Privacy Policy

This Privacy Policy explains how Vorylo handles information when you visit the website, create an account, submit brand material, use AI-assisted features, generate creative content, or manage a subscription.

1. Information collected

Account and authentication information

Vorylo processes information such as your name, email address, account identifier, authentication credentials through Supabase, workspace membership, and session information needed to sign you in and keep your account secure.

Business, brand, and website information

Vorylo processes business and brand details you provide or save, including business names, website URLs submitted for scans, industry, audience, offers, descriptions, brand positioning, logos, and other brand materials. When you request a website scan, the service retrieves and analyzes information available at the submitted URL.

AI inputs and generated content

Vorylo processes prompts, campaign objectives, offers, chat inputs, website-derived context, generation settings, and related instructions. It also stores or processes generated copy, images, creative assets, thumbnails, generation status, and associated metadata so results can be delivered and shown in your library.

Billing information

Vorylo processes subscription plan and status, Stripe customer, subscription, checkout, invoice, price, and payment-event identifiers, billing-cycle dates, trial status, and credit balances or transactions. Stripe collects and processes payment-method information. Vorylo does not claim to store complete card numbers.

Technical and service data

The application and its infrastructure may process request and response data, timestamps, error and diagnostic logs, security signals, browser or device information, and network information such as IP addresses as needed to deliver, protect, troubleshoot, and operate the service.

2. How information is used

Information is used to authenticate users; provision and operate workspaces; scan submitted websites; personalize brand context; provide AI strategy and generation features; save and display creative assets; administer subscriptions, trials, invoices, and credits; prevent abuse; secure and troubleshoot the service; communicate service information; and improve reliability and functionality.

3. AI processing

Relevant prompts, website-derived information, brand context, and generation instructions may be sent to OpenAI to produce text or image outputs. Do not submit sensitive personal information or content you are not authorized to process. AI outputs and related inputs may also be stored in Vorylo’s application data to provide history, saved assets, and service functionality.

4. Payment processing

Stripe provides checkout, payment processing, subscription billing, invoices, and the customer billing portal. Payment information you enter into Stripe is handled under Stripe’s own terms and privacy practices. Vorylo receives identifiers, statuses, dates, and event information needed to connect Stripe billing to your workspace and credits.

5. Service providers

Vorylo uses Supabase for authentication, database, and file-storage services; Stripe for payments and subscription management; OpenAI for AI-assisted text and image processing; and Cloudflare for application hosting, delivery, networking, caching, and security. These providers process information on Vorylo’s behalf or as otherwise described in their terms.

6. Data storage and security

Application data may be stored through Supabase and processed through Cloudflare and the other providers described above. Vorylo uses access controls, authenticated sessions, server-side credentials, and other reasonable safeguards designed to protect information. No system is completely secure, and absolute security cannot be guaranteed.

7. Cookies, attribution, and analytics

Vorylo and Supabase use cookies or similar session technologies for authentication, security, and core application functions. Vorylo also records first-touch campaign parameters, landing page, referral information, and acquisition funnel events to understand how customers find and use the service. With your marketing analytics permission, the public site may use the Meta Pixel and Meta Conversions API to measure advertising events such as page visits, completed scans, checkout starts, verified trials, and first subscription payments. Marketing analytics are optional and do not control essential site or account functions. Cloudflare may also process technical information needed to deliver and protect the service.

8. Data retention

Information is retained for as long as reasonably needed to provide the service, maintain account and billing records, preserve security and transaction history, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention schedules and a self-service account deletion process have not yet been published.

9. Your choices and rights

You may update certain account and brand information in the service and manage Stripe-backed billing through the customer portal. You may request assistance through the support channel made available in the product. Privacy rights vary by location; Vorylo will address verified requests as required by applicable law. This policy does not promise jurisdiction-specific workflows that have not been implemented.

10. Children

Vorylo is a business marketing service and is not directed to children. Do not use the service or submit personal information if you are not legally able to agree to the applicable terms.

11. Changes to this policy

This policy may be updated as Vorylo’s practices or services change. The effective date will be revised, and material changes may be communicated through the service or another reasonable channel.

12. Contact

A formal privacy contact and business mailing address have not yet been published. Until those details are provided, contact Vorylo through the support channel made available in the product. This section should be updated when those business details are finalized.