At a Glance
This Privacy Policy explains how Soltan Enterprises Limited, trading as Rewyse, collects, uses, shares and protects your personal information when you visit the pages for The Ultimate Social Media Bundle (Claude Edition), buy it, use its members area or contact us. The short version:
- Who we are: Soltan Enterprises Limited, trading as Rewyse, registered in Hong Kong SAR, China.
- What we collect: your name, email address and what you bought; billing details, which our payment processor Whop handles; basic technical data such as your IP address; a checkout record of each order (the time, the version of our Terms, your IP address and your browser); and, when you use the members area, sign-in and device records. We never see or store your full card number.
- What we do not collect: anything you do inside Claude. Your chats with the agents, the files and posts you share with them and anything else in your Claude account are processed by Anthropic under Anthropic’s own terms and privacy policy. We do not receive or see that content. We also never get access to your social media accounts.
- Why: to process your order, give you access to your members area, keep your account secure and stop it being shared, send your welcome, sign-in and product update emails, answer support requests and meet our legal obligations.
- Who helps us: Whop (payments), Vercel (website hosting and cookieless analytics), Supabase (the members area database), HighLevel (customer records and email), Google (fonts and Tag Manager), Meta (ad measurement through the Meta Pixel) and Microsoft (Clarity page analytics).
- Advertising and analytics, outside the EEA, the UK and Switzerland only: we use the Meta Pixel and Microsoft Clarity (which records how you click, scroll and move around our pages) through Google Tag Manager, and after you buy, our server reports your purchase to Meta. Visitors in the EEA, the UK and Switzerland are not tracked by these tools, so we do not show a cookie banner. Anyone can opt out on our Your Privacy Choices page (linked at the bottom of every page), with Global Privacy Control or by emailing us (see Section 8). We do not sell your personal information.
- Your rights: you can ask to access, correct, delete or restrict your personal information at any time.
- Contact: support@viralskool.ai.
Please read this Privacy Policy in full before using our website or buying the product. By using the website or buying the product, you confirm that you have read and understood it.
Notice about session recording and ad tracking (visitors outside the EEA, the UK and Switzerland): on our sales page, checkout pages, thank-you page and legal pages, we use two tools as soon as the page loads, unless you have opted out:
- Microsoft Clarity records your visit as a session replay: your clicks, scrolling and mouse movement on the page, with the text you type masked. We use it to see how people use our pages and fix problems.
- The Meta Pixel tells Meta which of our pages you visit, when you open a checkout page and, if you buy, your purchase. We use it to measure and improve our Facebook and Instagram ads.
We do not show a pop-up or banner about these tools. To stop them, click “Do not sell or share my personal information” on our Your Privacy Choices page (linked at the bottom of every page), or turn on Global Privacy Control in your browser. Visitors in the EEA, the UK and Switzerland are not tracked by these tools. Section 8 has the full details.
1. Who We Are
The Ultimate Social Media Bundle (Claude Edition), its sales page, checkout pages, thank-you page and members area at rewyse.ai/social-bundle (together, the “Website”) are owned and operated by Soltan Enterprises Limited, trading as Rewyse, a company registered in Hong Kong SAR, China (“Company”, “we”, “us” or “our”).
Our registered address is: Office 3906, 39/F, The Center, 99 Queen’s Road Central, Central, Hong Kong.
We are the party responsible for the personal information described in this policy. “Personal information” means any data that can, directly or indirectly, identify you, describe you, relate to you or be associated with you. “You” means any visitor to the Website and any buyer or user of The Ultimate Social Media Bundle (Claude Edition) (the “Product”).
The Product is an independent product. It is not affiliated with, made, sponsored or endorsed by Anthropic. We cannot control the privacy practices of third-party websites and services that we do not own, including Claude and social media platforms.
2. What This Policy Covers
The Product is a set of 8 AI content agents for Claude, Anthropic’s AI assistant, plus the bonuses and any add-ons described on the product page. We deliver it digitally, through a members area that you sign in to with a link or code we email you. Everything in your order is there as soon as you pay, as digital files and instructions, and future updates are added there too.
This policy covers what happens on our Website, at our checkout, in our members area and in our emails and support conversations with you.
What this policy does not cover: your use of Claude and your social media accounts. To use the agents you need your own paid Claude plan, which you buy from Anthropic separately. When you add our agents to Claude and use them, everything you type, upload, connect or store there (including your chats with the agents and the posts, links and stats you share with them) is in your own Claude account and is processed by Anthropic, not by us. We do not receive or see that content. Anthropic’s own terms and privacy policy apply to it. The same goes for your social media accounts: what you post there is covered by each platform’s own policies.
3. Information We Collect
3.1 Information You Give Us
We collect information you give us when you:
- Buy the Product at our checkout
- Sign in to the members area, with a link or 6-digit code we email you, or automatically on the thank-you page right after you buy
- Email us for support or with a question
- Comment on, message or otherwise interact with us on social media
- Ask us for an invoice
At checkout this means your first name, last name and email address, the licence you chose (Personal or Commercial) and which optional add-ons you chose (100+ Best-Performing Hooks of 2026 and the Carousel AI Agent). Your billing details are entered into Whop’s secure payment field and handled by Whop (see Section 5). We do not save the email address you type at checkout unless you complete your purchase.
When you email us, we receive whatever you choose to include in your message.
Tax identification information: if you need an invoice for tax purposes, we may collect your Tax Identification Number solely for invoicing and accounting compliance. We store it securely and use it only for that purpose.
3.2 Information Collected Automatically
When you visit the Website or open our emails, some data is collected automatically:
- Technical data: your Internet Protocol (IP) address, browser type and version, operating system and device type, which our hosting provider Vercel receives when it serves the Website to you.
- Aggregate visit data: on our checkout and thank-you pages, Vercel Web Analytics records page views, referring website, country, browser and device type in aggregate, and Vercel Speed Insights measures how fast those pages load. Neither uses cookies, and neither is used to identify you individually.
- Order details sent with your payment: when you click “Complete Order”, our checkout sends Whop the details of your order together with any campaign tags in the checkout link you used (UTM parameters, such as the name of the campaign or source), your device type (phone, tablet or computer), the country of your IP address and whether tracking is on for you (see Section 8). Where tracking is on, it also sends the Meta cookies or Meta ad click reference in your browser, so that our server can report your purchase to Meta afterwards.
- Checkout record (every order): when you click “Complete Order”, we record, for every order and whatever your tracking choice, the time, the version of our Terms and Conditions you agreed to by completing your purchase, your IP address and your browser’s user agent. We keep this record with your order details. We use it only to prove your order and your agreement, to handle payment disputes and to prevent fraud. It is not used for advertising. Our legal basis is our legitimate interest in proving our contracts and defending our legal rights (see Section 4.1).
- Members area cookies: when you sign in to the members area, or when the thank-you page signs you in straight after you buy, we set strictly necessary cookies so you stay signed in (see Section 8).
- Advertising and analytics data (outside the EEA, the UK and Switzerland only, see Section 8): on the sales page, the checkout pages, the thank-you page and these legal pages, the Meta Pixel sends Meta the pages you view, when you open a checkout page and, after you buy, the purchase value, currency, licence and add-ons and a payment reference, together with your IP address, browser data and Meta’s cookies. After Whop confirms your payment, our server also reports the purchase to Meta directly (Meta’s Conversions API), with your email address, name and billing city, state, postal code and country in hashed (scrambled) form, plus your IP address, browser data and the Meta cookies or ad click reference from checkout, so Meta can match it to the right ad without receiving your email or name in plain text. This report is sent only under the same rules as the Pixel, honouring Global Privacy Control and the opt-out, and never when your browser’s time zone or your IP address places you in the EEA, the UK or Switzerland. Microsoft Clarity records how you scroll, click and move around those pages, with typed text masked.
- Font requests: our pages load font files from Google Fonts, so Google receives your IP address when your browser requests them.
- Payment status: Whop tells us whether your payment succeeded, was refunded or was disputed, together with your order details.
- Server logs: while our servers process an order, a refund or a dispute, they write short technical log lines, which can include your email address and the status of your order. These logs are held by our hosting provider Vercel and are used only to find and fix problems.
The members area itself does not load Google Tag Manager, the Meta Pixel or Microsoft Clarity.
3.3 Information from Third-Party Sources
We may receive information about you when you connect with us, comment on or like our posts, or otherwise interact with us on social media platforms. Examples include your profile information, social media handle, name and email address.
3.4 Members Area Sign-In and Devices
The members area has no password. You sign in with your email address, in one of two ways:
- Automatically, right after you buy: the thank-you page signs in the browser you paid with, using the ugb_claim cookie (see Section 8). This only works within 2 hours of your payment and only once Whop confirms it is paid.
- With a link or code we email you: you enter your email address on the sign-in page and, if it has an active purchase, we email you a sign-in link and a 6-digit code (the code is for signing in on another device). Each works once and expires after 15 minutes, and a code allows 5 wrong attempts. Your welcome email also contains a sign-in link, which works once and expires after 7 days. If our database has no purchase for your email address yet, we ask Whop whether it has a paid order for the Product, so a missed order confirmation does not lock you out.
Once you are signed in, you stay signed in on that device for up to 30 days. To run the members area, we store the following in our members area database (see Supabase in Section 5.1):
- Sign-in links and codes: only a scrambled (hashed) copy of each link and code, never the link or code itself, with when it was created, when it expires, whether it was used, how many wrong codes were entered and, for links requested on the sign-in page, the IP address that requested it. To stop abuse, we also record the email address and IP address of each sign-in request and limit how many requests can be made in an hour.
- Sessions (your signed-in devices): each sign-in creates a session record with a random reference, when it started and was last checked, your browser’s user agent (a text string that describes your browser, operating system and device type), your IP address at sign-in and, once it has ended, when it ended. We also record when you last signed in.
- Device limit: your account can be signed in on up to 3 devices at once. If you sign in on a fourth, we sign out the device that has been signed in the longest and email you a “new sign-in” notice that shows the browser and operating system used (for example, “Chrome on Windows”) and the approximate time.
- Access records: your email address, first name and your customer references at Whop and HighLevel; for each purchase, the Whop payment reference, licence, add-ons, amount, payment status and payment date; and which parts of the Product you have access to. If a payment is refunded or disputed, we also record the refund or dispute reference, the amount and what we did about it.
- Order processing: when an order comes in, we keep its details (including your email address and name) while we give you access, send your welcome email, update your customer record and, where tracking is on, report the purchase to Meta. We delete them as soon as that is done, or after 30 days if it keeps failing.
Refunds and chargebacks: a full refund removes all the access that payment gave and signs you out on every device. A dispute or chargeback pauses that access and signs you out on every device while it is open; if the dispute is decided in our favour, we restore your access. A partial refund that matches the price of an add-on removes that add-on only. Any other partial refund is reviewed by us and does not change your access on its own. The change reaches a signed-in device within a few minutes.
3.5 What We Do Not Collect
- Your full card number or card security code. Whop processes these; we never see or store them.
- Your Claude account password or your social media passwords.
- Anything you type, upload, connect or store inside Claude.
- Anything from your social media accounts, unless you send it to us yourself.
- Information about your clients, if you hold the Commercial licence, unless you send it to us yourself.
4. How We Use Your Information
We use your personal information to:
- Process your payment and confirm your order
- Give you access to the Product, including the members area and your welcome email
- Sign you in to the members area and keep your account secure, through the 3-device limit, the new sign-in notice and limits on sign-in requests
- Remove access when a payment is refunded, pause it while a dispute or chargeback is open, and restore it if the dispute is decided in our favour, as described in Section 3.4
- Keep the checkout record described in Section 3.2, and records that show your order was delivered and used (such as your sign-ins), so we can prove your order and respond to payment disputes
- Send you transactional emails about your purchase, such as your welcome email confirming your order, access details, sign-in links and receipts
- Send you product update emails, including the Lifetime Free Updates to the agents and bonuses included in your purchase
- Send you marketing emails. Where the law requires your consent for this, we only send them if you have given it. Every marketing email includes an unsubscribe link
- Tag your customer record with what you bought (licence and add-ons) so you receive the right emails and the right access
- Understand, in aggregate, which pages and campaigns work, and improve the Website and the Product
- For visitors outside the EEA, the UK and Switzerland who have not opted out, measure and improve our advertising on Facebook and Instagram (including showing our ads to people who visited our pages) and review masked recordings of how visitors use our pages
- Answer your questions, feedback and support requests, including billing errors and access problems under our Refund Policy
- Detect, prevent and address fraud, account sharing, security incidents and illegal activity
- Comply with applicable laws, legal obligations and regulatory requirements, including tax and accounting rules
- Respond to legal and regulatory enquiries and assist law enforcement when required
4.1 Lawful Basis for Processing
Depending on the context, we process your personal information on these legal grounds:
- Contractual necessity: where we need it to fulfil our contract with you or to take steps at your request before entering one (for example, processing your order, delivering the Product and signing you in to the members area).
- Consent: where you have given us clear consent for a specific purpose (for example, receiving marketing emails where consent is required).
- Legal obligation: where we need it to comply with a legal obligation (for example, keeping transaction records).
- Legitimate interest: where we need it for our legitimate business interests and those interests are not overridden by your rights and freedoms (for example, preventing fraud, keeping your members area account secure, preventing account sharing, keeping the checkout record in Section 3.2 so we can prove your order and handle payment disputes, measuring which campaigns work and improving the Product).
5. Who We Share Your Information With
We do not sell, rent or trade your personal information for money. We share it only with the parties below, and only for the purposes described in this policy.
5.1 Our Service Providers
| Provider | What it does for us | What it receives |
|---|---|---|
| Whop | Our payment processor. Processes payments through the Whop payment field embedded in our checkout (card, Apple Pay, Google Pay) and keeps the order records. | Your name, email address, billing and payment details, what you bought, payment status and the order details described in Section 3.2 (campaign tags, device type, country, the checkout record with your IP address and browser and, where tracking is on, Meta match details). Privacy policy: whop.com/privacy |
| Vercel | Hosts the Website and the members area, and provides Vercel Web Analytics and Speed Insights (cookieless, aggregate) on the checkout and thank-you pages. | Technical data such as your IP address, browser and device, aggregate page view and page speed data, and the server logs described in Section 3.2. Privacy notice: vercel.com/legal/privacy-notice |
| Supabase | Hosts our members area database: what each buyer has access to, sign-in links and codes (hashed), sign-in requests, sessions, the device limit, refunds and disputes, and orders while they are processed. | Your email address, first name, purchase and access records, session records (browser user agent and IP address), sign-in request records (email and IP address) and the other members area data described in Section 3.4. Privacy policy: supabase.com/privacy |
| HighLevel (GoHighLevel) | Our customer records (CRM) and the system that sends your welcome, sign-in and product emails. We use it for records and email only, not to host our pages. | Your name, email address and purchase tags (what you bought), the sign-in links and codes we email you, new sign-in notices (browser, operating system and time), plus email engagement data such as opens and unsubscribes. Privacy policy: gohighlevel.com/privacy-policy |
| Meta Platforms (Meta Platforms Ireland Limited for the EEA, UK and Switzerland; Meta Platforms, Inc. elsewhere) | Measures and optimises our Facebook and Instagram ads through the Meta Pixel and, for purchases, Meta’s Conversions API (sent from our server), only for visitors outside the EEA, the UK and Switzerland who have not opted out. For the collection and transmission of pixel data Meta is a joint controller with us; for its own later use it is an independent controller. | Pages viewed, checkout page views, purchase value, currency, licence and add-ons, a payment reference, your IP address, browser data and Meta cookies; for purchases also your email address, name and billing city, state, postal code and country in hashed form. Privacy policy: facebook.com/privacy/policy |
| Microsoft (Clarity) | Session recordings and heatmaps of how visitors use our sales, checkout, thank-you and legal pages, only for visitors outside the EEA, the UK and Switzerland who have not opted out. | Clicks, scrolling and mouse movement on those pages (typed text masked), your IP address, browser and device data and Clarity cookies. Privacy statement: privacy.microsoft.com/privacystatement |
| Google (Tag Manager) | Loads the Meta Pixel and Clarity on our pages, only when the rules in Section 8 allow it. | Your IP address and basic browser data when your browser loads Tag Manager. Privacy policy: policies.google.com/privacy |
| Google Fonts | Supplies the font files our pages use. | Your IP address and basic browser data when your browser requests the fonts. Privacy policy: policies.google.com/privacy |
We do not share your personal information with Anthropic. If you use the Product, you deal with Anthropic directly through your own Claude account.
5.2 Customer Service Providers
We may share your information with people or providers who help us answer your enquiries and support requests.
5.3 Professional Advisors
We may share your information with auditors, accountants, consultants, legal professionals and other advisors who provide professional services to us.
5.4 Government Agencies and Law Enforcement
We may disclose your information to government agencies, courts, regulators and law enforcement where we must comply with applicable laws, regulations or legally binding processes, or in response to lawful requests such as subpoenas or court orders. We may also disclose it to establish, exercise or defend our legal rights, or to protect you, us or others from harm, fraud or illegal activity.
5.5 Business Transfers
If Soltan Enterprises Limited is acquired, merged with another entity or restructured in any way, your personal information may be transferred as part of that transaction. We may also share information with prospective purchasers during due diligence.
6. Emails and Automated Tagging
After you buy, we send you a welcome email that confirms your order and includes a sign-in link and, from time to time, product update emails about what you bought, for example when an agent or bonus in your order is updated. These are part of delivering the Product. When you ask to sign in, we email you a sign-in link and code, and when a sign-in on a new device signs out an older one, we email you a notice (see Section 3.4). These are transactional emails too.
We use HighLevel to tag your customer record with what you bought, so that, for example, a Commercial buyer receives the Commercial materials and an add-on buyer receives that add-on. This is simple tagging based on your purchase. It does not produce legal effects or similarly significant effects on you. You can object to it at any time by contacting us.
Marketing emails are separate. Where the law requires your consent for marketing emails, we only send them if you have given it, and every marketing email includes an unsubscribe link (see Section 12.2).
7. Claude and Anthropic
The agents in the Product run inside Claude, in your own Claude account, on Anthropic’s systems. This means:
- Your chats with the agents, and anything you share with them in your Claude account, are processed by Anthropic under Anthropic’s own terms and privacy policy, not ours.
- We do not receive, see, store or have access to that content.
- Your Claude account and Claude plan are a separate relationship between you and Anthropic.
- If you hold the Commercial licence and share client information with the agents, that information is in your Claude account, not with us. You are responsible for having the right to share it.
Any questions or requests about data held in Claude should go to Anthropic. We are happy to point you in the right direction if you are not sure where to start.
8. Cookies and Similar Technologies
We keep cookies to a minimum. Today the Website uses:
- Members area cookie (strictly necessary): after you sign in with the link or code we email you, we set a cookie called ugb_s that keeps you signed in for up to 30 days. It holds a signed session reference, your email address, your first name and which parts of the Product you own, so the members area can show you what you bought. It is marked HttpOnly and Secure, so scripts on the page cannot read it, and the Website cannot give you access without it.
- Checkout sign-in cookie (strictly necessary): when you pay at our checkout, we set a short-lived cookie called ugb_claim that holds your payment reference and email address, signed so it cannot be altered. It lets the thank-you page sign the browser you paid with in to the members area straight away. It is deleted as soon as it has been used and lasts at most 2 hours.
- Checkout session storage (strictly necessary): during checkout your browser briefly stores a payment reference and the licence you chose, so we can confirm your order if your bank sends you to an extra verification step and back. It is cleared when the order is confirmed or when you close the tab.
- Members area browser storage (strictly necessary, functional): inside the members area your browser keeps a small store in local storage (ugb.members.v2) that the members area uses to remember your progress on that device, so pages open quickly. It is not used for tracking or advertising.
- Whop payment field: Whop’s payment field may use its own cookies or similar technologies to process your payment securely and prevent fraud, under Whop’s privacy policy.
- Vercel Web Analytics and Speed Insights: cookieless. They count visits and measure page speed in aggregate on our checkout and thank-you pages without placing anything on your device.
- Opt-out cookie (ugb_consent): when you click “Do not sell or share my personal information” on our Your Privacy Choices page, we set ugb_consent to “denied” for 1 year, so the choice is remembered in that browser. An older one left from an earlier cookie banner on our site keeps counting until it expires (at most 180 days after it was set).
- Meta ad click cookie (ugb_fbc, only where tracking is on): if you arrive from a Meta ad link, we keep the ad click reference in our own ugb_fbc cookie for 90 days, so our server can credit a purchase to the ad that led to it. It is never set in the EEA, the UK or Switzerland, with Global Privacy Control or after you opt out.
- Meta Pixel (advertising, outside the EEA, the UK and Switzerland only): sets the _fbp and _fbc cookies (90 days) and sends Meta the data described in Section 3.2. On the thank-you page, your browser also remembers that your purchase was already reported (ugb_purchase_sent_ followed by your payment reference), so a reload does not report it twice.
- Microsoft Clarity (analytics, outside the EEA, the UK and Switzerland only): sets the _clck (1 year) and _clsk (1 day) cookies; Microsoft may also set MUID and related cookies. Clarity keeps recordings for about 30 days and heatmap data for up to 13 months.
The Meta Pixel and Microsoft Clarity are loaded through Google Tag Manager, on the sales page, the checkout pages, the thank-you page and these legal pages, never in the members area. If you are in the EEA, the United Kingdom or Switzerland, they do not load for you and our server does not report your purchase to Meta; we do not show a cookie banner, because we do not track visitors there. We work out your region from your browser’s time-zone setting (if it cannot be read, we treat you as being in those regions), and for the purchase report sent from our server we also check the country of your IP address. Elsewhere both tools run unless you opt out. To opt out wherever you are: use the button on our Your Privacy Choices page, turn on Global Privacy Control in your browser (Section 8.1), email support@viralskool.ai to object to this use of your data, or choose how Meta uses your activity for ads in Meta’s ad preferences. When the tools are off for you, we also do not set the ugb_fbc cookie, and we delete any Meta and Clarity cookies left from an earlier visit that our own domain can reach. After you opt out on our Your Privacy Choices page, Google Tag Manager does not load at all. Data already sent to Meta or Microsoft is kept under their own policies. Full details, including every cookie and how long it lasts, are in our Cookie Policy.
Most browsers let you block or delete cookies. If you block the members area cookies you will not be able to stay signed in to the members area, and the thank-you page will not be able to sign you in automatically (you can still sign in with the link or code we email you).
8.1 Global Privacy Control (GPC)
We honour Global Privacy Control (GPC) signals. If your browser sends one, the Meta Pixel and Microsoft Clarity do not load, our server does not report your purchase to Meta and we do not set the ugb_fbc cookie. We treat the signal as a valid opt-out of the sale or sharing of your personal information. Our Your Privacy Choices page does the same for browsers that do not send GPC.
For more detail, see our Cookie Policy.
9. How We Protect Your Personal Information
We take the security of your personal information seriously. We maintain reasonable and appropriate physical, technical and procedural safeguards designed to protect it from unauthorised access, alteration, disclosure or destruction. For example, payment details are handled by Whop and never reach our systems, the Website is served over an encrypted connection, the members area is only open to signed-in buyers, sign-in links and codes work once, expire quickly and are stored only in hashed form, and an account can be signed in on at most 3 devices at once.
However, no method of sending data over the internet or storing it electronically is completely secure. While we work to protect your personal information, we cannot promise absolute security. By using the Website, you acknowledge and accept this risk.
10. How Long We Keep Your Information
We keep your personal information only for as long as we need it for the purposes it was collected for, including to meet legal, accounting or reporting requirements.
| Type of information | How long we keep it |
|---|---|
| Transaction and purchase records | At least 7 years, to comply with Hong Kong tax and accounting obligations. |
| Checkout record (time, Terms version, IP address and browser) | As long as we need it for tax records and to handle any dispute about the order: the same period as your transaction records, and longer only while a dispute about that order is still open. |
| Server logs | Kept by Vercel for a limited time under its log retention settings, then deleted automatically. |
| Marketing email data | Until you unsubscribe or ask us to delete it, whichever comes first. |
| Customer record (name, email address, purchase tags) | For as long as you have access to the Product and its updates. If you ask us to delete it, we delete or anonymise it within 30 days, except where the law requires us to keep it. |
| Members area access records and sessions (user agent and IP address) | For as long as we keep your customer record, because they also show that your order was delivered if a payment is disputed. We do not delete these automatically when a session ends; they are deleted with your customer record if you ask us to delete it (see Section 12.1). |
| Sign-in links and codes (hashed) | Deleted automatically 7 days after they expire. A sign-in link or code expires 15 minutes after it is sent (7 days for the link in your welcome email). |
| Sign-in request records (email and IP address) | Deleted automatically after 2 days. |
| Order details kept while your order is processed | Deleted as soon as your access, welcome email and customer record are done, or after 30 days if processing keeps failing. |
| Members area browser storage (ugb.members.v2) | On your device only, until you clear your browser’s site data. |
| Checkout session storage | On your device only, removed when your order is confirmed or you close the tab. |
| ugb_fbc ad click cookie | On your device only, 90 days from the ad click, or until you clear your browser’s site data or tracking turns off for you. |
| Opt-out cookie (ugb_consent) | 1 year after you set it on our Your Privacy Choices page. An older one left from an earlier cookie banner expires at most 180 days after it was set. |
| Meta Pixel and Microsoft Clarity data | We do not hold this data ourselves. Meta keeps it under its own policies; Clarity keeps session recordings for about 30 days and heatmap data for up to 13 months. The cookies on your device last as listed in Section 8. |
| Support and email correspondence | Up to 3 years after our last interaction, for quality assurance and dispute resolution. |
When we no longer need your information, we securely delete or anonymise it. We cannot control the retention policies of third-party service providers, which keep data under their own policies.
11. Data Breach Notification
If a data breach compromises the security, confidentiality or integrity of your personal information, we will:
- Investigate promptly and take reasonable steps to limit any harm
- Notify affected individuals without undue delay where the breach is likely to result in a high risk to your rights and freedoms
- Notify the relevant supervisory authority where applicable law requires it (including within 72 hours under the GDPR)
- Follow the recommended breach notification guidelines under Hong Kong’s Personal Data (Privacy) Ordinance
We maintain internal breach response procedures and will tell you about the nature of the breach, the data affected and the steps we are taking to address it.
12. Your Rights
Wherever you live, we believe you should have meaningful control over your personal information. You can exercise the following rights by emailing support@viralskool.ai:
- Right to access: ask for a copy of the personal information we hold about you.
- Right to correction: ask us to correct inaccurate or incomplete personal information.
- Right to deletion: ask us to delete your personal information, subject to legal retention requirements.
- Right to restrict processing: ask us to limit how we process your personal information in certain circumstances.
- Right to data portability: ask for your personal information in a structured, commonly used, machine-readable format.
- Right to object: object to our processing of your personal information, including for direct marketing or automated tagging.
- Right to withdraw consent: where we rely on your consent, withdraw it at any time. This does not affect processing carried out before you withdrew it.
We will respond within 30 days (or within 40 days as permitted under Hong Kong’s Personal Data (Privacy) Ordinance). We may need to verify your identity before we act on your request.
12.1 Deleting Your Information
If you ask us to delete your personal information, we will delete or anonymise your customer record within 30 days. Once it is deleted, we will no longer be able to confirm your purchase, give you access to the members area or send you product updates. Records we must keep by law (such as transaction records), and the checkout record for each order, are kept as set out in Section 10. Deleting your information with us does not delete anything in your Claude account; for that, contact Anthropic.
12.2 Unsubscribing from Marketing Emails
You can opt out of marketing emails at any time by clicking the “unsubscribe” link in any marketing email we send. This does not stop transactional emails about your purchase, such as order confirmations, sign-in links and access instructions.
13. International Data Transfers
The Website is available to people worldwide. Our service providers and their servers may be located outside your country or region, including in the United States and other jurisdictions. Your personal information may therefore be transferred to, stored in and processed in countries other than your own. When we transfer it internationally, we take steps to make sure appropriate safeguards are in place, including:
- Relying on the Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA
- Making sure our service providers maintain appropriate data protection standards through contractual obligations
- Complying with applicable data transfer requirements under Hong Kong’s Personal Data (Privacy) Ordinance
By using the Website, you acknowledge that your personal information may be processed in jurisdictions with different data protection laws from your own. This Privacy Policy is governed by the law of Hong Kong SAR, China.
14. Notice Under Hong Kong’s Personal Data (Privacy) Ordinance (PDPO)
As a company registered in Hong Kong, we are committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO”) and its six Data Protection Principles:
- DPP1, Purpose and Manner of Collection: we collect personal data only for lawful purposes directly related to our business, by means that are fair and not unreasonably intrusive.
- DPP2, Accuracy and Retention: we take reasonable steps to keep your personal data accurate and up to date, and not to keep it longer than necessary.
- DPP3, Use of Data: we use your personal data only for the purposes it was collected for, or directly related purposes, unless we have your consent.
- DPP4, Data Security: we take reasonable steps to protect your personal data against unauthorised or accidental access, processing, erasure, loss or use.
- DPP5, Openness: we make information about our data practices publicly available through this Privacy Policy.
- DPP6, Access and Correction: you have the right to ask for access to, and correction of, your personal data held by us.
To make a data access or correction request under the PDPO, email support@viralskool.ai. We will respond within 40 days as the Ordinance requires.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong at www.pcpd.org.hk.
15. Notice for Individuals in the EEA, United Kingdom and Switzerland (GDPR)
This section applies to individuals covered by the General Data Protection Regulation (“GDPR”), including its United Kingdom equivalent. If you are located in the European Economic Area (EEA), the United Kingdom or Switzerland, the following additional rights and protections apply to you.
15.1 Legal Basis for Processing
We process your personal information on the legal bases described in Section 4.1. On request, we are happy to tell you which legal basis applies to any particular processing activity.
15.2 Your GDPR Rights
In addition to the rights in Section 12, you have the following rights:
- Right to lodge a complaint: you may complain to the supervisory authority in your country of residence. A list of supervisory authorities is available at edpb.europa.eu.
- Right to be informed about international transfers: you have the right to know about international transfers of your personal data and the safeguards in place. See Section 13.
- Right not to be subject to automated decisions: we tag customer records automatically based on what you bought (see Section 6). You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you. To exercise this right, email support@viralskool.ai.
16. Your US State Privacy Rights (California and Other States)
This section applies to residents of California and of the other US states with a consumer privacy law (such as Colorado, Connecticut, Virginia, Utah, Texas and Oregon). California’s law is the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”); the other states’ laws give similar rights. Wherever you live in the US, we give you the rights below.
16.1 Your Rights
- Right to know: you can ask about the categories and specific pieces of personal information we have collected about you, the sources, the purposes and the categories of third parties we have shared it with over the past 12 months. You can make this request free of charge, up to twice a year.
- Right to delete: you can ask us to delete the personal information we have collected about you, subject to certain exceptions.
- Right to correct: you can ask us to correct inaccurate personal information.
- Right to opt out of sale, sharing and targeted advertising: we do not sell your personal information for money. Letting Meta use the Meta Pixel and our purchase reports to show you ads may count as “sharing” personal information for cross-context behavioural advertising (“targeted advertising” in some states). You can opt out at any time on our Your Privacy Choices page, by clicking “Do not sell or share my personal information”, or by sending a Global Privacy Control (GPC) signal, which we honour automatically as the same opt-out. After you opt out, Google Tag Manager, the Meta Pixel and Microsoft Clarity stop, our server does not report your purchase to Meta and we do not set the ugb_fbc cookie. The choice made on the page is remembered in that browser; to apply it to an email address, email support@viralskool.ai. You can also choose how Meta uses your activity for ads in Meta’s ad preferences.
- Right to limit use of sensitive personal information: we do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA/CPRA.
- Right to non-discrimination: we will not discriminate against you for exercising any of these rights, including by denying you the Product, charging you a different price or giving you a lower quality of service.
To exercise your right to know, delete or correct, email support@viralskool.ai. You can also ask someone you have authorised to make the request for you. We will verify your identity before acting on your request and respond within 45 days. If we turn down your request, you can appeal by replying to our answer with the word “Appeal”; we will answer the appeal within 60 days and, if you are still not satisfied, you can contact your state’s Attorney General.
16.2 California’s “Shine the Light” Law
We do not share your personal information with third parties for their direct marketing purposes.
17. Notice for Nevada Residents
We do not exchange your personal information for monetary consideration with anyone who would license or sell it to third parties.
18. Children’s Privacy
The Website and the Product are not directed at or designed for children under 18. We do not knowingly collect, use, store or share personal information from children under 18. If you believe we have collected information from a child under 18 by mistake, please contact us at support@viralskool.ai and we will promptly delete it.
19. Third-Party Links and Services
The Website and the Product link to third-party websites and services, including Claude and social media platforms. We do not control and are not responsible for the privacy practices, content or security of any third-party website or service. Please review the privacy policy of each one you use.
20. Changes to This Privacy Policy
We may update this Privacy Policy at any time, for example if we add a new service provider or change the advertising or analytics tools we use. When we do, we will update the “Last updated” date at the top of this page. For material changes that significantly affect how we handle your personal information, we will make reasonable efforts to notify you, such as by email or a prominent notice on the Website.
A change applies from the date it is posted and does not apply to data we collected before it in a way that reduces your rights, unless you agree or the law allows it.
Related pages: Your Privacy Choices, Terms and Conditions, Refund Policy, Cookie Policy and Earnings and Results Disclaimer.
Contact Us
If you have any questions, concerns or complaints about this Privacy Policy or how we handle your data, or if you want to exercise any of your rights, please contact us:
By email: support@viralskool.ai
By post: Soltan Enterprises Limited, Office 3906, 39/F, The Center, 99 Queen’s Road Central, Central, Hong Kong
For complaints about Hong Kong data privacy, you can also contact the Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.