Privacy Policy

1. Introduction

Welcome to MakeMeViral.ai ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered social media management platform at smm-automation-app.azurewebsites.net (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Full name (optional)
• Password (encrypted and hashed - we never store plain text passwords)

2.2 Brand and Business Information

To provide personalized AI content generation, we collect:

• Brand name and industry
• Website and company size
• Target audience demographics (age, gender, interests, locations)
• Marketing goals and content preferences
• Brand voice, tone, and visual identity (colors, keywords)
• Competitor information
• Content topics and posting preferences

2.3 Social Media Content

We store content you create or generate through our Service:

• AI-generated social media posts, captions, and hashtags
• Images generated using Azure OpenAI DALL-E 3
• Content schedules and editorial plans
• User feedback and regeneration requests

2.4 Social Media Account Connections

When you connect social media accounts (LinkedIn, Facebook, Instagram), we collect:

• OAuth access tokens and refresh tokens (encrypted)
• Platform user IDs and usernames
• Published post IDs and URLs
• Performance metrics (likes, comments, shares, reach, engagement rates)

2.5 Payment Information

Payment processing is handled by Stripe. We do not store your credit card details. We only store:

• Stripe customer ID
• Subscription ID and status
• Plan type (Free, Pro, Agency)
• Subscription start and end dates

2.6 Usage Data

We automatically collect:

• Number of posts generated and published
• Features used (AI content generator, viral LinkedIn tool, etc.)
• Login times and session duration
• Device information and browser type
• IP address and geographic location (for security and compliance)

2.7 Cookies and Tracking Technologies

We use essential cookies for:

• Authentication and session management (next-auth session cookies)
• Remembering your cookie consent preference

We do NOT use tracking cookies, advertising cookies, or third-party analytics tools like Google Analytics.

3. How We Use Your Information

We use your information to:

• Provide and maintain our AI-powered social media management Service
• Generate personalized social media content using Azure OpenAI GPT-4o-mini and DALL-E 3
• Publish content to your connected social media accounts (LinkedIn, Facebook, Instagram)
• Process payments and manage subscriptions through Stripe
• Send you essential service notifications (password resets, subscription changes, service updates)
• Provide customer support and respond to your inquiries
• Monitor usage to enforce tier limits (10 posts/month for Free, 100 for Pro, unlimited for Agency)
• Improve our Service and develop new features
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service

We do NOT sell your personal information to third parties. We do NOT use your data for advertising or marketing purposes without your explicit consent.

4. How We Share Your Information

4.1 Third-Party Service Providers

We share your information with trusted third-party service providers who help us operate our Service:

• Microsoft Azure - Hosting infrastructure (Azure App Service, Azure Database for PostgreSQL, Azure Container Registry). Data is stored in European data centers.
• Azure OpenAI Service - AI content generation (GPT-4o-mini) and image generation (DALL-E 3). Your content is processed but NOT used to train AI models.
• Stripe - Payment processing and subscription management. See Stripe's Privacy Policy.
• LinkedIn, Meta (Facebook/Instagram) - Publishing content to your social media accounts. We only share the content you explicitly choose to publish.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or security incidents
• Enforce our Terms of Service

4.3 Business Transfers

If MakeMeViral.ai is acquired, merged, or sells assets, your information may be transferred to the new owner. You will be notified via email of any such change.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide our Service:

• Account Data: Retained until you delete your account
• Content Data: Retained until you delete specific content or your account
• Payment Records: Retained for 7 years for tax and accounting purposes (legal requirement)
• Usage Logs: Retained for 90 days for security and debugging purposes

When you delete your account, we permanently delete all your personal data within 30 days, except for payment records required by law.

6. Your Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

6.1 Right to Access (Article 15)

You can request a copy of all personal data we hold about you. Use our Data Export Tool to download your data as a JSON file.

6.2 Right to Rectification (Article 16)

You can update your account information, brand details, and content at any time through your dashboard settings.

6.3 Right to Erasure / "Right to be Forgotten" (Article 17)

You can delete your account and all associated data at any time. Contact us at privacy@smm-automation.com to request account deletion.

6.4 Right to Data Portability (Article 20)

You can export your data in a machine-readable format (JSON) using our Data Export Tool.

6.5 Right to Restrict Processing (Article 18)

You can request that we limit how we use your data. Contact us at privacy@smm-automation.com.

6.6 Right to Object (Article 21)

You can object to our processing of your data for certain purposes. Contact us to exercise this right.

6.7 Right to Withdraw Consent

You can withdraw consent at any time by deleting your account or disconnecting social media integrations.

To exercise any of these rights, email us at privacy@smm-automation.com. We will respond within 30 days as required by GDPR.

7. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data is transmitted over HTTPS with TLS 1.3
• Encryption at Rest: Database connections use SSL mode (sslmode=require)
• Password Security: Passwords are hashed using bcrypt with salt
• OAuth Token Security: Social media tokens are encrypted in the database
• Access Controls: Role-based access control (users can only access their own data)
• Infrastructure Security: Hosted on Microsoft Azure with SOC 2, ISO 27001 compliance

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. International Data Transfers

Our servers are located in Europe (Azure European data centers). If you access our Service from outside the EEA, your data may be transferred to and processed in Europe.

For users in the EEA, we ensure that data transfers comply with GDPR through:

• Standard Contractual Clauses (SCCs) with third-party processors
• Adequacy decisions by the European Commission

9. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at privacy@smm-automation.com, and we will delete such information.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do NOT sell your data)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, email privacy@smm-automation.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Updating the "Last updated" date at the top of this page
• Sending an email notification to your registered email address
• Displaying a prominent notice on our Service

Your continued use of the Service after changes to this Privacy Policy constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us:

13. Data Protection Officer

For GDPR compliance matters, you can contact our Data Protection Officer at: