Scope
This Privacy Policy applies to personal information handled through instantviral.ca, including service and pricing pages, cart and checkout, order configuration, order confirmation, order tracking, contact and support forms, email communications, administrative order processing, and analytics or security tools that are actually enabled.
This policy does not automatically apply to independent third-party websites, social media platforms, or payment providers that publish their own privacy policies.
Information We Collect
Information Customers Provide
Depending on how you use InstantViral, you may provide:
- Full name
- Email address
- Order ID
- Customer support messages
- Optional order notes
- Coupon code
- Selected service and package
- Public social media username
- Public profile, page, post, Reel, channel, or video URL
- Custom comment text where a supported package requires it
- Consent records
- Terms acceptance records
Transaction and Order Information
- Package quantity
- Price and currency
- Discounts
- Payment status
- Order status
- Timestamps
- Order history
- Customer-safe status timeline
- Internal administrative notes, which are not exposed publicly
Technical Information
Where actually collected through site operation, security, or enabled tools, InstantViral may process technical information such as IP address, browser type, device type, operating system, referral source, pages visited, approximate location derived from IP, session identifiers, security and error logs, and cookie preferences.
Information Not Requested
InstantViral does not request Instagram, TikTok, Facebook, YouTube, or Google account passwords, private direct messages, or social media authentication codes.
How Information Is Collected
Information may be collected:
- Directly from forms completed by the customer
- During cart and checkout
- Through order tracking lookups
- Through customer support communications
- Automatically through cookies, logs, analytics, and security technologies that are actually enabled
- From payment and infrastructure providers where necessary to confirm transactions, prevent fraud, or operate the service
Purposes for Collection and Use
InstantViral may use personal information for the following real and necessary purposes:
- Providing requested services
- Processing and confirming orders
- Associating selected packages with the correct public social media destination
- Communicating order updates
- Providing order tracking
- Responding to customer questions
- Processing payments through enabled payment providers
- Applying valid coupons and calculating totals
- Preventing duplicate, fraudulent, abusive, or unauthorized activity
- Troubleshooting technical issues
- Maintaining security logs
- Improving website usability and performance
- Meeting legal, accounting, tax, dispute-resolution, and recordkeeping obligations
- Sending marketing communications only where legally permitted and consented to
InstantViral does not use personal information for materially new purposes without assessing whether new consent or notice is required.
Consent and Privacy Choices
InstantViral seeks meaningful consent appropriate to the sensitivity of the information and the purpose of collection. Customers should be able to:
- Decide whether to receive optional marketing emails
- Manage non-essential cookies where a consent tool is required or implemented
- Withdraw consent for optional uses, subject to legal and contractual restrictions
- Request information about privacy practices
- Request access to or correction of personal information
Withdrawing consent may affect services that cannot be provided without the required information.
Payment Information
InstantViral does not store complete payment-card details on its own systems. Payment information is collected and processed by the payment providers that are currently enabled for checkout.
Currently enabled payment providers: Card Payment.
InstantViral may receive payment tokens, transaction identifiers, payer email where provided by the processor, billing details the processor returns, and payment status information needed for accounting, fraud prevention, refunds, and dispute management. Complete card numbers are handled by the payment provider according to that provider’s privacy practices.
International Processing
Some service providers that InstantViral uses to operate the website, process payments, send email, or provide infrastructure may process personal information outside your province or country. Information processed in another jurisdiction may be subject to the laws of that jurisdiction.
A specific hosting location has not been published in InstantViral configuration. InstantViral does not claim Canada-only storage unless and until that arrangement is verified.
Payment processing for enabled providers (Card Payment) may occur on those providers’ systems, which can include infrastructure outside Canada. Review each provider’s privacy policy for details.
Retention
InstantViral retains personal information only for as long as reasonably necessary for the identified purposes and applicable legal obligations. When information is no longer needed, it should be securely deleted, anonymized, or otherwise disposed of according to InstantViral’s retention practices.
Specific retention periods for carts, support records, orders, analytics, and security logs are not published on this page until a verified retention schedule is configured. InstantViral will not invent retention timeframes for public display.
Security Safeguards
InstantViral uses safeguards appropriate to the sensitivity and volume of personal information. Depending on the system and context, safeguards may include HTTPS, access controls, strong administrator authentication, role restrictions, secure password storage, encryption where appropriate, server-side payment verification, protected environment variables, audit logs, backups, rate limiting, monitoring, vendor due diligence, staff confidentiality practices, and secure deletion.
No website can guarantee absolute security. InstantViral does not claim that personal information is completely secure, 100% secure, or impossible to breach. InstantViral uses reasonable safeguards and continues to improve its practices over time.
Privacy Incidents
InstantViral maintains a privacy incident process that includes containing the incident, investigating what happened, assessing sensitivity and possible harm, recording relevant facts and decisions, notifying affected individuals and regulators where legally required, correcting weaknesses, and preserving required breach records.
If you suspect a privacy or security concern related to InstantViral, use the privacy contact details in the Contact and Complaints section below, or submit a message through the Contact page.
Access and Correction
Subject to applicable law and valid exceptions, individuals may request:
- Access to personal information held about them
- Information about how it has been used or disclosed
- Correction of inaccurate or incomplete information
- Withdrawal of consent for optional uses
- Information about the privacy complaint process
InstantViral verifies identity before responding. Requests should be submitted through the verified privacy contact listed in this policy when available, or through the Contact page until that contact is published. InstantViral does not promise a specific response timeframe on this page unless a verified operational commitment is configured.
Marketing Communications
Marketing email is sent only when legally permitted. Each marketing message should include accurate sender identification, a valid contact method, and a functioning unsubscribe mechanism.
Transactional order emails remain separate from optional promotional consent where appropriate. InstantViral honours unsubscribe requests and suppression records when marketing email is used.
Children’s Privacy
InstantViral services are not directed to children below the minimum age permitted by applicable law and the terms of Instagram, TikTok, Facebook, YouTube, and payment providers.
A specific numeric age threshold will be published only after legal review and alignment with applicable privacy law, payment-provider requirements, and platform terms. InstantViral does not select an arbitrary age for this policy.
If InstantViral learns that it collected personal information from a child without valid authorization, it will take appropriate steps to delete or otherwise address that information.
Third-Party Links and Platforms
InstantViral pages may link to Instagram, TikTok, Facebook, YouTube, payment providers, and other external websites. Those third parties control their own privacy practices.
InstantViral is not responsible for independent third-party privacy policies, content, or security. Review the relevant third-party policies before providing information directly to those services.
Policy Changes
InstantViral may update this Privacy Policy when data practices change, new tools or providers are introduced, legal requirements change, new products or features launch, or business operations change.
The revised policy will display a new Last Updated date when that date is configured for publication. For material changes, InstantViral will consider a more prominent notice or renewed consent where required.
Contact and Complaints
If you have a question, access request, correction request, or complaint about InstantViral’s privacy practices, contact the person responsible for privacy using the details listed below. We will review the request, verify identity where necessary, and respond according to applicable law and our internal privacy procedures.
Operating name: InstantViral
Legal / business name on file: InstantViral
Website: https://instantviral.ca
A dedicated privacy email address has not been published in configuration. Until that address is verified, privacy questions may be submitted through the Contact page at instantviral.ca/contact. Do not treat placeholder or example email addresses as privacy contacts.
If you are not satisfied with InstantViral’s response, you may have the right to escalate a privacy complaint to the applicable privacy regulator in your jurisdiction.