Privacy Policy

1. Who we are

Viral Finder is run by Tr trading Ltd, a company registered in England and Wales (“we”, “us”). We are the controller of the personal data described here under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For anything about your data, email tom@bosswithai.com.

2. What we collect

Your account

• Email address and password. Your password is stored only as a secure hash by our authentication provider; we never see it.
• If you sign in with Google: your name, email address and profile picture, as Google shares them with us. We do not get access to your Google account or any other Google data.

What you do in the app

• Your searches: the keywords you search, how many results you asked for, when, and the results returned, so you can reopen them later.
• Your watchlist: the videos you save.
• Usage records: when each new search started and finished, how many results it returned and what it cost us to run. We use these to apply fair-use limits and control costs.

Technical data

• Server logs: our hosting provider records requests to the site, including IP address, browser type and time, to run and secure the service. Our own logs record search keywords and run details but not who ran them.
• Error reports: when something breaks, we record what went wrong, the page or action involved (such as the keyword being searched), your browser type, and your account ID if you are signed in. They do not include your email address, IP address or password.

We do not use advertising or analytics trackers, and we do not sell personal data.

3. Data about TikTok creators

Search results contain information that TikTok creators have made public: usernames, captions, video links and thumbnails, view, like, comment, share and save counts, and account totals such as follower and like counts. We collect it through a third-party data provider, only when a user searches, to calculate how each video performed compared with its creator's usual videos.

We rely on our legitimate interest, and our users', in analysing publicly available content. We do not collect private information, contact details or anything a creator has not made public. If you are a creator and want to object, or want us to remove results about you from what we store, email tom@bosswithai.com with your TikTok username and we will act on it.

4. How we use it, and why

We will not send you marketing emails without your consent, and you can withdraw it at any time.

5. Who we share it with

We use a small number of service providers who process data on our behalf, under contracts that require them to protect it and use it only as we instruct:

• Supabase: account sign-in, database and account emails.
• Vercel: hosting the website and its server logs.
• Apify: runs TikTok searches for us. It receives the search keyword and the number of results only, never your name, email or account.
• Sentry: error reports, so we can find and fix problems.
• Google: only if you choose to sign in with Google.
• Our email delivery provider, for account emails.

We may also disclose data if the law requires it, to protect our rights or users' safety, or to a buyer if our business is sold, in which case this policy would continue to apply.

Viral Finder is independent and is not affiliated with TikTok. We do not share your data with TikTok.

6. International transfers

Some of our providers store or process data outside the UK, including in the European Economic Area and the United States. Where they do, the transfer is protected by UK adequacy regulations, the UK Extension to the EU–US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum. Email us for details of the safeguard for a particular provider.

7. How long we keep it

• Account details, usage records, searches and watchlist: for as long as your account exists. You can delete individual searches and saved videos in the app at any time. When your account is deleted, all of these are deleted with it.
• Shared keyword results: stored per keyword, per day, and not linked to any user.
• Server logs: kept by our hosting provider for a short period, normally days, then deleted.
• Error reports: up to 90 days, then deleted.
• Emails with us: for up to two years after the conversation ends, unless we need them longer for a legal claim.

8. Cookies and local storage

We only use what the site needs to work:

• Sign-in cookies, which keep you signed in. Without them you could not use an account.
• Session storage in your browser, which remembers the search you were viewing so the back button returns you to it. It is cleared when you close the tab.

These are strictly necessary, so the law does not require us to ask for consent. We do not use analytics, advertising or tracking cookies. If that changes, we will ask for your consent first and update this policy.

9. Your rights

Under UK data protection law you have the right to:

• get a copy of your personal data;
• have inaccurate data corrected;
• have your data deleted, including your whole account;
• restrict or object to how we use it, including anything based on legitimate interests;
• receive the data you gave us in a portable format;
• withdraw consent, where we rely on it.

To use any of these, email tom@bosswithai.com from the address on your account. We will reply within one month. There is no charge. To delete your account, email us and we will delete it and everything linked to it.

10. Security

Data is encrypted in transit. Each user's searches and watchlist are separated in the database itself, so one account cannot read another's. Access to our systems is limited to people who need it. No system is perfectly secure, but if a breach affects you we will tell you and, where required, the Information Commissioner's Office.

11. Children

Viral Finder is for adults aged 18 and over and is not directed at children. If you believe a child has given us personal data, email us and we will delete it.

12. Changes to this policy

We will update the date at the top when this policy changes. If a change is significant, we will tell you by email or in the app before it takes effect.

13. Contact and complaints

Email tom@bosswithai.com with any question or concern. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.