SECURE_STORAGE_v1.0

PRIVACY_POLICY.

How we handle your data when you run Vantage Core. AI processing is OpenAI API only; prompts differ by feature, not by a separate in-house model.

PV-01 // CONTROLLER_IDENTITY

The controller under the GDPR is Till Nentwich, operating as a sole trader (Einzelunternehmen) under German law, based at c/o IP-Management #9482, Ludwig-Erhard-Straße 18, 20459 Hamburg, Germany. Contact: business@viralvantage.io · Phone: +49 1516 78300636.

PV-02 // WHAT_VIRALVANTAGE_IS

ViralVantage (“Vantage Core”) is a web application that helps creators analyse and rewrite scripts for stronger retention. When you use the chat, your messages are sent to our backend and forwarded to OpenAI’s API together with our product prompts (system and instruction text). We do not run our own large language model; inference is performed by OpenAI only, configured for normal API use. On the Pro plan, you may upload audio or video or record from your microphone for transcription: that audio is sent from our servers to OpenAI’s speech-to-text API. Usage limits (e.g. scans per month) are enforced server-side and reflected in your account metadata.

PV-03 // LEGAL_BASES

We process personal data where necessary to perform our contract with you (Art. 6(1)(b) GDPR), to comply with legal obligations (Art. 6(1)(c)), where we have a legitimate interest such as security and abuse prevention (Art. 6(1)(f)), or where you have given consent (Art. 6(1)(a)).

PV-04 // CLERK_AUTH

Authentication and user profiles are provided by Clerk Inc. This includes your email address, user ID, and operational metadata (e.g. subscription flags, scan counters) required to run plans and quotas.

PV-05 // STRIPE_PAYMENTS

Paid plans are billed through Stripe. We do not store your full card data on our servers. Stripe processes payment data under its own terms and notifies us of successful subscription events so we can unlock your plan.

PV-06 // OPENAI_ONLY_ENGINE

All AI-generated text and speech-to-text output is produced through OpenAI’s APIs from our infrastructure. We choose models and prompts for the product; OpenAI’s API data policies and terms apply to that processing. Do not submit special-category data unless you have a lawful basis to do so.

PV-07 // HOSTING_INFRA

The application is hosted on Vercel. Technical logs (e.g. IP address, timestamps, device class) may be generated for reliability and security. See Vercel’s privacy policy for details.

PV-08 // BROWSER_LOCAL_CACHE

So you can reopen recent chats from the sidebar, your browser may store a small JSON snapshot in localStorage on your device only (session titles and the message content shown in the UI). This is not our cloud database; clearing site data in your browser removes it. We still recommend not pasting secrets you cannot afford to lose into any AI chat.

PV-09 // INTERNATIONAL_TRANSFERS

Clerk, Stripe, OpenAI, and Vercel may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the EU Commission Standard Contractual Clauses and provider documentation.

PV-10 // RETENTION

We keep data only as long as needed for the purposes above or as required by law. Operational retention on subprocessors follows their policies until you delete your account or exercise your rights.

PV-11 // YOUR_RIGHTS

You may request access, rectification, erasure, restriction, portability, and object where applicable, and withdraw consent where processing is consent-based. Contact: business@viralvantage.io. You may lodge a complaint with a supervisory authority; in Hamburg (example): Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI).

LEGAL_NOTE

This page is for transparency and does not replace legal advice. If your processing changes (new tools, analytics, marketing pixels), update this policy and consider a GDPR review.

LAST_UPDATE: APRIL_2026 // SOLE_TRADER_DE