Privacy Policy

1. Who we are

Vyrlo LLC (“Vyrlo”, “we”, “us”), a Puerto Rico limited liability company, provides content-automation software at vyrlo.tech. This policy explains what we collect and why.

2. Data we collect

• Account data: your name, email, and authentication credentials (passwords are hashed by our auth provider, Supabase).
• API keys: the third-party provider keys you add, stored encrypted at rest in Supabase Vault and used only to run your jobs.
• Channel data: YouTube channel identifiers and OAuth refresh tokens (encrypted), used to publish on your behalf.
• Usage data: the video jobs you create, their status, and related metadata.
• Billing data: handled by Stripe. We store a Stripe customer ID and subscription status; we do not store your card numbers.

3. How we use it

We use your data to operate the service: to run the automation jobs you request, manage your subscription, secure your account, and provide support. We do not sell your personal data. We do not use your API keys or generated content for any purpose other than executing your jobs.

4. Sub-processors

We rely on these third parties to provide the service:

• Supabase — authentication, database, encrypted key storage
• Vercel — application hosting
• Stripe — payment processing
• Resend — transactional email
• The AI providers you connect via your own keys (Anthropic, OpenAI, Kling AI, ElevenLabs, Google/YouTube)

5. Data retention and deletion

We retain your data for as long as your account is active. You can delete individual API keys at any time in Settings. You may request deletion of your account and all associated personal data by emailing vyrlo.tech@vyrlo.tech; we will action verified requests within 30 days, subject to legal retention obligations.

6. Your rights (GDPR / CCPA)

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact vyrlo.tech@vyrlo.tech.

7. Cookies

We use strictly-necessary cookies to keep you signed in (session cookies). We do not use third-party advertising or cross-site tracking cookies.

8. Security

We protect your data with encryption in transit (HTTPS) and at rest, row-level access controls, and encrypted storage of secrets. No system is perfectly secure; you are responsible for keeping your password confidential.

9. YouTube API Services

Vyrlo uses YouTube API Services to publish videos to your channel and read your channel and video statistics on your behalf. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service. Your use of YouTube API Services through Vyrlo is also subject to the Google Privacy Policy.

What we access: with your authorization (the youtube.upload, youtube.readonly, and youtube.force-ssl scopes), Vyrlo uploads videos, thumbnails, and captions you generate to your channel, and reads your channel and video metadata and statistics to power your dashboard.

How we store and use it: YouTube OAuth tokens are encrypted at rest in Supabase Vault and used solely to perform the actions you request. Channel identifiers and the per-video statistics shown in your dashboard are cached temporarily to operate the service. We do not sell this data, use it for advertising, or share it with third parties except the sub-processors listed above that are required to run the service.

Revoking access:you can disconnect a channel at any time in Vyrlo Settings, and you can revoke Vyrlo’s access to your Google account through the Google security settings page. When you disconnect, we delete the stored tokens for that channel; cached YouTube data expires or is removed on account deletion as described in Section 5.

10. Contact

Privacy questions or requests: vyrlo.tech@vyrlo.tech.