Privacy Policy.

Viralscope (the “Service”) is operated by Ember Ventures Ltd., a corporation organized under the laws of British Columbia, Canada (“Ember Ventures”, “we”, “us”, or “our”). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have. It applies to viralscope.net and any related product surfaces we operate.

1. Information we collect

We collect the following categories of information:

• Account information — name, email address, password (hashed), and any profile fields you provide. We use a third-party authentication provider (Clerk) to handle sign-up, sign-in, and password storage.
• Billing information — when you subscribe, our payment processor (Stripe) collects and stores your card details. We never see or store full card numbers. We receive limited metadata from Stripe such as your subscription tier, renewal date, and last-four card digits.
• Product usage — pages you visit, features you use, categories you opt into, search queries, prompts you submit to AI features, and similar telemetry needed to operate, debug, and improve the Service.
• Device and log data — IP address, browser user-agent, approximate location derived from IP, device type, referrer URL, and timestamps. We use this to keep the Service secure, prevent abuse, and diagnose issues.
• Cookies and similar technologies — we use a small number of cookies and equivalent storage mechanisms to keep you signed in, remember preferences, and measure aggregate product usage. See Section 7 below.
• Communications — if you email us or fill out a form, we keep the content of that message and any contact details you provide.

We do not knowingly collect information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

2. How we use the information

We use the information described above to:

• Operate, secure, and improve the Service;
• Authenticate you and protect your account;
• Process payments and manage subscriptions, including renewals and refunds;
• Generate the personalized analyses, playbooks, and emails you subscribe to;
• Send transactional messages (receipts, security alerts, product updates) and, with your consent where required, marketing emails;
• Respond to support requests and resolve disputes;
• Detect, prevent, and investigate fraud, abuse, scraping, and security incidents;
• Comply with legal obligations and enforce our Terms of Service.

3. AI features

When you use AI-powered surfaces (for example, the custom playbook generator or ViralChat), the prompts you submit and relevant context are sent to our AI provider (Anthropic) to produce a response. We do not allow our AI providers to use your prompts to train their general-purpose foundation models. Outputs are returned to you and may also be stored on our servers so we can show them back to you later.

4. How we share information

We do not sell personal information. We share it only as described below:

• Service providers who help us operate the Service — for example, Clerk (authentication), Stripe (payments), Anthropic (AI), Resend (email delivery), Vercel (hosting), Vercel Postgres / Upstash Redis (storage), and customer-support tools. These providers may only process the information we share for the purposes we instruct.
• Legal and safety — to comply with applicable law, lawful requests by public authorities, or to protect the rights, property, or safety of Ember Ventures, our users, or the public.
• Business transfers — if we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction subject to standard confidentiality protections.
• With your direction — when you ask us to share something with another service or person.

5. International transfers

We are based in Canada, but our service providers operate servers in the United States, the European Union, and other regions. By using the Service, you understand that your information may be transferred to and processed in countries other than the country where you live, including countries that may have different data-protection rules.

6. How long we keep information

We retain personal information for as long as your account is active, as long as we need it to operate the Service, and as long as required by law. When you delete your account, we will delete or anonymize your personal information within a reasonable period, unless we are required to keep it (for example, for tax or financial-record purposes). Aggregated or anonymized data that cannot identify you may be kept indefinitely.

7. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used in aggregate. Most browsers let you refuse or delete cookies, but some features of the Service may not work without them. We may use privacy-respecting analytics to count visits and feature usage; we do not use third-party advertising cookies.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain uses. You can:

• Update or correct your account information from your account settings.
• Unsubscribe from marketing emails using the link in the footer of those emails. Transactional messages (receipts, security alerts) will continue.
• Delete your account at any time. To request deletion of associated personal information, email us and we will action the request within a reasonable period.

To exercise a right or ask a privacy question, contact us using the details below. We will respond within the time frame required by applicable law.

9. Security

We use industry-standard administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. If we ever become aware of an incident affecting your information, we will notify you and the relevant authorities as required by law.

10. Third-party links

The Service may link to third-party websites, products, or services we do not control. This Policy does not apply to those third parties. Review their own privacy policies before sharing personal information with them.

11. Changes to this Policy

We may update this Policy from time to time. When we make a material change, we will update the “Last updated” date and, where appropriate, give you additional notice (for example, by email or via a prominent in-product banner). Continued use of the Service after a change takes effect means you accept the updated Policy.

12. Contact us

Ember Ventures Ltd., British Columbia, Canada. Questions about this Privacy Policy, or to exercise a privacy right: privacy@viralscope.net.