Privacy Policy

This Privacy Policy explains how VYRAL collects, uses, protects and deletes information when you use our website, app and social media marketing tools.

1. Information we collect

• Account and profile: name, email address, account type, brand name, phone number, country, photo, bio and preferences. If you sign in with Google or Apple, we receive from them only your name, your email (Apple may provide a private one), your photo in the case of Google, and an account identifier. We never see your password.
• Content: ideas, scripts, captions, images, videos, reference files, calendars and posts that you upload or schedule.
• Social media data: if you connect Instagram, Facebook, Pinterest or another platform, we only access the information and permissions you authorize, such as your profile, connected pages/accounts, metrics, posts and the ability to publish or schedule content.
• Advertising data: if you connect Meta Ads or Google Ads, we may read campaign metrics, spend, impressions, clicks, conversions and the data needed to show reports.
• Payments: payments are processed by third-party providers. We do not store full card numbers.
• Account origin: when you create your account we store with it where you came from: the campaign in the link (utm parameters), the ad network if you came from an ad (Meta, Google or TikTok, without the click identifier), the domain of the site that referred you, or the store if you signed up in the app. We use it to learn which channels bring new accounts.

2. How we use information

• To create and manage your account.
• To plan, schedule, publish and organize content.
• To show social media and campaign metrics and reports.
• To manage proposals, requests, messages and contracted services.
• To send operational notifications and support.
• To improve security, prevent abuse and meet legal obligations.
• To measure which VYRAL ads bring new people to the website and the apps. Measurement with Meta only happens if you agree (see section 3).
• To see how the public pages of the site are used (how far people scroll and where they tap), so we can improve them (see "Heatmaps" in section 6).

3. Use of Meta data

When you connect Facebook, Instagram or Meta Ads, VYRAL uses Meta data only for the features you turn on within the platform: connecting accounts, publishing or scheduling content, reading metrics, managing authorized campaigns and showing reports. We do not sell Meta data, we do not use it for advertising unrelated to VYRAL, and we do not transfer it to third parties except for providers needed to run the service under confidentiality obligations.

Ad measurement in the apps (Meta App Events).The VYRAL apps for iPhone and Android include Meta's SDK to learn which VYRAL ads on Facebook and Instagram bring new people to the app. It is off until you decide: when you open the app we ask you, with nothing pre-selected, and only if you accept does Meta receive these events from the app: the install and each app open, account creation, the start of a free trial and payments made through the app store (amount, currency, product and transaction number), along with the phone's advertising identifier. We do not send your name, your email, your account identifier or your content. The legal basis is your consent. If you reject, the app works the same and nothing is sent, and what happened before you accepted is not sent later. You can change your decision at any time in Profile > Privacy; when you withdraw it, the app stops sending events and deletes the Meta data stored on the phone, but this does not delete what Meta has already received. On iPhone, the system also asks for your permission to track (App Tracking Transparency): if you do not give it, or remove it later in Settings, nothing is sent to Meta even if you accepted in the app. Meta processes this data under its own privacy policy, which explains how to exercise your rights over it, and it may be processed outside Chile, including in the United States.

Our own sign-up measurement.On the home page, the ad pages and the sign-up pages we count, without cookies, how many people view the page, how far down they scroll, how long they stay, whether they tap the buttons to create an account or download the app, whether they submit the form, and whether sign-up succeeds or fails. Each record keeps only that step, the page, the campaign the visit came from and whether the browser is an app's, such as Instagram. It does not keep your name, your email, your IP address or any identifier of yours, so it cannot tell who you are. The basis is our legitimate interest in knowing whether sign-up works.

Ad measurement on the website (Meta pixel). To learn whether our ads work, the home page, the pages our ads link to (vyral.cl/para/...) and the sign-up pages of vyral.cl may use the Meta pixel. We ask you first in a notice, with nothing pre-selected, and it only loads if you accept. In that case Meta receives the page address, the fact that you visited or created an account, technical data from your browser such as your IP address, and identifiers stored in cookies (_fbp and _fbc). We do not send it your email, your name or what you type in forms, and the pixel does not load inside the platform or on private links. The basis is your consent: if you decline, the site works the same and nothing is sent. Meta processes this data as a controller, under its own policy, to measure and show ads, and it may be processed outside Chile, including in the United States. You can withdraw your consent at any time in section 7; this stops sending data and deletes those cookies, but does not delete what Meta has already received.

4. Use of Google data (YouTube and Google Ads)

VYRAL uses YouTube API Services. By connecting your YouTube channel you are also bound by the Google Privacy Policy.

• YouTube:we read the ID and name of your own channel (to show it in Connections) and upload to that channel the videos you prepare in VYRAL, only when you choose Publish or when the date you scheduled arrives, with the title, description and privacy setting you choose. We also read the list of your channel's videos with their views, likes and comments, and your subscriber count, to show you your analytics. We do not read other people's channels or show your YouTube data to users outside your workspace in VYRAL.
• Google Ads: we read the names, status and metrics (spend, impressions, clicks and conversions) of the campaigns in the accounts you connect or link to VYRAL, to show them to you in the Portal. We do not create, edit or pause campaigns.
• What we store: access tokens, encrypted; the ID and name of the channel or account; and the synced metrics. YouTube data is refreshed every hour (videos) or every day (subscribers), and anything that goes 30 days without being refreshed is deleted. We do not share this data with third parties or use it for advertising.
• Revoking and deleting: you can disconnect YouTube or Google Ads from VYRAL, which revokes access with Google and deletes the tokens and synced data right away, or revoke access in your Google account security settings. If you revoke access or delete your account, we delete that data within 30 days at most.

VYRAL's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Use of Pinterest data

When you connect your Pinterest account, VYRAL uses the Pinterest API only so that you can publish from VYRAL the Pins you plan. By connecting it you are also bound by the Pinterest Privacy Policy.

• What we read: the ID and username of your own account (to show it in Connections) and the list of your boards, so you can choose where each Pin goes.
• What we publish: we create, on the board you choose, the Pins you prepare in VYRAL (image or video, title, description and link), only when you choose Publish or when the date you scheduled arrives. We do not edit or delete your other Pins, follow accounts or save Pins on your behalf.
• What we store: access tokens, encrypted; your account ID and name; and the IDs of the Pins published from VYRAL. We do not sell this data, share it with third parties, use it for advertising or to train models, or show it to users outside your workspace in VYRAL.
• Revoking and deleting:you can disconnect Pinterest from Connections in VYRAL, which deletes the tokens, or remove VYRAL's access from the apps settings of your Pinterest account. If you revoke access or delete your account, we delete that data within 30 days at most.

6. Service providers and third parties

We may share data with hosting, database, storage, email, payment, analytics, artificial intelligence and ad measurement (Meta, only if you accept) providers, and with the platforms you connect. Each provider receives only the information it needs to perform its function.

Heatmaps and usage recordings (Microsoft Clarity).To learn whether the home page, the ad pages (vyral.cl/para/...), the sign-up pages and the web platform (vyral.cl/app) are easy to understand and where people get stuck, we use Microsoft Clarity. Clarity records how the page is used: taps and clicks, how far you scroll, pointer movement, the page you are viewing and technical data from your browser and device, including your IP address, which Microsoft uses to estimate the country. From that it builds heatmaps and recordings of the visit. What you type in forms is hidden in your browser before it is sent, and the sign-up form is masked entirely; we do not send it your name or your email. Inside the platform all content is masked in your browser before it is sent: text (posts, messages, client names, amounts) and images do not reach Clarity; it only sees the shape of the screen, the menu, and where you tap and scroll. We use it without cookies on vyral.cl: we tell Clarity not to store its own, so it does not recognize you from one visit to the next; Microsoft may store its own cookies on its domain (clarity.ms). Clarity does not load in the phone apps, on the sign-in page or on private links, and it does not start if your browser sends the Global Privacy Control signal. The basis is our legitimate interest in improving the site and the platform. Microsoft processes this data under its own privacy statement (privacy.microsoft.com), also for its own purposes, including its advertising, and it may be processed outside Chile, including in the United States.

7. Cookies and storage on your device

VYRAL stores, accesses and collects information on your device (browser or phone), and allows third parties to do so, through cookies and similar technologies such as the browser's and the app's local storage:

• Session: cookies from our authentication provider (Supabase) that keep you signed in.
• Preferences: language, light or dark theme, and the brand and view you chose, so we remember them on your next visit.
• Security when connecting networks: temporary cookies we use while connecting to Google, TikTok, X, LinkedIn or Pinterest to check that the response comes from your own request. They are deleted when the connection finishes.
• Third parties: when you sign in or authorize a network, the pages of Google (including YouTube), Meta or other platforms may store their own cookies on your device, under their own policies.
• Ad measurement in the app (Meta):only if you accept, Meta's SDK stores on the phone what it needs to send the events in section 3 and reads the advertising identifier. What is stored on the phone is deleted when you withdraw your consent.
• Ad measurement on the website (Meta pixel): only if you accept, on the home, ad and sign-up pages; in that case Meta stores the _fbp and _fbc cookies, which are deleted when you withdraw your consent.
• Heatmaps (Microsoft Clarity): on the home, ad and sign-up pages and in the web platform. We tell Clarity not to store cookies on vyral.cl; Microsoft may store its own cookies on its domain (section 6).
• Your measurement choice: we store in this browser (and, in the app, on the phone) whether you accepted or declined, which version of the notice you saw and the date, so we do not ask again and can show what you decided. If the notice changes, we ask you again.
• Visit origin:when you reach vyral.cl from a campaign, an ad or another site, we store in your browser's local storage, for up to 30 days, the campaign in the link (utm parameters), the ad network (without the click identifier), the domain of the site that referred you, the first page you saw and the date. It is not sent to third parties and is not used to identify you while you browse; if you create an account, it is stored with it (section 1).

Apart from what is described above, we do not use advertising or cross-site tracking cookies. You can delete or block cookies and local storage in your browser settings; if you block the session cookies, you will not be able to sign in to VYRAL.

8. Security and retention

We apply reasonable security controls to protect your information. We keep data while your account is active or while it is needed to provide the service, resolve disputes, meet legal obligations or prevent abuse. Access tokens are deleted or invalidated when you disconnect an account or delete your data.

9. Deletion and revocation

You can request deletion of your data from Data Deletion or by writing to info@vyral.cl. You can also revoke access from the settings of Facebook, Instagram, Google, Pinterest or any other connected platform.

10. Your rights

Regarding your personal data, you can request access, rectification, erasure, objection to a processing activity, portability and temporary blocking. Where processing is based on your consent, such as ad measurement, you can withdraw it at any time, as easily as you gave it; this does not affect what was processed before the withdrawal.

To exercise these rights, write to info@vyral.cl from the email address linked to your account; we reply within the time limits set by law. If you are not satisfied with the answer, you will be able to file a complaint with Chile's Personal Data Protection Agency (Agencia de Protección de Datos Personales) once it is in operation.

11. Children

VYRAL is not directed at children under 13 and does not knowingly collect information from children.

12. Contact

For questions about privacy, data deletion or app review, contact us at info@vyral.cl.