Privacy Policy

1. Who We Are

The Viral Passion Reporting System is a marketing analytics platform operated by Viral Passion, accessible at reports.viralpassion.gr. We provide advertising performance reporting services to marketing professionals and businesses.

2. Data We Collect

We collect and process the following categories of data:

• Account identity data: Your email address and display name, provided when you register or sign in via Google SSO.
• Meta / Facebook / Instagram advertising metrics: Aggregated advertising performance data fetched via authorized Meta Ads API connections using the ads_read and read_insights permissions. The system processes the reporting fields and integration/account identifiers verified in the repository, including spend, impressions, reach, clicks, conversions, purchase_value, and reporting metrics derived from these (e.g. CPC, CPM, ROAS, CTR).
• OAuth tokens: Access tokens issued by Meta (Facebook / Instagram) that authorise the platform to retrieve your advertising data on your behalf. Tokens are stored as encrypted credentials using AES-GCM encryption. Token values are never logged, displayed, or transmitted to any party other than the originating Meta platform.
• Usage data: Basic application error and performance telemetry used strictly for service reliability and debugging.

3. How We Use Your Data

• To display advertising performance reports and dashboards within the Viral Passion Reporting System.
• To sync advertising metrics from connected Meta Ads accounts on your behalf.
• To send automated reports via email when you configure report automations.
• To maintain the security and integrity of the service.

We use Meta platform data solely for authorised reporting and analytics within the Viral Passion Reporting System. We do not sell, rent, share, or use your data or Meta platform data for any purpose unrelated to displaying your advertising performance, including any form of advertising targeting or profiling of third parties.

4. Meta Platform Data

When you connect a Meta Ads account, we request the following permissions:

• ads_read: To read advertising campaign and ad set performance data from your Meta Ads account.
• read_insights: To access aggregated insights and metrics for your Facebook and Instagram ads.

We use this data solely to populate reports and dashboards inside the Viral Passion Reporting System. We do not share Meta platform data with any third party, and we do not use it for purposes beyond what you have authorised.

You may revoke access at any time via your Meta Business Settings or by disconnecting the integration within the application (see Section 5).

Our use of Meta platform data complies with the Meta Platform Terms and Developer Policies.

5. Data Retention and Deletion

We retain data only as long as necessary to provide the service, in accordance with the following verified behaviours:

• User-initiated disconnect: When you disconnect an integration from within the application, all advertising metrics and credentials associated with that integration are immediately and permanently deleted from our systems (hard delete).
• Revoked project integrations: If a connected integration is revoked at the project level, its data is purged within 30 days.
• Globally revoked connections: If a connection is revoked globally (e.g. via Meta Business Settings), the associated data is archived and deleted within 90 days.
• Account deletion: Full account and data deletion can be requested by emailing connect@viralpassion.gr and is handled manually by our team.

There is currently no automated real-time deletion callback. Deletion requests received via Meta's data deletion mechanism or submitted directly to us are processed manually by our team. You may submit a deletion request at any time by contacting connect@viralpassion.gr.

6. Data Security

All OAuth credentials and access tokens are stored as encrypted values using AES-GCM encryption. Token values are never exposed in logs, responses, or UI. Data in transit is protected using TLS 1.2 or higher. We follow industry best practices to protect your information against unauthorised access, disclosure, or modification.

7. Your Rights

Under the GDPR and applicable law, you have the right to access, rectify, erase, restrict processing of, or port your personal data. You also have the right to object to processing and to withdraw consent at any time. To exercise any of these rights, contact us at the address in Section 9.

8. Cookies

We use a single session cookie strictly necessary for authentication. We do not use tracking, analytics, or advertising cookies.

9. Contact

For any privacy-related questions, data access requests, or deletion requests, contact us at:
connect@viralpassion.gr
Viral Passion