Privacy policy
Last updated: 18 October 2026
This page explains what we collect when you use PostVirally, why we need it, and how you can delete it. Short version: your content is private to you, we never ask for your Instagram password, we only post to Instagram when you schedule a post, and we never sell your data.
Who we are
PostVirally is made by Hara Infotech Pvt Ltd, a small team in India. We also make Trailback. In this policy, "we" and "us" means Hara Infotech Pvt Ltd.
What we collect
- Your account: your email address, your name if you give it, and your password (stored only as a scrambled hash we can't read).
- What you upload: videos, photos, slides, captions and ideas you add to PostVirally, and the edited versions we make for you.
- What you tell us about your account: your niche, audience and goals, if you fill these in. If you choose to import your Instagram data download, we read the post details from it and then delete the downloaded file.
- Scores and results: the scores, suggestions and text we create for your posts.
- If you connect Instagram: through Instagram's official sign-in (we never see your password), we receive your Instagram user ID, username, name, profile picture, account type and follower count, an access key that lets PostVirally act for you, your recent posts and captions, their insights (such as reach, views, likes, comments, saves and shares), when your followers are online, and the comments on your posts. See "Instagram" below.
- Billing: your plan, your free-trial dates and payment status from our payment partner (Razorpay or Dodo Payments). We never see or store your card number.
- Basic technical data: your IP address, browser type and the times you sign in. We use this to keep the service safe, stop abuse and fix problems.
The free check on our homepage
If you check a video without signing up, we keep that video and its score for 7 days, linked to your browser. If you sign up or sign in, it moves into your account. If you don't, we delete it after 7 days. We also note your IP address to limit how many free checks one network can use.
Connecting Instagram is optional. You can sign up with "Continue with Instagram" or connect it later in Plan & settings. Only Instagram Business and Creator accounts can connect. When connected, we use it only to:
- Publish the posts, Reels, carousels and Stories you schedule, at the time you choose, with the caption and first comment you approved. We never post anything you didn't schedule.
- Show your results: read your posts' insights so you can see what works, and use them to improve our suggestions for you.
- Learn your voice: read your past captions so the captions and replies we write sound like you.
- Comments: show comments on your posts in your PostVirally inbox, suggest replies, and post a reply or hide a comment only when you click to do so.
Your Instagram access key is stored encrypted and is never shown in your browser. We don't send direct messages, follow, like or comment on other accounts. To send posts to Instagram, we give Instagram a private, expiring link to your post's files.
Disconnecting: click "Disconnect" in Plan & settings, or remove PostVirally in Instagram (Settings → Website permissions → Apps and websites). We then delete your access key, stop scheduled posts, and delete the posts, insights and comments we copied from Instagram. To delete everything, see our data deletion instructions.
How we use it
- To score your posts, suggest fixes, edit your videos and create captions and other text.
- To run your account, take payments and send important emails (like password resets).
- To keep PostVirally secure and working.
We don't sell your data. We don't use your content for advertising. We only post to Instagram when you have connected it and scheduled a post.
Who we share it with
We only share what's needed to run the service, with these companies:
- Anthropic (Claude AI): to score a post or write text, we send a few still pictures from your video, the words spoken in it, your caption and your account details (niche and audience) for that request. To learn your voice or suggest a reply to a comment, we send your past captions or that comment. Anthropic does not use this data to train its models by default.
- Meta (Instagram): if you connect Instagram, the posts you schedule and the replies you send go to Instagram, under Meta's own terms and privacy policy.
- Razorpay and Dodo Payments: handle payments. Whichever you choose receives the details you enter at checkout. Dodo Payments acts as the seller of record for payments made through it and handles sales tax.
- Hostinger: hosts our servers and database.
- Our email provider: sends account emails like password resets.
- Google Analytics: only on our website, and only if you click "Accept" on the cookie notice. It tells us how many people visit and which pages they use.
Turning speech into text happens on our own server, not with an outside company. We may also share information if the law requires it.
Cookies
We use one cookie to keep you signed in. It's needed for the site to work. Analytics cookies are only set if you allow them, and you can say no.
How long we keep it
- Your account and uploads: until you delete them, or delete your account.
- Free homepage checks: 7 days, unless you sign up.
- Instagram data downloads you import: deleted right after we read them.
- Data copied from a connected Instagram account: until you disconnect Instagram or delete your account. Files prepared for publishing are deleted right after the post goes live.
- Payment records: kept by our payment partners, as tax and payment laws require.
Your choices
- Delete anything: you can delete any project, your account details, or your whole account at any time in Settings. Deleting your account removes your uploads and data from our servers. More in our data deletion instructions.
- Get a copy or fix something: email support@postvirally.com and we'll help.
- Say no to analytics: click "Decline" on the cookie notice.
Keeping it safe
Your data is sent over encrypted connections (HTTPS). Passwords are hashed. Secret keys are encrypted. Only you can see your uploads. No system is perfect, but we work hard to protect your data and will tell you if something goes wrong that affects you.
Children
PostVirally is not meant for anyone under 18. If you think a child has given us data, email us and we'll delete it.
Changes
If we change this policy, we'll update the date at the top. If the change is big, we'll tell you by email or in the app.
Questions or complaints
Email support@postvirally.com with the word "Privacy" in the subject. A real person will reply. We aim to resolve any complaint within 15 days.