PRIVACY POLICY — RoketViral

This Privacy Policy explains how RoketViral (“RoketViral,” “we,” “our,” or “us”) collects, uses, discloses, and safeguards information when you use our mobile application (the “App”) and related services (including our backend services, APIs, and integrations).

By using RoketViral, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

• Account information you provide (such as email, display name, username, profile image—if you choose to provide them).
• User content you submit in the App, including:
  • Uploaded videos (for analysis and/or scheduling)
  • Titles, captions, descriptions, hashtags
  • Feedback, support requests, and other messages you send us

1.2 Social Media Account Connections & Platform Data (Analytics + Publishing)

If you choose to connect a third-party social media account (e.g., YouTube today; and in the future other supported platforms such as Instagram, Facebook, X/Twitter, and others), RoketViral will request permission through the platform’s official authorization flow (such as OAuth or similar secure mechanisms).

Depending on the platform and the permissions (scopes) you grant, we may collect and process:

• Platform analytics and performance metrics, such as views, likes, comments, shares, engagement, reach, watch time, audience and traffic metrics (where available), and related insights.
• Basic account/channel identifiers needed to provide the integration (e.g., channel/user ID, display name, profile image, authorized scopes, and connection status).
• Content metadata about posts/videos you choose to analyze or manage through the App.

1.3 AI-Derived Content Features (Tier-Based)

For advanced-tier features, we may generate and store derived features about your content (for example, structured tags, performance factors, or content attribute signals used to tailor advice). These features:

• Are used to personalize and improve the App’s analytics and AI suggestions for you.
• Are stored securely in our database (e.g., Firebase Firestore) under access controls.
• Are not used to build advertising profiles or sold to third parties.

1.4 Automatically Collected Data (App & Device)

We may automatically collect:

• Device and app information (device model, OS version, app version, language, time zone)
• App usage events (feature usage, screens viewed, interactions)
• Diagnostics (crash logs, performance metrics, network/performance data)

1.5 Subscription & Billing Information (Stripe)

Subscriptions and payments are processed by Stripe. We may receive and store:

• Subscription tier, interval, status, and renewal/cancellation state
• Payment confirmations and billing-related events (e.g., successful renewal, cancellation effective date)

We do not store full credit card numbers or sensitive payment credentials. Payment information is handled by Stripe under their policies.

2. How We Use Your Information

We use information to:

• Provide the App’s core functionality (analytics, insights, recommendations, scheduling workflows)
• Retrieve and display social media analytics you request after you connect an account
• Enable uploading/publishing features only when you initiate them
• Analyze your uploaded content using AI to generate predictions, analytics, and suggestions
• Personalize your experience (including tier-based features and tailored advice)
• Maintain security, prevent fraud/abuse, and enforce our Terms
• Provide support, troubleshoot issues, and improve performance and reliability
• Manage subscriptions, billing state, and entitlement access

3. Social Media Authorization, Control, and No-Password Access

3.1 No Password Collection

RoketViral does not request or store your social media platform passwords.

3.2 Authorization and Revocation (You Control Access)

When you connect a platform account, access is granted via the platform’s authorization flow. You control this access and can revoke it at any time by:

• Disconnecting the account in the App (where available), and/or
• Revoking RoketViral’s access in the platform’s security/settings pages

Once access is revoked, RoketViral can no longer fetch new platform analytics or perform platform actions for that account using that authorization.

3.3 Platform Terms Still Apply

Your use of third-party platforms (YouTube, Instagram, Facebook, X/Twitter, etc.) remains subject to those platforms’ terms and privacy policies. Content you publish to a platform is governed by that platform’s rules after publication.

4. AI Processing With Third-Party Providers

RoketViral uses AI systems to generate analytics, predictions, and suggestions. This may include:

• Google / Vertex AI / Gemini
• OpenAI (ChatGPT)

When you upload content for analysis, we may transmit (securely) some of the following to AI providers as needed to produce results:

• Video frames or compressed representations
• Captions, titles, descriptions, hashtags, and other metadata
• Audio transcripts (if applicable)

If you do not consent to AI processing, do not upload content for AI analysis or use AI features in the App.

5. Storage and Retention

We retain information only as long as necessary for the purposes described in this Policy, unless a longer retention period is required or permitted by law.

5.1 Video Storage (Temporary)

• Videos may be temporarily stored (e.g., in Firebase Storage or equivalent) to enable AI analysis and upload scheduling.
• Videos are stored no longer than 24 hours for upload workflows and are removed from our storage at the time of upload (or earlier when feasible).

5.2 Text Metadata Retention (Up to 35 Days)

We may retain the following text and metadata for up to 35 days for analytics, history, and product functionality:

• Thumbnails (where applicable)
• Titles
• Descriptions
• Hashtags
• Platform video/post IDs and related identifiers

Note: Platform video/post IDs may be publicly visible on the platform, but we still treat them as app data and protect them under our access controls.

5.3 Account Data

We retain account data while your account remains active, and for a reasonable period thereafter as needed for security, compliance, dispute resolution, or to complete requested deletions.

5.4 Logs & Diagnostics

We retain logs and diagnostic data as needed for performance, security monitoring, abuse prevention, and reliability.

5.5 Deletion Requests

You may request deletion of your account or data at any time by contacting: support@roketviral.com.

6. Sharing of Information

We do not sell your personal information.

We may share limited information in the following cases:

6.1 Service Providers and Processors

We may share information with vendors that help us operate the App, including:

• Stripe (billing and subscription management)
• AI providers (processing only to generate results)
• Analytics / crash reporting providers (to measure performance and stability)
• Cloud infrastructure providers (hosting, storage, security controls)

6.2 Connected Social Media Platforms

When you connect a platform and/or initiate uploads, we exchange information with that platform as needed to:

• Retrieve analytics you requested and are authorized to access
• Upload/publish content you initiate
• Maintain connection status and authorized scopes

6.3 Legal and Safety Disclosures

We may disclose information if required to comply with law, respond to lawful requests, protect rights and safety, investigate fraud/abuse, or enforce our Terms.

7. Security

We use administrative, technical, and organizational measures designed to protect your information, including:

• Authentication and access control: RoketViral uses authentication (e.g., Firebase Authentication tokens) to identify users and restrict access. Users are intended to be able to read/write only their own data (including videos, analytics, and metadata) under access control rules.
• Encryption in transit: Data is transmitted over encrypted channels (HTTPS/TLS).
• Secure infrastructure: Our services may run on managed cloud infrastructure (including Google Cloud and Kubernetes-based environments) with network controls and routing protections (e.g., ingress rules and middleware protections such as authorization checks and request filtering).
• Token protection: We do not store platform passwords. Where platform authorization tokens are needed to maintain a connection, we store them with access controls and security measures designed to prevent unauthorized access, and we do not expose them in the App UI.

No method of transmission or storage is 100% secure, but we take reasonable steps to safeguard your information.

8. Your Rights and Choices

Depending on your region, you may have rights to:

• Access, correct, or delete your information
• Withdraw consent where processing is based on consent
• Request a copy of your information
• Object to or restrict certain processing (where applicable)

To exercise these rights, contact: support@roketviral.com.

Social account control

You can disconnect social platforms at any time and revoke access through the platform settings. After revocation, RoketViral cannot access that platform account using that authorization.

9. Device Permissions

Depending on your use of the App, RoketViral may request device permissions such as:

• Photos/Media (to select videos)
• Camera (to record content)
• Microphone (if recording)
• Notifications (to send updates)

You can control permissions in your device settings. Some features may not work if permissions are denied.

10. International Data Transfers

Your information may be processed and stored in countries other than your own (for example, where our service providers operate). We use safeguards intended to protect your data consistent with this Privacy Policy.

11. Children’s Privacy

RoketViral is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted in the App with a revised “Last Updated” date.

13. Contact Us

Email: support@roketviral.com
Email: info@roketviral.com

IN-APP AI COMPLIANCE STATEMENT (Settings → About AI)

AI Processing Notice

RoketViral uses artificial intelligence technologies (including Google/Vertex AI/Gemini and OpenAI ChatGPT) to analyze uploaded content and generate predictions, analytics, and suggestions. AI outputs may not always be accurate and are provided for informational purposes only.

By using RoketViral’s AI features, you agree that your content may be securely processed by these third-party AI providers. RoketViral is an independent application and is not affiliated with, endorsed by, or sponsored by Google or OpenAI.

For questions about how RoketViral uses AI or processes your content, contact us at support@roketviral.com.