When you create a VIIUS account we collect information such as your email address, display name, password (stored securely, never in plain text), and — depending on your role — organization details for Brands or profile details (country, creator level, trust score) for Creators.

To prove you genuinely control a social media account, VIIUS lets you connect it through that platform's own official sign-in flow (OAuth). We never see or store your social platform password. We store only what is needed to verify ownership and keep the connection working: your platform account ID, public username, profile link, connection status, and access/refresh tokens issued by that platform. Tokens are kept in a separate, restricted store and are never shown in your account settings.

Where you authorize a TikTok connection, VIIUS requests only the minimum access needed to confirm your identity and that a submitted post belongs to you: basic profile information (account ID, display name, avatar, username) and a read-only check of your own video list, used solely to confirm that a video URL you submit is genuinely one of your own posts. VIIUS does not post on your behalf and does not access TikTok data beyond what this verification requires.

Where you authorize an Instagram connection, VIIUS requests only the minimum access needed to confirm your identity and that a submitted post belongs to you: basic professional-account information (account ID, username, profile link) and read-only access to your own media list and its view, like, comment and share counts, used solely to confirm that a post URL you submit is genuinely yours and to record how it performed. VIIUS never posts on your behalf, never reads your messages or comments, and does not access Instagram data beyond what this verification and performance measurement requires.

You can remove VIIUS from your Instagram account at any time in Instagram's own app-permissions settings. Instagram notifies VIIUS when you do, and VIIUS then deletes the stored access tokens for that connection and marks it disconnected — see section 10.

We store the campaigns you create or join, the content links and account handles you submit, brand review notes, and performance data associated with a submission (such as reported and verified views) once verification exists for it. This data is used to run the marketplace: matching Creators to campaigns, calculating earnings, and giving Brands visibility into their campaign's results.

Data is stored with Supabase, our database and authentication provider, using row-level access controls so that, for example, one Creator cannot read another Creator's private data. Sensitive values — OAuth tokens, verification and payout details — are kept in restricted tables that are not reachable through ordinary account access. We use industry-standard encryption in transit (HTTPS) for all traffic to VIIUS.

We rely on a small number of specialist providers to operate VIIUS, including:

• Supabase — database, authentication and file storage.
• Stripe — identity verification and payouts, where enabled.
• TikTok — social account connection and ownership verification, where enabled.
• Meta (Instagram) — social account connection, ownership verification and post performance data, where enabled.

Each provider only receives the data necessary to perform its function for VIIUS.

You can access and update most of your account and profile information directly within VIIUS. Depending on your location, you may also have rights to request a copy of your data, correct inaccurate data, or object to certain uses of it. You can exercise these rights by contacting us at the address below.

You may request deletion of your VIIUS account and associated personal data at any time by emailing privacy@viius.com. We will delete or anonymize your data except where we are required to retain records — for example, transaction records needed for financial, tax, or fraud-prevention purposes.

You can disconnect a connected TikTok or Instagram account yourself, at any time, from Profile > Social accounts inside VIIUS. Disconnecting deletes the access tokens VIIUS stored for that account and marks the connection as disconnected, so VIIUS can no longer read anything from it. Your VIIUS account, your submissions and your earnings are not affected — disconnecting an account is not the same as closing your account, and we do not close it for you. You can connect again whenever you like.

TikTok. When you disconnect inside VIIUS we also ask TikTok to cancel the access you granted us. If TikTok cannot be reached at that moment we still delete our own copy, and you can remove VIIUS in TikTok's own app settings to be certain.

Instagram. Instagram does not provide a way for VIIUS to cancel your permission on your behalf, so disconnecting inside VIIUS deletes our stored access and nothing more. To remove the permission at Instagram as well, remove VIIUS in Instagram's own app settings. If you do that, Instagram tells VIIUS automatically and we delete the stored access and mark the connection disconnected at our end too.

Instagram also lets you ask an app to delete the data it holds about you. When Instagram sends VIIUS such a request, VIIUS deletes everything it obtained from Instagram: the access tokens, your Instagram account ID, username and profile link, and the Instagram post identifiers and account handle stored against content you submitted. Instagram gives you a confirmation code and a link to viius.ai/data-deletion, where you can check that the request was completed.

VIIUS keeps its own records of work you submitted and were paid for — the campaign, the link you entered, the recorded view counts, and the resulting earnings and payouts — under the retention exception in section 9. Those are VIIUS records rather than data obtained from Instagram, and we are required to keep them for accounting, tax and fraud-prevention purposes. Your VIIUS account is not deleted by an Instagram data deletion request; to close the account itself, email us as described in section 9.

Questions about this Privacy Policy, or requests regarding your data, can be sent to privacy@viius.com.