Security

How ViralGenHub looks after your accounts and your content, in plain words.

Your platform logins

• We never see your passwords. You sign in on each platform's own page and approve access there. The platform gives us a token that can only do what you approved, and you can revoke it at any time, on the platform or by disconnecting the channel in ViralGenHub.
• Tokens are encrypted at rest. Platform access tokens are stored encrypted in our database.

Where your data lives

• Hosted in Germany. ViralGenHub runs on servers rented from Hetzner Online GmbH, in the EU.
• Behind Cloudflare. All traffic is encrypted in transit (HTTPS) and passes through Cloudflare, which protects the service against floods of traffic.
• Nightly backups. We take a backup of the database every night.

Payments

Stripe handles card payments. Your card details go to Stripe, not to us: we store your plan, its status and Stripe's customer reference, and never a card number.

Open source

ViralGenHub is built on Postiz and released under the AGPL-3.0 licence. Our source code is public, so anyone can read how it stores and uses your data.

What we store

• Your account: name, email address, a securely hashed password, and the workspace name you choose.
• Your connected channels: the platform's account identifier, display name and the encrypted access token, kept only while the channel is connected.
• Your content: the text, images and videos you schedule, and the date, time and destination of each post.
• Billing: your plan, its status and Stripe's customer reference.
• Server logs (IP address, browser type and time of request), kept for up to 90 days for security.

What we do with it, how long we keep it and how to have it deleted are in the Privacy Policy and the data deletion instructions. We do not sell your data or use it for advertising, and this website runs no analytics or tracking scripts.

Reporting a vulnerability

If you find a security problem in ViralGenHub, e-mail support@viralgenhub.com with what you found and the steps to reproduce it. We reply to every report and tell you what we did about it. Please give us time to fix the problem before publishing details, and do not access or change other people's data while testing. We do not run a paid bug bounty.

ViralGenHub is run by Talkiru Communications Ltd, registered in England and Wales (company 17019377), ICO registration ZC091263.