Privacy Policy

1. Scope and current product stage

This Policy applies to vyralnow.com, Vyral accounts and connected creator features. Production profiles, messages, engagement, reports and media use the Vyral Supabase services. Clearly identified demonstration mode on non-production hosts may generate sample creators, audiences and metrics for interface testing; those samples never enter production counts.

2. Information we collect

Information you provide

Email address, password handled by Supabase Auth, name, date of birth, username, profile name, biography, country, category, interests, profile media, posts, messages, reports, appeals, preferences and communications with Support.

Activity and technical information

Authentication events, session identifiers, security challenges, browser and device information, approximate connection information, pages and features used, post interactions, watch and retention events, crash logs and moderation history.

Local browser storage

Vyral may use localStorage and IndexedDB for interface preferences, local demonstration state, drafts and imported media. Clearing browser data can remove information that has not yet been uploaded to server storage.

3. Why we process information

• Create, secure and maintain accounts and sessions.
• Provide feeds, profiles, messages, publishing, live tools, Vyral Studio and analytics.
• Check username availability and prevent impersonation or abuse.
• Detect fraud, bots, attacks, unsafe content and violations.
• Send confirmation, password, safety, service and optional product-update emails.
• Measure reliability and improve product performance and recommendations.
• Comply with legal requests and protect users, Vyral and the public.

4. Service providers and disclosure

Vyral currently relies on providers that process information for defined purposes:

• Supabase for authentication, PostgreSQL data, access policies, functions and account administration.
• Cloudflare for hosting, DNS, perimeter security, Turnstile bot protection and email routing.
• Resend for transactional and optional product email delivery.
• Google for optional OAuth sign-in and when you communicate with Vyral through a configured Google mailbox.

We may also disclose information when required by law, to address serious safety risks, during a corporate transaction, or with your direction. Vyral does not sell personal data.

5. Retention, transfers and security

We keep information only as long as needed for the purposes above, including account operation, security, dispute resolution and legal obligations. Exact periods depend on the data and product stage. Data may be processed in countries where providers operate, subject to their contractual and legal safeguards.

Security measures include encrypted transport, Supabase Row Level Security, server-only administrator credentials, email confirmation, rate limits, Turnstile and moderation audit logs. No internet service is completely risk-free; never send passwords or verification codes to Support.

6. Your controls and rights

Depending on your location, you may have rights to access, correct, download, delete, restrict or object to processing of personal data. You may edit profile information, manage optional emails using the unsubscribe link, and request account deletion or assistance at [email protected].

Security and essential service emails cannot be disabled while an account exists. Product and promotional emails are optional.

7. Young users

Vyral is not intended to collect personal data from children below the applicable minimum age without valid parental authorization. Before public scale, age-assurance and parental-consent flows must be reviewed for each target country. A parent or guardian can contact Support about a young person’s information.

8. Updates and contact

Material changes will be announced in the product or by email. Privacy questions and rights requests can be sent to [email protected]. You can also review the Security and Trust Center or follow the account recovery guide.

This Policy describes the current product and should receive qualified local legal review before Vyral launches at large scale or adds payments, targeted advertising, biometrics or new regional services.