Privacy policy
Last updated: 10-30-2026.
This policy explains what VYRL (run by VYRL Collectiv LLC, "we", "us") collects when agencies and their clients use our marketing tool, why, who we share it with, and how to ask us to delete it. Our location is Scottsdale, Arizona.
What we collect
- Account details: name, work email, role and login information.
- Brand content: brand names, descriptions, voice and style notes, products, images, video, audio, scripts, drafts and approvals you or your agency add.
- Connected-account data: when you connect Meta (Facebook and Instagram), TikTok, Klaviyo, Mailchimp, Shopify or WordPress, we receive the access tokens and the data those services allow, such as page and account names, posts, performance numbers, audiences, products and site content. Tokens are stored encrypted.
- Inbox messages: comments and direct messages on connected social accounts, with the sender's public name and handle, so your team can read and reply.
- Usage data: basic logs of actions in the app, used for security and support.
Why we collect it
- To run the service: plan, draft, approve and publish content, send email, and manage the inbox.
- To make drafts that fit each brand, using AI services.
- To show performance reports and keep each client's data separate from every other client's.
- To keep the service secure, prevent abuse and meet legal duties.
Who we share it with
We do not sell personal information. We share data only with the providers that run the service, and only what each one needs:
- Anthropic and OpenAI: AI text and image generation.
- Seevio: video and image generation.
- ElevenLabs: voice and audio.
- Amazon Web Services (AWS): hosting, database and file storage.
- Meta and TikTok: publishing and inbox, for the accounts you connect.
- Klaviyo and Mailchimp: email, for the accounts you connect.
- Amazon SES: sending our own login and notification emails.
We may also disclose data when the law requires it.
How long we keep it
- Inbox messages: 12 months, then deleted.
- Account and brand content: while the account is active. We delete it within 30 days of a deletion request, or within 1 year after the account closes if there is no request.
- Database backups: up to 7 days. A deleted item can stay in backups until they expire.
- Application logs: up to 30 days. Security logs (CDN and firewall): up to 90 days. Logs hold limited technical data, not your content.
Security
Connection tokens are encrypted. Each client can see only its own brands. Traffic is sent over HTTPS, and access is limited by role. No system is perfectly secure, and we will tell affected people if a breach affects them, as the law requires.
Access and deletion requests
You can ask for a copy of your data, a correction, or deletion. Email info@vyrlcollectiv.com or follow the steps on our data deletion page. We will confirm who you are first, then reply within 30 days.
Changes
We will update this page when the policy changes and show the new date at the top.