Privacy Policy

PostToViral · Operated by Amaran LLC, a Delaware limited liability company · Last updated October 9, 2026

This Privacy Policy explains how Amaran LLC, a Delaware limited liability company (“PostToViral”, “we”, “us”), collects, uses, shares, protects and deletes information when you use our social publishing, engagement, analytics and supported advertising tools.

1. Information We Collect

Account and contact data such as name, email, workspace and billing-related information.
Content you upload, including posts, captions, media, schedules and publishing settings.
Connected-platform information made available through authorized OAuth permissions, including account identifiers, profile/page/channel information and access tokens.
Supported comments, messages, replies, engagement and analytics data needed to provide connected features.
Meta advertising configuration and performance information when you use supported advertising workflows.
Device, log, diagnostic, security and usage information needed to operate and protect the service.

2. Connected Platforms

When you connect Facebook, Instagram, TikTok or YouTube/Google, PostToViral receives only the information and permissions you authorize and the platform makes available. We use that data to provide the connected features you request, such as publishing, account selection, engagement, analytics or supported advertising operations.

3. How We Use Information

We use information to authenticate users, connect accounts, publish and schedule content, show supported messages and comments, process replies, provide analytics, enable supported Meta advertising workflows, maintain billing and subscriptions, prevent abuse, troubleshoot issues, provide support and comply with law.

4. Service Providers

We may use hosting, database, storage, payment, monitoring, email and infrastructure providers that process information on our behalf under appropriate contractual and security obligations. We may also transmit information to connected social platforms when you instruct us to perform an action.

5. Sale of Personal Information

We do not sell your personal information to advertisers. Connected-platform data is used to provide PostToViral functionality and is not used to create unrelated advertising profiles.

6. OAuth Tokens and Security

We protect account data and access tokens with encryption in transit (TLS/HTTPS), encryption at rest, application-layer encryption of OAuth tokens, and access restricted to authorized personnel. The specific safeguards applied to Google user data are listed in section 7. No system can guarantee absolute security. You are responsible for securing your PostToViral credentials and the accounts you connect.

7. Google User Data and YouTube API Services

PostToViral uses YouTube API Services. By using the PostToViral features that connect to YouTube, you agree to be bound by the YouTube Terms of Service. Google's handling of your information is described in the Google Privacy Policy.

Google user data we access and store

When you connect a YouTube channel, and only with the permissions you grant on Google's consent screen, PostToViral accesses and stores the following Google user data:

Your YouTube channel identifier, channel name and basic channel information.
OAuth access and refresh tokens that let PostToViral act for you.
Videos you publish or import through PostToViral, including titles, descriptions, thumbnails, video IDs and publication status.
Comments on your videos, so you can read and reply to them inside PostToViral.
YouTube analytics for your videos and channel, used to build your reports.

How we use Google user data

We use Google user data only to provide the features you see in PostToViral: uploading and scheduling your videos, showing publication status, displaying and replying to comments, and showing your analytics. We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalized artificial intelligence or machine-learning models.

Sharing, transfer and disclosure of Google user data

We do not sell Google user data. We do not share, transfer or disclose Google user data to any third party except in these limited cases:

Our hosting provider. Google user data is stored on Microsoft Azure (Microsoft Corporation) servers in the United States. Microsoft processes the data only to host PostToViral on our behalf, under its data protection terms, and may not use it for its own purposes.
Google. When you instruct us to upload a video, reply to a comment or retrieve analytics, we send the necessary data to YouTube through YouTube API Services.
Legal requirements. We may disclose data where required by applicable law, regulation or valid legal process.
Business transfer. If PostToViral is involved in a merger, acquisition or sale of assets, Google user data may be transferred to the successor, subject to this policy and with notice to you.

We do not share Google user data with advertisers, data brokers, payment processors or other social media platforms. Google user data is not transferred to Meta or TikTok.

PostToViral's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect Google user data

Encryption in transit. All data moving between your browser, our servers and Google is encrypted with TLS (HTTPS).
Encryption at rest. Google user data is stored in databases and storage that are encrypted at rest.
Token encryption. OAuth access and refresh tokens are additionally encrypted at the application layer before they are stored, and are never shown in the product.
Access control. Each user can access only their own connected accounts and data. Access to production systems is limited to authorized personnel who need it to operate the service.
Data minimization. We request only the Google permissions the features need and store only the data described above.
Incident response. If a security incident affects Google user data, we will notify affected users and regulators as required by law, without undue delay.

Retention and deletion of Google user data

We keep Google user data only while your YouTube channel is connected. When you disconnect the channel or revoke PostToViral's access, we stop using the connection and delete the stored Google user data, including tokens, within 7 days, except where we are required by law to keep it or where it has been irreversibly de-identified. You can also request deletion at any time by emailing support@amaran.app.

Revoking access

You can revoke PostToViral's access to your Google account at any time from your Google security settings at https://security.google.com/settings/security/permissions.

8. Retention and Deletion

We retain information only as reasonably necessary to provide the service, meet contractual obligations, resolve disputes, prevent abuse and comply with law. When you disconnect an integration, we stop using the connection for new actions. You may request account or data deletion by contacting support.

Retention and deletion of Google and YouTube data is described in section 7.

9. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, obtain a copy of, or object to certain processing of personal information. You can also disconnect supported social accounts through the product or the relevant platform.

10. Advertising Data

If you use Meta advertising features, campaign configuration and performance information may be processed to create, display and manage the campaign workflow you request. Meta controls its own advertising platform, billing and independent data practices.

11. International Processing

Your information may be processed in countries different from where you live. Where required, we use recognized safeguards for cross-border data transfers.

12. Children

PostToViral is intended for business and creator accounts used by adults. The service is not directed to children under the age required to consent to online services in their jurisdiction.

13. Changes

We may update this Privacy Policy to reflect product, legal or platform changes. The current version will be posted on this page.

14. Contact

Amaran LLC, a Delaware limited liability company
1925 E Belt Line Rd, Carrollton, TX 75006
support@amaran.app