Legal

Privacy Policy

Last updated: April 1, 2026

This policy explains how ViralSlice collects, uses, and protects your personal information in compliance with the Philippine Data Privacy Act (RA 10173).

1. Information we collect

When you create an account, we collect your name, email address, and profile picture via Google OAuth. We do not store your Google password. When you upload a video, we collect the video file, its metadata (name, size, duration), and the resulting clips and transcription data. Videos and clips are stored on Amazon S3 (ap-southeast-1, Singapore). We also collect usage data: which features you use, how many videos you process, and token consumption. This helps us improve the service and calculate billing. When you make a purchase, PayMongo handles your payment details. We only store the transaction reference and token pack purchased — no card numbers, GCash PINs, or Maya credentials ever reach our servers.

2. How we use your information

We use your information to: • Provide, operate, and improve the ViralSlice service • Process your video uploads and generate clips • Manage your credit balance and billing history • Send you transactional emails (payment receipts, job completion notices) • Comply with legal obligations under Philippine law (Republic Act 10173 — Data Privacy Act) • Detect and prevent fraud or abuse of the platform We do not sell your personal data. We do not use your uploaded content to train AI models without your explicit, opt-in consent.

3. Data storage and retention

Your account data is retained for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, subject to any legal hold requirements. Video files and generated clips stored on S3 are automatically deleted 90 days after processing unless you download them or they are linked to an active project. You can delete individual files from the dashboard at any time. Billing and audit records are retained for 7 years to comply with Philippine tax and accounting laws.

4. Third-party services

ViralSlice integrates with the following third-party services, each with their own privacy policy: • Google (authentication) — privacy.google.com • Amazon Web Services — aws.amazon.com/privacy (video storage, worker compute) • OpenAI — openai.com/privacy (transcription and virality scoring) • PayMongo — paymongo.com/privacy (payment processing) • Neon (PostgreSQL database) — neon.tech/privacy • Upstash (Redis, rate limiting) — upstash.com/privacy We only share the minimum data necessary for each service to function.

5. Your rights

Under the Philippine Data Privacy Act (RA 10173), you have the right to: • Access — request a copy of the personal data we hold about you • Correction — request we update inaccurate data • Erasure — request deletion of your personal data (subject to legal holds) • Object — object to processing of your data for marketing purposes • Portability — receive your data in a structured, machine-readable format To exercise any of these rights, contact us at privacy@viralslice.com. We will respond within 15 business days.

6. Security

We use industry-standard security measures including: • TLS 1.2+ encryption in transit for all API communications • AES-256-GCM encryption at rest for sensitive tokens (e.g., YouTube OAuth credentials) • AWS IAM least-privilege access controls • Redis-based rate limiting to prevent API abuse • Automated S3 lifecycle policies to expire old files Despite these measures, no system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@viralslice.com.

7. Cookies

ViralSlice uses session cookies for authentication (via NextAuth.js) and functional cookies to remember your preferences. We do not use advertising or cross-site tracking cookies. See our Cookie Policy for full details.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or a prominent notice on the dashboard at least 7 days before the changes take effect. Your continued use of ViralSlice after the effective date constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries: Email: privacy@viralslice.com Address: Philippines For the National Privacy Commission (NPC): privacy.gov.ph