Privacy Policy

1. Information We Collect

We collect information you provide directly to us, as well as information collected automatically when you use our platform:

• •Account information: name, email address, phone number, and profile photo.
• •Professional information: social media handles, audience size, niche, and content samples.
• •Connected social account data: when you voluntarily link Instagram, YouTube, or Facebook, we receive read-only profile and performance metrics authorized through that platform’s OAuth consent screen (see Section 4).
• •Payment information: bank account or card details (processed securely via Stripe).
• •Usage data: pages visited, features used, campaign interactions, and session duration.
• •Device information: IP address, browser type, operating system, and device identifiers.
• •Communications: messages sent through our platform between brands and creators.

2. How We Use Your Information

• •To provide, maintain, and improve the VyrlOne platform.
• •To display connected social account statistics on your creator profile and to help brands evaluate creator fit for campaigns.
• •To refresh linked social metrics when you request a sync or when you remain connected to the platform.
• •To match brands with relevant creators using our AI algorithm.
• •To process payments and manage escrow transactions.
• •To send platform notifications, campaign updates, and service communications.
• •To detect fraud, abuse, and security threats.
• •To comply with legal obligations and enforce our Terms of Conditions.
• •To analyze platform usage and improve our matching algorithms.

3. Information Sharing

We do not sell your personal information. We share information only in these circumstances:

• •With brands or creators as part of a campaign collaboration you've agreed to, including read-only social metrics you have chosen to display on your profile.
• •With Meta (Facebook/Instagram) and Google when you initiate a social account connection, solely to authenticate and retrieve the data you authorize.
• •With payment processors (Stripe, PayPal) to facilitate secure transactions.
• •With analytics providers to help us understand platform usage.
• •With law enforcement or government authorities when required by law.
• •With your consent for any other purpose not listed here.

4. Social Media Account Connections

Creators may optionally connect Instagram, YouTube, and/or Facebook accounts from onboarding or account settings. Connection is always voluntary, initiated by you, and can be removed at any time using the disconnect option in the app.

• •Instagram: we use Meta’s Instagram Login (instagram.com) to request read-only access to your professional Instagram account. With your consent we may collect username, profile URL, follower count, media count, reach, impressions, engagement-related metrics, and related profile metadata. We do not post, edit, delete, or send messages on your behalf.
• •Facebook: we use Meta’s Facebook Login for Business to connect a Facebook Page you administer. With your consent we may collect Page name, Page ID, and Page engagement metrics where available. Instagram connections may alternatively use a Page-linked Instagram Business/Creator account when that flow is enabled.
• •YouTube: we use Google OAuth with the youtube.readonly scope to connect a YouTube channel on your Google account. With your consent we may collect channel title, channel URL, subscriber count, total view count, and video count via the YouTube Data API. We do not upload, modify, or delete YouTube content.
• •OAuth access tokens (and refresh tokens where provided) are encrypted at rest on our servers. We use them only to sync metrics for your connected account while the connection remains active.
• •Brands and other users do not receive your social platform passwords or raw OAuth tokens. They may only view metrics VyrlOne displays on your profile according to our product rules and your visibility settings.
• •To disconnect, use Settings → Social Connections (or Edit Profile → Social). Disconnecting revokes our ability to refresh new data from that platform; we delete or stop using stored connection credentials according to our retention practices.

5. Data Security

We implement industry-standard security measures to protect your information, including:

• ✓SSL/TLS encryption for all data in transit.
• ✓AES-256 encryption for sensitive data at rest.
• ✓Regular security audits and penetration testing.
• ✓Access controls limiting data access to authorized personnel only.
• ✓Incident response procedures for data breach notification.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

7. Cookies

We use cookies and similar tracking technologies to improve your experience on our platform. Cookies help us remember your preferences, analyze traffic patterns, and deliver relevant content.

You can control cookie settings through your browser. Disabling cookies may limit some platform functionality.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request account deletion at any time.

Connected social account tokens and synced metrics are retained while the connection remains active. When you disconnect a platform or delete your account, we remove or anonymize connection credentials and stop collecting new data from that platform.

Campaign records and payment data may be retained for up to 7 years to comply with financial regulations, even after account deletion.