1. Information We Collect
1.1 Account Information
When you sign up for Vyrello, we collect basic account information such as your email address, name, and profile picture. If you sign in through a third-party provider (e.g. Google), we receive this information from that provider in accordance with their privacy settings and the permissions you grant.
1.2 Connected Social Platform Data
When you connect a third-party platform account (YouTube, TikTok, Instagram, and similar services), we receive and store:
- Your platform user ID, display name, and profile image
- OAuth access tokens and refresh tokens issued by the platform, used to publish content on your behalf
- The scopes you authorized (e.g.
youtube.upload) and the expiration time of each token - Channel- or account-level metadata necessary to display your connected accounts (e.g. channel name, subscriber count)
We never receive or store your password for any connected platform.
1.3 Content You Upload
Vyrello stores the media files (videos, images) you upload, along with metadata you provide such as titles, descriptions, hashtags, and scheduling times. This content is stored only to fulfill the publishing tasks you instruct us to perform.
1.4 Usage Data
We collect limited usage data — for example, which features you use, error reports, and session timestamps — to operate, maintain, and improve the Service.
2. How We Use Your Information
- To authenticate you and maintain your account
- To publish content to your connected platforms at the times you schedule
- To display analytics and publishing history that the connected platforms expose
- To send transactional emails (e.g. publishing failures, account notices)
- To detect, prevent, and respond to abuse, fraud, or security incidents
3. Google API Services User Data Policy
Vyrello’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, with respect to data obtained through Google OAuth scopes such as youtube.upload, youtube.readonly, and youtube.force-ssl:
- We use the data only to provide the user-facing features described in this policy — primarily, uploading and managing the user’s own videos on YouTube at their direction.
- We do not transfer this data to others except as necessary to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with appropriate notice to users.
- We do not use this data for advertising purposes, including retargeting, personalized advertising, or interest-based advertising.
- We do not allow humans to read this data unless we have the user’s affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or for internal operations where the data has been aggregated and anonymized.
4. How We Share Information
We do not sell your personal information. We share information only in the following limited cases:
- Connected platforms. When you instruct us to publish content, we send that content and the necessary metadata to the platform you selected (YouTube, TikTok, Instagram, etc.). These platforms handle the content under their own terms of service.
- Service providers. We use trusted infrastructure providers (e.g. Supabase for database and file storage, hosting providers) that process data on our behalf under written confidentiality and data-protection terms.
- Legal requirements. We may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of Vyrello, our users, or the public.
5. Data Retention
We retain personal information for as long as your account is active or as needed to provide the Service. Specifically:
- OAuth tokens are retained until you disconnect the platform from Vyrello or delete your account.
- Uploaded media files and publishing history are retained until you delete them or close your account.
- When you delete your account, we delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, accounting, or security reasons.
6. Your Rights and Choices
You have the right to:
- Access and update your account information at any time from the Settings page.
- Revoke platform access by disconnecting a platform inside Vyrello, or directly from the platform’s account-permission settings (e.g. your Google Account permissions page).
- Delete your account and associated data via Settings → Delete account, or by emailing us.
- Export your data by request to support@vyrello.co.
If you are located in the EU, UK, California, or another jurisdiction with similar privacy laws, you may have additional rights including the right to object to or restrict certain processing, and to lodge a complaint with your local data-protection authority.
7. Security
We protect your information using industry-standard measures: HTTPS in transit, encryption of OAuth tokens at rest, scoped database access controls (row-level security), and regular security reviews. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.
8. Children’s Privacy
Vyrello is not intended for individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.
9. International Data Transfers
Vyrello may process and store data in countries other than the country in which you reside. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the Service before the changes take effect. The “Effective date” at the top reflects the most recent revision.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at support@vyrello.co.