Privacy Policy

AD Virals Media (Amor Fati Invest SRL, VAT: RO46325485) ("AD Virals", "we", "us", "our") operates an application available at app.advirals.media. This Privacy Policy explains how the application collects, uses, and protects data when it is installed on a merchant's store. This application is intended for merchant use and is not a consumer-facing application.

When installed on a store, the application accesses the following data through the store's Admin API:

• Order data: order amount (revenue), order date, and associated product information — used to generate sales analytics.
• Product data: product titles, descriptions, and related catalog fields — used to display product lists and allow in-app editing.
• Store content: online store pages (titles and content) — used to allow in-app editing.
• Store-level aggregates: total sales, number of orders, and average order value.

We do not collect, store, or process personally identifiable information (PII) of end customers, including names, email addresses, phone numbers, shipping addresses, or payment information.

The data accessed by the application is used solely to:

• Display sales analytics dashboards (revenue, orders, average order value, refunds, top products, and trends over time).
• Allow merchants to edit product titles and descriptions from within the application.
• Allow merchants to edit online store page content from within the application.

We do not sell, rent, or share store data with third parties for advertising or any commercial purpose unrelated to the functionality described above.

• Application access tokens are encrypted at rest (AES-256-GCM) before being stored.
• Data is stored in a PostgreSQL database hosted on Railway (railway.app), with access restricted to authorized personnel.
• All data in transit is encrypted via TLS/HTTPS.
• API credentials are stored as encrypted environment variables and are never exposed in application code.

• Upon uninstalling the application, all data associated with the store is permanently deleted from our systems within 30 days.
• You may request immediate deletion at any time by contacting clients@advirals.media.

The application relies on the following third-party services:

• The merchant's e-commerce platform — for accessing store data via its Admin API.
• Railway — cloud infrastructure and database hosting.

Each operates under its own privacy policy. The application requests only the access scopes necessary for its functionality.

You have the right to access, correct, or delete the data we hold about your store, and to disconnect the application at any time. To exercise these rights, contact clients@advirals.media.

AD Virals Media (Amor Fati Invest SRL, VAT: RO46325485) is registered in Romania and operates in compliance with the GDPR (EU 2016/679). The legal basis for processing store-level order data is our legitimate interest in providing analytics and store-management functionality to merchants who have installed the application. We do not process personal data of end customers.

We may update this Privacy Policy from time to time. The "Last updated" date reflects the latest revision.