Privacy Policy

When you use Vyral, we may collect:

• Account identity — your email address; if you sign in with Google, we receive your name and avatar from your Google profile.
• Inputs you submit — prompts, custom scripts, YouTube URLs, TikTok URLs, article URLs, and any text you paste into the wizard.
• Generated artefacts — scripts, narration audio, rendered video files, captions, and the project metadata that ties them together.
• Usage telemetry — which pages you visit, which renders succeed or fail, approximate latency, and feature-level events. We use this to fix bugs and prioritise the roadmap.
• IP address — captured in request logs for security, abuse prevention, and rate limiting. Logs are retained for a short rolling window.

Your data is used to:

• Render the videos and scripts you ask for.
• Authenticate your account and keep your sessions valid.
• Detect abuse — e.g. someone scripting the API to scrape others' work or submit hateful content.
• Measure product quality (which features are slow, where users get stuck) so we know where to invest.

We do not use your inputs or outputs to train any third-party model on your behalf. Your prompts are sent to OpenAI / Google / Anthropic only as part of fulfilling your immediate render request.

Generated MP4 video files are automatically deleted 30 days after creation. The associated metadata (title, hook, scene list, parameter snapshot) is retained so you can re-render or re-export, but the heavy media file itself is removed on schedule.

If you delete your account, we make a best-effort sweep to remove all your generated media within 14 days.

We rely on a small set of vendors to operate the service. Each is used only for its specific purpose:

• OpenAI — script generation and transcript rewriting.
• ElevenLabs — voiceover synthesis when an ElevenLabs voice is selected.
• Pexels & Pixabay — stock-footage search for scene visuals.
• MongoDB Atlas — primary database for project metadata, draft scripts, and account records.
• Resend — outbound email (verification, password reset).
• Google — OAuth sign-in (we receive your Google profile basics; we do not read your inbox or files).
• faster-whisper & yt-dlp — TikTok transcription (run on our own servers; the source-clip audio is downloaded for transcription and discarded after the script is generated).

You can:

• Access the data we hold about you.
• Delete your account and the associated content.
• Export your projects (script JSON, generated MP4s) at any time from the dashboard.
• Contact us at Vyra1@proton.me with any privacy question.

We use a session cookie to keep you signed in (HTTP-only, SameSite=Lax). We may use lightweight first-party analytics cookies to measure aggregate usage. We do not use third-party advertising cookies.

Vyral is not intended for users under 13 years of age (or under 16 in the European Union). If you believe a child has signed up, email us and we will remove the account.

We will update the "Last updated" date at the top of this page when this policy materially changes. For substantive changes, we'll also email account holders.

Questions, requests, or complaints about this policy: Vyra1@proton.me