Privacy Policy

This policy explains what ViralCraft (operated by Spaceora) collects, why, who processes it, and how long we keep it.

What we collect

• Account data: name, email address and sign-in details (including from Google sign-in if you use it).
• Listing content: photos you upload and the listing details you type (price, location, beds, baths, agent and photographer names, contact number).
• Generated content: AI video shots, finished videos and captions.
• Billing data: plan, payment status and invoices. Card details go directly to Stripe; we never receive the full card number.
• Usage data: pages visited, device and browser type, IP address and basic analytics, used to run and improve the service and prevent abuse.

How we use it

To create and deliver your videos, run your account and credits, take payments, provide support, keep the service secure, and meet legal obligations. Photos are stripped of embedded location data (EXIF) when uploaded. We do not sell your personal information and do not use your photos or videos to train AI models.

Who processes it

• AI video provider (fal.ai), which receives each photo to generate a shot.
• Video rendering on our own servers hosted by Fly.io.
• Private storage on Cloudflare R2; hosting on Vercel; database on Supabase.
• Stripe for payments; Google for optional sign-in; analytics providers for aggregated usage.

These providers process data only on our instructions. Some are located in the United States or elsewhere outside your country; where required we rely on standard contractual clauses or equivalent safeguards.

How long we keep it

• Uploaded photos and AI shots: deleted 30 days after upload.
• Finished videos: deleted 180 days after they are made.
• Account data: kept while your account is open, deleted within 30 days of an account deletion request.
• Billing records: kept as long as tax and accounting law requires (usually up to 7 years).

Your rights

You can ask to access, correct, export or delete your personal data, or object to certain processing. California residents have the rights described in the CCPA/CPRA; EU and UK residents have GDPR rights and may complain to their data-protection authority. Email us to make a request; we answer within 30 days.

Cookies

We use essential cookies for sign-in and security, and analytics cookies to understand usage. You can block non-essential cookies in your browser.

Security and children

Media is stored privately and served only through short-lived signed links. ViralCraft is not for children under 16 and we do not knowingly collect their data.

Contact

ViralCraft is operated by Spaceora. Questions about this page: contact Spaceora at contact@spaceora.app.

Last updated: November 10, 2026