Privacy Policy

Reliability diagnostics

We collect limited failure reports, including before sign-in, to diagnose problems with authentication, page loading, API requests, payments, and copying prompts. Reports contain error categories and codes, HTTP status, a broad page group, and the application release. Our diagnostic reports do not include passwords, authentication tokens, email addresses, payment-card details, prompt contents, search terms, raw error messages, or stack traces. Browser reports are rate limited and may be unavailable if your browser blocks them. Hosting providers may separately process technical request information to operate and protect the service.

Information we use

When you sign in with Google, Firebase Authentication receives your Google account identifier and basic profile information, including your name, email address, and profile image when provided. We use this information to authenticate you and associate your library and subscription with your account. We do not request access to your Gmail messages, Google Drive files, or contacts.

Email and password sign-in is also handled by Firebase Authentication. We store account identifiers, saved skills, collection names and contents, subscription status, and install-prompt usage records to provide the service and enforce credit limits.

Payments

Stripe processes subscription payments. We share account and billing information needed to create your checkout and manage your subscription, and retain Stripe customer and subscription identifiers and payment status. Payment-card details are entered into Stripe checkout rather than stored by our application.

Cookies, analytics, and service logs

Firebase and browser storage keep you signed in. We use Google Analytics and private account activity records to understand page visits, signups, favorites, prompt preparation and clipboard results, credit limits, and checkout activity. Signed-in activity is associated with an internal account identifier so we can understand account usage and improve the service. We do not send email addresses or prompt contents to Google Analytics; Google signals and advertising personalization signals are disabled in our analytics configuration. Hosting and application providers may process technical information such as IP addresses, browser details, request times, and errors to deliver and protect the service. You can control cookies and storage in your browser, although blocking authentication storage may prevent sign-in.

Service providers and external sites

We use Google Firebase and Google Cloud for authentication, hosting, and data storage, Google Analytics for usage analytics, and Stripe for payments. These providers process information under their own applicable terms and privacy policies. Skill sources and agent tools are separate services; visiting them or using a copied installation prompt is subject to their practices. Our website does not need access to your local project files to browse or copy prompts.

Retention and your choices

We keep account and service records as needed to provide the service, resolve billing issues, prevent abuse, and meet applicable obligations. You can remove saved skills and collections through your library. To request access, correction, or deletion of account information, email contact@viralwavestudio.com from your account email. Some billing, security, or legally required records may need to be retained after a deletion request.

Contact and updates

For privacy questions, contact contact@viralwavestudio.com. We may update this policy as the service changes; the date above identifies the latest revision.