Privacy Policy

At Social Media Viewer, accessible at socialmediaviewer.com, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our tools and services.

Our core principle is simple: we collect the minimum data needed to operate, and we never sell it. We built this platform on the idea that you should be able to browse public social media content without sacrificing your own privacy.

We collect minimal data. Here's the complete breakdown:

The limited data we collect is used exclusively for the following purposes:

• Operating the service: Processing your requests and delivering profile data you request
• Account management: Managing your subscription, sending billing receipts, and plan updates
• Support: Responding to your questions and resolving technical issues
• Service improvement: Analyzing aggregate, anonymized usage patterns to improve features
• Security: Detecting and preventing abuse, fraud, and unauthorized access
• Legal compliance: Responding to valid legal requests where required by law

We do not use your data for targeted advertising, behavioral profiling, or any form of behavioral manipulation.

Some things are non-negotiable for us. Here's what we will never do with your data:

• Sell your data to any third party — ever. Not to advertisers, not to data brokers, not to anyone.
• Track your browsing across sessions. Each visit starts fresh — no persistent identifiers.
• Build a profile on you based on which social profiles you view.
• Share your email with marketing partners or third-party promotional services.
• Use dark patterns to manipulate you into sharing more data than necessary.
• Retain data beyond the minimum period needed to operate the service.

We use the absolute minimum number of cookies required to operate the service. We do not use tracking pixels, social media plugins, or third-party advertising cookies.

Essential Cookies We Use:

All cookies are first-party only. We do not allow any third-party cookies on our platform. You can clear cookies at any time through your browser settings without affecting core functionality.

We retain data only as long as necessary for the purposes described in this policy:

• Browsing activity: 0 hours — never stored, processed in real-time and immediately discarded
• Server logs (aggregate): 24 hours — auto-purged daily, contain no IP addresses
• Account data (paid plans): Until account closure, then deleted within 30 days
• Billing records: 7 years (legally required for tax compliance)
• Support tickets: 2 years after resolution

When you delete your account, all associated personal data is permanently erased from our active systems within 30 days, and from backup systems within 90 days. Billing records are retained as required by law but are stripped of personal identifiers.

We use a minimal set of trusted third-party services to operate. None of these services receive your browsing data:

• Stripe — Payment processing. We never see or store your card details; Stripe handles all payment data directly.
• Cloudflare — CDN and DDoS protection. Configured in privacy-first mode with no analytics tracking.
• Amazon Web Services (AWS) — Server infrastructure. Data is stored in EU and US regions with full encryption.
• Postmark — Transactional email delivery. Only used to send you account-related emails you've opted into.

We have Data Processing Agreements (DPAs) with all third-party providers, ensuring they meet GDPR and CCPA standards. No third party has access to your browsing activity or viewed profiles.

Depending on your location, you have specific rights regarding your personal data:

GDPR (EU/EEA/UK) Rights:

• Right of access — Request a copy of your personal data
• Right to rectification — Correct inaccurate or incomplete data
• Right to erasure — Request deletion of your personal data ("right to be forgotten")
• Right to restrict processing — Limit how we use your data
• Right to data portability — Receive your data in a machine-readable format
• Right to object — Object to processing based on legitimate interests

CCPA (California) Rights:

• Right to know — What personal information is collected and how it's used
• Right to delete — Request deletion of your personal information
• Right to opt-out — Of the sale of personal information (we never sell, so this is automatic)
• Right to non-discrimination — Equal service regardless of privacy rights exercised

To exercise any of these rights, email support@viwr.co.uk. We respond within 30 days.

Our service is not directed at children under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately and we will delete it.

While our tools allow viewing of public social media profiles, we encourage parents and guardians to monitor their children's internet usage. Social media platforms have their own age requirements and privacy settings that should be respected.

Policy Updates

We may update this Privacy Policy from time to time. When we do, we will:

• Post the updated policy on this page with a revised "Last updated" date
• Notify all registered users via email at least 30 days before significant changes take effect
• Maintain a version history accessible at /privacy/changelog

Contact Us

If you have any questions about this Privacy Policy or our data practices, we want to hear from you:

• Email: support@viwr.co.uk
• Mail: 535 Mission St, Suite 1400, San Francisco, CA 94105, USA
• Data Protection Officer: support@viwr.co.uk

For EU residents, our representative under Article 27 of GDPR is: DataRep EU, 1 Finsbury Avenue, London EC2M 2PF, UK.