriminated against for exercising your rights;
- lodge a complaint with your data protection authority (for example in the EU/EEA, the UK, or Türkiye’s Personal Data Protection Authority, KVKK).
To exercise a right, email support@ghostviralai.com from your account email. We will respond within the time required by law (generally 30 days) and may need to verify your identity. Residents of Türkiye may exercise the rights in Article 11 of Law No. 6698 (KVKK) in the same way.
9. Security
We use encryption in transit, access controls, hashed tokens, and least-privilege database rules. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and authorities of a breach where the law requires.
10. Children
The Service is not directed to children under 13, or under the minimum age for consent to data processing in their country (up to 16 in parts of the EU). We do not knowingly collect their personal data; contact us if you believe a child has given us information.
11. Changes to this Policy
We will post updates here and change the date above. If a change materially affects how we use personal data, we will notify you in the product or by email, and ask for consent again where it is required.