Privacy policy
Last updated May 25, 2026
Hazmeviral ("Hazmeviral", "we", "us") helps creators and brand operators run social media channels with the help of AI. This policy explains what personal data we collect when you use hazmeviral.com and the Hazmeviral web app, how we use it, who we share it with, and the choices you have.
If you have questions about this policy or the way we handle your data, write to us at the address at the bottom of this page.
Information we collect
We collect information you provide directly, information generated while you use the service, and information from third parties you choose to connect.
- Account information. When you sign up, our authentication provider (Clerk) handles your email address, name, profile image (if you provide one), and password. We receive a user identifier and your basic profile from Clerk.
- Brand and content data. The brands, briefs, pillars, hooks, documents, reels, scripts, captions, hashtags, schedules, and other content you create or upload inside the app are stored so we can show them back to you and feed them to AI features.
- AI provider credentials. If you connect your own AI provider API keys (Anthropic, OpenAI, Google Gemini, Alibaba Qwen, and similar), we store them securely on our backend so we can call the provider on your behalf. We never display the full key back to the browser after it is saved.
- Connected social channels. When you connect a social network (such as Instagram, TikTok, YouTube, Facebook, or X), we store the access tokens and the minimum profile information each network returns so we can publish or read metrics on your behalf. We do not store your social network password.
- Usage data. We collect basic logs (timestamps, IP address, user agent, pages requested, errors) to keep the service running and protect it from abuse. Anonymous performance and traffic analytics are collected by Vercel Analytics.
- Cookies and similar technologies. We use strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies.
How we use your information
We process the data above for the following purposes:
- Provide and operate the service: create your account, store your brands and content, render the dashboard, and let you publish or schedule reels.
- AI assistance: pass your project context (brand brief, pillars, prior reels, hooks, metrics) to the AI provider you have configured, so the model can suggest scripts, hooks, captions, hashtags, SEO titles, pinned comments, and visual hooks tailored to your channel.
- Communication: send transactional emails (sign-in confirmations, security alerts, important product changes). We will not send marketing emails without your consent.
- Security and abuse prevention: detect unusual activity, rate-limit abusive traffic, and keep accounts safe.
- Compliance: meet our legal obligations and respond to lawful requests from authorities.
Who we share data with
We do not sell your personal data. We share it only with the providers that make the service possible, and only to the extent needed for them to do their job.
- Clerk, for authentication and account management.
- Vercel, for hosting and infrastructure analytics.
- AI providers you choose (Anthropic, OpenAI, Google, Alibaba, or others you may connect). When you trigger an AI action, the relevant context is sent to that provider. We do not pay for AI usage on your behalf; the call runs against your key.
- Social networks you connect, for the actions you ask Hazmeviral to perform (publish a reel, read metrics).
- Service providers that process data on our behalf under written agreements (for example email delivery for transactional messages, error tracking, customer support).
- Authorities or third parties when required by law, court order, or to protect our rights, users, or the public.
AI providers and your content
Hazmeviral uses a Bring Your Own Key model for AI. When you save an API key, your prompts and the context we attach (project brief, prior reels, hooks, metrics, pillars) are sent to the provider you chose under their terms and privacy policy. We do not use your content to train Hazmeviral models or any third party's general-purpose model.
Each provider has its own data handling policy. Review the policies of the AI providers and social networks you connect, since their handling of your content is outside our control.
Data retention
We keep your account data while your account is active. If you delete your account or a specific brand, we remove the associated personal data from our active systems within 30 days. Limited records may be retained longer when required to comply with law, resolve disputes, or enforce our agreements.
Backups containing your data are rotated and overwritten regularly and are not restored except in disaster recovery scenarios.
Your rights
Depending on where you live (EU, UK, California, and other jurisdictions), you may have the right to:
- Access the personal data we hold about you.
- Ask us to correct or update inaccurate data.
- Ask us to delete your account and associated data (see the data deletion page for the process).
- Export a copy of your content in a portable format.
- Object to or restrict certain processing, and withdraw consent at any time.
- Lodge a complaint with your local data protection authority.
Security
We use industry-standard measures to protect your data: encrypted transport (HTTPS), encrypted storage of secrets, scoped access controls, and regular review of dependencies. No system is completely secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.
International transfers
Hazmeviral is operated using cloud infrastructure that may store and process data in countries outside your own (including the United States). When data is transferred internationally, we rely on the safeguards required by the applicable law, such as standard contractual clauses.
Children
Hazmeviral is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes we will give you reasonable notice (for example, an email or an in-app banner). Continued use of the service after a change means you accept the updated policy.
Contact us
For privacy questions, data requests, or to exercise any of your rights, write to:
privacy@hazmeviral.com