ViralPeek Privacy Policy
Last updated: June 30, 2026
Introduction
This Privacy Policy explains what data ViralPeek (https://app.insta-video-api.tsvserv.app) collects, how we use it, and when we may share it. It applies to the web dashboard, the related backend, and connected clients.
By registering for or using ViralPeek, you acknowledge this Policy. We aim to collect only the data needed to operate our Instagram content analysis service.
Data controller
The operator of personal data processed through ViralPeek is the owner and administrator of the service. For privacy questions and data subject requests, contact noreply@insta-video-api.tsvserv.app.
Account and service usage data
When you register and use the dashboard, we may process: email address, password hash (if set), display name, email verification status, Google OAuth sign-in data (identifier and email, if you choose that method), language and UI preferences, subscription and plan details, and technical session data (cookies, IP address, browser type, and access logs).
If you use Contact us, we receive the name, email, and message you provide. You may also store Instagram post URLs, competitor lists, projects, analysis reports, insights, ideas, and related materials in the dashboard — user content you deliberately add to the service.
Instagram and public content data
ViralPeek obtains Instagram post and profile information through the official Meta Graph API (under the Meta for Developers terms and Instagram Terms of Use). We do not ask for your Instagram password.
Depending on the URL, analysis settings, and API availability, the service may process: post identifiers and shortcodes, author usernames, captions, engagement metrics (views, likes, comments), media previews, video duration, and derived data — speech transcripts, structural breakdowns, and text reports generated with AI.
We process this data only to provide analysis, analysis history, project, insight, and idea features. We do not use data obtained from Meta for surveillance, resale, or third-party advertising profiling.
How we use data
We use collected data to: create and maintain your account; provide analysis and reports; sync projects and analysis history; enforce plan limits; send service emails (email verification, password reset, access notifications); keep the service secure and reliable; respond to support requests; and comply with applicable law.
Instagram content is processed at your request — when you add a competitor, start an analysis, or refresh competitor data.
Sharing with third parties
We do not sell your personal data. Data may be processed by the following categories of recipients needed to run the service:
• Meta / Instagram — when requesting public data via the Graph API. • Google — if Google OAuth sign-in is enabled. • AI provider configured by the administrator — for transcription, analysis, and generating text reports and ideas; only the context required for the specific task is sent. • Hosting and infrastructure — servers and mail relay where ViralPeek is deployed. • Payment provider (e.g. Stripe) — when subscription billing is enabled; payment details are handled under the provider’s terms.
We may disclose information when required by law, court order, or to protect rights, user safety, and the service. Each account’s (tenant’s) data is isolated and not accessible to other dashboard users.
Cookies and local storage
We use essential cookies and browser local storage for sign-in sessions, CSRF protection, interface language, and basic preferences. ViralPeek does not serve third-party advertising; we do not place third-party tracking cookies for ad targeting.
You can restrict cookies in your browser settings, but some dashboard features may stop working.
Data retention
Account data is kept while the account is active. After you request account deletion in profile settings, deletion is scheduled after a grace period during which you may cancel; the account is then deactivated and related data is deleted or anonymized within a reasonable time.
Instagram content and reports are kept while needed to provide the service and until you delete the relevant items from your analysis history or project. We do not cache Instagram data longer than necessary for analysis, refresh, and displaying reports.
We permanently retain a protected audit trail of actions in the cabinet (time, technical request parameters, IP address, browser, and redacted action parameters) for security, incident investigation, and service protection.
Backups and other logs may be retained for a limited period for technical and legal reasons, then deleted or anonymized.
Security
We use reasonable organizational and technical measures to protect data from unauthorized access, alteration, or disclosure (tenant isolation, access controls, password hashing, HTTPS). No online service can guarantee absolute security; if you suspect an incident, contact noreply@insta-video-api.tsvserv.app.
Your rights and data deletion
Depending on your jurisdiction (including GDPR where applicable), you may have rights to access, rectify, erase, restrict processing, object, and data portability, and to lodge a complaint with a supervisory authority.
To exercise your rights: delete individual items from analysis history or projects; schedule account deletion in profile settings; or email noreply@insta-video-api.tsvserv.app with your request and account email. We will respond within a reasonable time.
If an Instagram content owner asks us to remove their data from our service, we will review a legitimate request and delete or anonymize relevant data where technically feasible and legally permitted.
Children
ViralPeek is not directed at anyone under 13 (or the minimum age required by applicable law in your country). We do not knowingly collect children’s personal data. If you believe a child provided data to us, contact noreply@insta-video-api.tsvserv.app.
Instagram API and Meta policies
By using ViralPeek, you also agree to comply with applicable Meta and Instagram policies, including the Platform Policy. We process Instagram data only to the extent permitted by the API and your use of the service, and in line with this Policy.
Instagram and Meta are separate companies; their privacy policies govern your relationship with them directly: Instagram Privacy Policy, Meta Privacy Policy.
Changes to this Policy
We may update this Policy. The current version is always available at https://app.insta-video-api.tsvserv.app/privacy with the update date. We may notify you of material changes in the dashboard or by email. Continued use after changes are posted means you accept the updated Policy unless applicable law requires otherwise.
Contact
For privacy questions, data subject requests, and support: noreply@insta-video-api.tsvserv.app or the Contact us form.