Privacy Notice

Last updated: June 27, 2026

This Privacy Notice explains how Gigork Stormrage ("we", "us"), operator of Viralynza (the "Service"), processes your personal data. We act as the data controller for the personal data described below.

1. Data we collect

Account data: email address, hashed password, language preference.
Usage data: products you analyze, saved analyses, plan limits and counters.
Support data: messages you send us.
Technical data: IP address, device and browser identifiers, log/telemetry data for security and debugging.
Billing data: handled by Paddle (see Sharing). We receive only the subscription status, plan and customer reference — not full card details.

2. Purposes and legal basis

Provide the Service (create your account, run analyses, save results) — performance of contract.
Security and fraud prevention, abuse detection, logging — legitimate interests.
Service improvement and aggregated analytics — legitimate interests.
Customer support — performance of contract / legitimate interests.
Legal obligations (tax, accounting, responding to lawful requests) — legal obligation.

3. Sharing

We share personal data with:

Paddle, our Merchant of Record, for the sale of subscriptions, payments, tax compliance, invoicing and subscription management. See Paddle's privacy notice.
Service providers and subprocessors we rely on to operate the Service, including hosting, database, authentication and AI inference providers.
Professional advisers (legal, accounting) where necessary.
Authorities where required by law.

We do not sell personal data.

4. International transfers

Some subprocessors may process data outside your country, including outside the UK/EEA. Where required we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

5. Retention

We keep account and usage data for as long as your account is active. After deletion we erase or anonymize it within a reasonable period unless we must retain it for legal, accounting or security purposes (typically up to 7 years for billing records held via Paddle).

6. Your rights

Subject to applicable law (including GDPR for UK/EEA users), you can request: access, rectification, erasure, restriction, portability, objection to processing, and withdrawal of consent. You may also lodge a complaint with your local supervisory authority. We aim to respond within one month.

7. Security

We use appropriate technical and organisational measures including encryption in transit, access controls and the use of reputable infrastructure providers. No system is perfectly secure; please use a strong, unique password.

8. Cookies

We use essential cookies and local storage to keep you signed in and remember your language and preferences. Where we add analytics or marketing cookies we will request consent first.

9. Contact

Controller: Gigork Stormrage. For privacy requests, contact us at viralynza@gmail.com.