1. Who We Are
This policy explains how Account Viral (“we”, “us”), operated by [LEGAL ENTITY NAME AND REGISTERED ADDRESS — TO BE COMPLETED BY THE OWNER], collects and uses personal information when you visit the website, use the dashboard or the reseller API, or contact us. We are responsible for that information. Read it together with our Terms of Service.
2. Information We Collect
Information you give us
- Account details: your name, email address, contact number and password. Passwords are stored only as a one-way hash. You can also add a profile picture and choose a timezone.
- Order details: the services and quantities you order, the links you submit for each order, and any refill or cancel requests.
- Payment details: the payment method you choose, deposit amounts, transaction IDs, and any payment proof images you upload. We do not ask for or store full card numbers.
- Messages: support tickets and their attachments, and purchase queries about accounts listed for sale, including the contact number and message you send with them.
Information collected automatically
- IP address and user agent — the network address and the browser and device description your browser sends. They are stored with your session while you use the site, recorded when you claim a free trial, and logged when an API request is rejected.
- Session and security data held in cookies, described in section 8.
3. Why We Use It
- Name and email address — to create and secure your account, sign you in, and send messages about your orders, deposits and account.
- Contact number — so our team can reach you about support requests and account purchase queries.
- Password — to authenticate you. We never see it in plain text.
- IP address and user agent — to keep sessions secure, detect and prevent fraud, enforce the one-trial-per-day rule and API rate limits, and investigate abuse.
- Order links — to deliver your orders. Delivery cannot work without them.
- Payment proofs and transaction IDs — to confirm a deposit was actually paid before crediting it, and to handle chargebacks, disputes and accounting.
- Tickets and purchase queries — to answer you and keep a record of what was agreed.
[LAWFUL BASIS FOR EACH PURPOSE, WHERE GDPR OR A SIMILAR LAW APPLIES — TO BE COMPLETED WITH A LAWYER.]
4. Payment Proofs
Payment proof images you upload with a deposit are stored on our servers under randomly generated file names. They are shown to staff with administrator access so the deposit can be checked and approved or rejected, and they may be consulted again if a payment is disputed.
They are not sent to our delivery providers and are not used for any other purpose. Upload only what is needed to show the payment: you can crop out unrelated account numbers or personal details before uploading.
5. Who Receives Your Information
- Upstream service providers. To deliver an order we send the provider the link you submitted, the service and the quantity. We do not send your name, email address or contact number.
- Payment providers. Deposits are made through the method you choose — bank transfer, card payment, PayPal or USDT. That provider processes the payment under its own privacy policy. USDT payments are recorded on a public blockchain, where the transaction is visible to anyone.
- Providers that run the platform for us, such as hosting and email: [HOSTING, EMAIL AND OTHER INFRASTRUCTURE PROVIDERS — TO BE COMPLETED BY THE OWNER].
- Authorities, where the law requires it, to protect our rights or our users, or to report content involving minors or other serious illegal activity.
- A buyer or successor, if the business is sold or reorganised, under the same protections as this policy.
We do not sell your personal information, and we do not use advertising or analytics trackers.
6. How Long We Keep It
- Account details — while your account is open, and for [X MONTHS] after it is closed.
- Orders, deposits, transactions and payment proofs — for [X YEARS — CONFIRM WITH AN ACCOUNTANT], because they are financial records and may be needed to resolve disputes.
- Session records, including IP address and user agent — a session expires after 120 minutes without activity, and expired records are removed periodically.
- Free-trial records, including IP address and user agent — [X MONTHS].
- Support tickets and purchase queries — [X MONTHS] after the last message.
- Security and API logs — [X DAYS].
When a period ends, the information is deleted or anonymised, unless we must keep it longer by law or to resolve a dispute.
7. Your Rights And How To Use Them
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct information that is wrong — you can change your name and contact number in My Profile, and support can change your email address;
- delete your information — we delete or anonymise it except for records we must keep, such as transaction records, and deleting your account ends access to any remaining balance; and
- object to or restrict certain uses, or withdraw consent where we rely on it.
How to make a request: email support@accountviral.com from the address on your account, with the subject “Privacy request”, and say which right you want to use. We may ask you to confirm your identity before acting, and we respond within [30] days.
If you are not satisfied with our response, you can complain to your local data protection authority: [SUPERVISORY AUTHORITY — TO BE COMPLETED BY THE OWNER].
8. Cookies And Session Storage
We use only the cookies the site needs to work. No advertising or analytics cookies are set.
- Session cookie — identifies your session so you stay signed in as you move between pages. It expires after 120 minutes without activity.
- XSRF-TOKEN cookie — a security token that protects forms and account actions against cross-site request forgery.
- Remember-me cookie — set only if you tick “Remember me” when signing in, so you stay signed in on that device.
Session data itself, including your IP address and user agent, is stored on our servers rather than in your browser, and the site does not use your browser’s local storage to track you. Blocking these cookies will stop you from signing in.
9. Security
Passwords are stored only as one-way hashes. Access to customer information in the admin panel is limited to staff accounts, and administrators cannot see your password. No system is perfectly secure, so please use a unique password and keep your API key private.
10. Children
Account Viral is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has created an account, contact us and we will close it.
11. International Transfers
Our servers and providers may be located outside your country. [WHERE DATA IS STORED, AND THE SAFEGUARDS USED FOR INTERNATIONAL TRANSFERS — TO BE COMPLETED WITH A LAWYER.]
12. Changes To This Policy
We may update this policy. The date at the top of this page shows when it last changed, and we will give notice by email or in the dashboard before a material change takes effect.
13. Contact For Privacy Requests
For privacy requests and questions, email support@accountviral.com with the subject “Privacy request”. You can also open a ticket from your dashboard, but please do not include passwords or full payment details in a ticket.