Privacy Policy

Last updated: 12 August 2026 · Effective for users in the EU, UK, US and worldwide.

Valyou ("we", "us") operates this website to estimate the commercial value of social media accounts. This policy explains what data we collect, why, and the rights you have under the GDPR (EU/UK), the California Consumer Privacy Act (CCPA/CPRA), and other applicable laws.

1. Data controller

The data controller is Valyou. You can reach us at privacy@valyou.ai. For EU/UK users we designate a representative on request and you may contact our data protection contact at the same address.

2. What we collect

• Account metrics you provide: social profile URL/handle, follower count, engagement rate, account age, post count, niche and audience region. These are necessary to produce your valuation.
• Account data: email and a hashed password (never stored in plaintext) when you register.
• Session & usage data: an anonymous session identifier and your remaining analysis balance, stored in Cloudflare KV.
• Payment data: handled entirely by Stripe. We do not store your card number; Stripe provides us only with confirmation of payment and the associated email.
• Technical & security data: IP address (via Cloudflare), browser type, and Turnstile bot-score, used to secure the service and prevent abuse.
• Cookies: a session cookie and a cookie consent flag (see Section 6).

3. Legal bases (GDPR)

• Performance of a contract (Art. 6(1)(b)): processing the metrics you submit to deliver your valuation.
• Legitimate interests (Art. 6(1)(f)): security, fraud prevention, and service improvement.
• Consent (Art. 6(1)(a)): non-essential cookies and Turnstile, where applicable.

4. How we use AI (DeepSeek)

The metrics you submit are sent to our AI provider, DeepSeek, to generate the valuation narrative and recommendations. We send only the metrics you provide and do not transmit your password or payment details. DeepSeek processes this data as our processor. You may request that we use the on-site heuristic fallback instead by contacting us.

5. International transfers

Our infrastructure runs on Cloudflare (global edge network) and our AI provider may process data outside your country. Where we transfer personal data from the EEA/UK, we rely on Standard Contractual Clauses or the recipient's certified adequacy.

6. Cookies & consent

We use strictly necessary cookies (session) and, with your consent, analytics/security cookies. A cookie banner lets you accept or manage preferences. You can withdraw consent at any time by clearing cookies.

7. Your rights

• GDPR: access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority.
• CCPA/CPRA: the right to know, delete, correct, and opt out of "sale"/sharing. We do not sell personal information. California users may exercise these rights without discrimination.

To exercise any right, email privacy@valyou.ai. We respond within 30 days (GDPR) or 45 days (CCPA).

8. Data retention

Valuation reports are retained for up to 30 days to let you download them, then deleted. Account records are kept while your account is active and for 90 days after deletion request. Payment records are retained as required by tax/financial law.

9. Children

The service is not directed to children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect their data.

10. Changes

We may update this policy and will post the new version with a revised date.

← Back to Valyou