This Privacy Policy explains what information Vyralz ("Vyralz", "we", "us") collects when you use the Service at vyralz.com, how we use it, who we share it with, and what choices you have. By using the Service you agree to this Policy. If you do not agree, please do not use the Service.
Vyralz operates from the State of Nevada, USA. We are the "data controller" of personal information you provide to us. You can reach us at support@vyralz.com.
| Category | What it includes | Why we collect it |
|---|---|---|
| Account data | Email address, hashed password (PBKDF2-HMAC-SHA256, 100k iterations + salt), email verification status, account creation date | To create and secure your account, verify your identity, and contact you about service-critical events |
| Payment data | Stripe customer ID, subscription ID, plan tier. We never see or store your card number, CVV, or bank details — those are held by Stripe. | To bill your subscription and enforce plan limits |
| Usage data | YouTube channels you add, clip jobs you run, generated clips and their metadata (titles, timestamps, viral scores), settings, scheduled posts, posting history | To deliver the core product — monitoring, clipping, and posting on your behalf |
| Third-party credentials | OAuth tokens or API keys you provide for YouTube, TikTok, Instagram, or other platforms you connect | To post clips to those platforms on your behalf, only when you instruct us to |
| Technical data | IP address, user-agent string, request timestamps, error logs | For security, abuse prevention, and debugging |
| Communications | Emails you send to support@vyralz.com | To answer your questions |
We do not sell your personal information. We do not use your data to train our own machine-learning models. We do not show third-party advertising inside the Service.
We share the minimum data necessary with vetted service providers ("sub-processors") who help us run the Service:
| Sub-processor | What they receive | Purpose |
|---|---|---|
| Stripe, Inc. | Email, payment method (collected by Stripe directly), customer/subscription IDs | Payment processing |
| Anthropic, PBC | Video transcripts (from public YouTube videos) sent to the Anthropic API | AI-based selection of viral clip moments |
| Railway Corp. | All application data at rest and in transit (we host the Service there) | Cloud hosting and persistent storage |
| Cloudflare, Inc. | Domain DNS records (DNS-only, not proxied) | Domain resolution for vyralz.com |
| YouTube, TikTok, Instagram (when you connect them) | Your clips and OAuth-authorized actions | To post clips on your behalf when you instruct us to |
| Google (SMTP) | Recipient email + transactional email body | Sending verification and password-reset emails |
We may also share information if required by law, subpoena, court order, or to protect our rights, your safety, or the safety of others.
We use localStorage in your browser to store your session token (so you don't have to log in every time). We do not use third-party advertising cookies, tracking pixels, or analytics fingerprints. Clearing your browser storage will log you out.
We protect your account using industry-standard practices: passwords are hashed (never stored in plaintext) with PBKDF2-HMAC-SHA256 and a per-user random salt; session tokens are random 32-byte values transmitted only over HTTPS; payment data is handled directly by Stripe and never touches our servers. No system is perfectly secure, however, and you use the Service at your own risk. If we become aware of a breach that materially affects your data, we will notify you and the appropriate regulators as required by law.
Depending on where you live, you may have the right to:
To exercise any of these rights, email support@vyralz.com from the address associated with your account. We will respond within 30 days. California residents have specific rights under the CCPA/CPRA; EU/UK residents have specific rights under the GDPR. We honor those rights in addition to the above.
The Service is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us personal data, contact us and we will delete it.
Vyralz is operated from the United States, and the sub-processors listed above are primarily U.S.-based. If you are accessing the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S., which may have different data-protection laws than your country. By using the Service, you consent to that transfer.
We may update this Policy from time to time. Material changes will be reflected by updating the "Effective date" above and, where reasonably possible, by emailing you. Continued use of the Service after a change constitutes acceptance of the revised Policy.
Questions, requests, or concerns about your privacy? Email support@vyralz.com.
Vyralz · State of Nevada, USA