Privacy Policy

Account information. When you sign in with Google, we receive your name, email address, and profile image. We use this to create and secure your account.

Content you create. The prompts you write, the slideshows and videos you generate, products you add, and your settings. This content is private to your account.

Connected accounts. If you choose to connect a third-party account (such as TikTok), we receive the access tokens that account issues so we can perform the specific actions you ask for. We describe these connections in detail below.

Operational data. Basic logs needed to keep the service running and secure, such as error reports and request timing. We do not use this to build advertising profiles.

We use the information above only to:

• Provide, maintain, and improve the Vyral product.
• Generate the slideshows and videos you request. This includes sending your prompt to our AI provider to plan the slideshow, and, when you run an image search, fetching candidate images from public sources such as Pinterest.
• Publish content to the accounts you have connected, at your direction.
• Secure your account and prevent abuse.
• Respond to support requests.

We do not sell your personal information, and we do not use the content of your connected accounts for advertising.

If you choose to connect your TikTok account, Vyral uses TikTok’s official Login Kit (OAuth) and requests only the permissions needed to publish on your behalf: basic profile information (your open ID, display name, and avatar, via user.info.basic) and the ability to create posts (video.publish).

We use this access for one purpose: to publish the slideshows and videos you create to your own TikTok account, and only when you ask us to (either manually or on a schedule you set). Vyral never posts content you did not create, and never likes, follows, comments, or takes any other action on your behalf.

The access and refresh tokens TikTok issues are stored encrypted at rest using AES-256-GCM and are never exposed to other users, sold, or shared with any third party. You can disconnect TikTok at any time from Settings, which deletes the stored tokens and revokes them with TikTok. Our use of TikTok data complies with the TikTok Developer Terms of Service and Developer Guidelines, and we do not use TikTok data for any purpose other than providing the features described here.

Vyral can be connected to AI assistants such as Claude through the Model Context Protocol (MCP). When you connect Vyral as a connector, access is authorized with OAuth, and the assistant can only call the tools you invoke (for example, building a slideshow or publishing a post) using your own account’s data and permissions. The connection grants no access to other users’ data, and you can revoke it at any time.

Your data is stored in a managed Postgres database with row-level security, so each account can only read its own rows. OAuth tokens for connected accounts are encrypted before they are written to the database. Generated media is stored in access-controlled object storage. Traffic is served over HTTPS, and we apply a strict content-security policy.

We rely on a small number of vendors to run Vyral. Each receives only the data needed for its function:

• Google for sign-in.
• TikTok for the account you choose to connect.
• Upload-Post to publish to TikTok on your behalf.
• OpenRouter as our AI provider, to turn your prompt into a slideshow plan.
• Apify to run image searches against public sources such as Pinterest.
• Vercel for hosting and media storage, and Neon for the database.

We keep your account data for as long as your account is active. You can disconnect any third-party account at any time from Settings, which deletes the related tokens right away. You can also delete content you have created. To delete your entire account and all associated data, contact us at the address below and we will process the request.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us and we will respond within a reasonable time.

Vyral is not directed to children under 13, and we do not knowingly collect personal information from them.

We may update this policy as the product evolves. When we make material changes, we will update the effective date at the top of this page.

Questions about this policy or your data? Email us at muhammedeliwat@gmail.com.