Viraly ("we", "us", "our") is committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.
Our Privacy Compliance
Viraly is compliant with major international privacy regulations:
Content Data: Text, images, videos, and URLs you submit for content creation, including multi-image uploads for collage creation
Payment Information: Payment details (processed securely through PayPal)
Voice Recordings: Audio files submitted for voice-to-text transcription
Communications: Messages exchanged through our platform, support requests
Template Preferences: Your favorite templates and custom text styling preferences (fonts, colors, sizes)
1.2 Information Collected Automatically
Device information and browser type
IP address and approximate location
Pages visited and features used
Date and time of visits
Referral sources
1.3 Social Media Engagement Data
When you connect your social media accounts (Facebook, Instagram, TikTok, Pinterest), we collect engagement metrics for posts published through our platform:
Likes, reactions, and favorites
Comments and replies
Shares and reposts
Reach and impressions (where available)
This data is synced every 6 hours and used to provide AI-powered performance insights and content recommendations. You can revoke this access at any time by disconnecting your social accounts.
1.4 Past Posts and Content Analysis (Brand Learning)
With your consent during registration, we may access your existing/past posts on connected social media accounts (Facebook Pages and Instagram Business accounts) to:
Learn Your Brand Voice: Analyze your writing style, tone, and content patterns
Understand Your Audience: Identify what content performs best with your followers
Optimize Posting Times: Determine when your audience is most active
Personalize AI Content: Generate content that matches your established brand identity
Important: This analysis is performed solely to improve the quality of AI-generated content for YOUR account. We do not share this data with other users or third parties. You can request deletion of this learned data at any time by contacting support@viraly.io or through your Account Settings.
2. HOW WE USE YOUR INFORMATION
To create and manage your account
To provide AI-powered content generation services
To schedule and publish content to social media platforms
To process payments and transactions
To send service-related notifications (post updates, billing reminders)
To improve our platform and user experience
To provide customer support
To comply with legal obligations
To detect and prevent fraud
3. INFORMATION SHARING
We share your information only in the following circumstances:
Social Media Platforms: To publish your content on Facebook, Instagram, and TikTok (with your authorization)
Payment Processors: PayPal processes payment information securely
AI Service Providers: We use third-party AI services to generate content (data is processed securely)
Gift Recipients: When you send a Gift Pack, we share your name and optional message with the recipient via email
Legal Requirements: When required by law, court order, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets
We DO NOT:
Sell your personal information to third parties
Share your information for third-party marketing
Use your data for purposes unrelated to our services
4. DATA SECURITY
We use industry-standard encryption (SSL/TLS) for data transmission
Passwords are hashed and never stored in plain text
Payment information is processed by PCI-compliant payment processors
Access to personal data is restricted to authorized personnel
We conduct regular security assessments
WebAuthn biometric authentication available for enhanced security
4.1 DATA RETENTION
We retain different types of data for different periods:
Generated Content (images, videos): 90 days from creation. Users should download content they wish to keep permanently.
Account Information: Retained while your account is active, deleted within 30 days of account closure upon request.
Financial Records: 7 years in compliance with Canadian tax regulations (Income Tax Act).
Engagement Analytics: 12 months from sync date.
Support Communications: 2 years from last interaction.
Content purging occurs automatically and cannot be reversed. We recommend downloading any content you wish to retain before the 90-day period expires.
5. YOUR RIGHTS UNDER PIPEDA
As a Canadian resident, you have the right to:
Access: Request a copy of your personal information
Correction: Request correction of inaccurate information
Withdrawal of Consent: Withdraw consent for certain data uses
Deletion: Request deletion of your account and associated data
Complaint: File a complaint with the Privacy Commissioner of Canada
Active account data: Retained while your account is active
Transaction records: Retained for 7 years for tax and legal purposes
Deleted accounts: Data removed within 30 days, except where legally required
Generated content: Retained until you delete it or close your account
7. COOKIES AND TRACKING
We use cookies and similar technologies to:
Keep you logged in
Remember your preferences
Analyze site usage and performance
Improve our services
You can control cookies through your browser settings.
8. THIRD-PARTY INTEGRATIONS
When you connect your social media accounts (Facebook, Instagram, TikTok), we access only the permissions necessary to publish content on your behalf. We do not access private messages or non-public content.
9. AUTO-POSTING CONSENT
By using our scheduling features, you consent to:
Automatic Publishing: Content in your scheduled queue will be automatically posted to your connected social accounts at the designated time
Content Storage: Your scheduled content is stored securely until published
Platform Access: We will access your social media accounts solely to publish approved content
You can withdraw consent at any time by deleting scheduled posts or disconnecting your social accounts.
10. LOYALTY AND REFERRAL PROGRAMS
If you participate in our loyalty or referral programs, we collect and process:
Purchase History: To calculate your loyalty tier based on rolling 12-month spending
Referral Data: Who you referred and their purchase activity (aggregated, not individual details)
Payout Information: For influencers, e-Transfer or PayPal email for commission payments
Your loyalty tier and referral statistics may be displayed to you in your Rewards Center.
10.1 Influencer Program Publicity
By participating in our Influencer Program, you consent to Viraly displaying the following information publicly on our website, landing pages, and marketing materials:
Your first name and last initial (e.g., "Sarah M.")
Your general location (city and country)
Your total earnings from the Influencer Program
Your projected monthly average earnings (estimated based on your activity period)
Your total number of successful referrals
Note on Monthly Earnings Estimates: Monthly average earnings displayed publicly are calculated estimates based on total earnings divided by the time period of activity. These figures are projections and may not reflect actual month-to-month variations in referral activity.
No other personal information will be shared. This data is displayed solely for promotional purposes to showcase our community's success and inspire others. If you wish to opt out of public display, please contact us at care@viraly.ca. Note that opting out may affect your continued eligibility for the Influencer Program.
11. STOCK PHOTOS AND THIRD-PARTY CONTENT
In providing our services, we may utilize stock photographs from third-party providers (including Unsplash, Pexels, and similar services). Regarding this content:
No Personal Data Collection: We do not collect personal information about individuals depicted in stock photographs
No Representation: The use of stock images does not imply any endorsement, affiliation, or representation of the subjects depicted
User Responsibility: Users are responsible for ensuring appropriate use of selected images, particularly those depicting people, religious sites, cultural elements, or sensitive subjects
Third-Party Licenses: Stock images are used under their respective provider licenses and may be subject to their terms of use
12. PUBLISHED CONTENT DISCLAIMER
Content published through Viraly to your social media accounts:
User Ownership: Remains the responsibility of the user who created and approved it
No Endorsement: Viraly does not endorse any views, opinions, or claims expressed in user-published content
No Liability: We are not liable for any consequences arising from content you publish through our platform
Cultural Sensitivity: Users must ensure content respects cultural, religious, and ethnic sensitivities in their target markets
13. CHILDREN'S PRIVACY
Viraly is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will delete it immediately.
14. INTERNATIONAL DATA TRANSFERS
Your data may be processed by AI service providers and cloud infrastructure located outside Canada. We ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy laws.
14.1 Transfer Mechanisms
For international data transfers, we use:
Standard Contractual Clauses (SCCs): EU-approved data transfer agreements
Adequacy Decisions: Transfers to countries recognized as providing adequate protection
Binding Corporate Rules: For transfers within our service provider network
14.2 Data Processing Locations
Primary data processing occurs in Canada and the United States. Enterprise customers may request a Data Processing Agreement (DPA) specifying data handling requirements.
15. GLOBAL PRIVACY RIGHTS
15.1 European Economic Area (GDPR)
If you are located in the EEA, you have additional rights under GDPR:
Right to Access: Obtain a copy of your personal data
Right to Rectification: Correct inaccurate data
Right to Erasure: Request deletion ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time
To exercise these rights, contact our Data Protection contact at care@viraly.ca. You may also lodge a complaint with your local supervisory authority.
15.2 California Residents (CCPA/CPRA)
California residents have the following rights:
Right to Know: What personal information we collect and how it's used
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt out of the sale of personal information (we do NOT sell data)
Right to Non-Discrimination: Equal service regardless of exercising privacy rights
15.3 Brazil Residents (LGPD)
Brazilian users have rights under the Lei Geral de Proteção de Dados (LGPD), including access, correction, anonymization, data portability, and the right to information about data sharing.
15.4 Other Jurisdictions
We respect privacy rights in all jurisdictions where we operate. If you have specific questions about your local privacy rights, please contact care@viraly.ca.
16. B2B DATA PROCESSING
16.1 Enterprise Customers
For B2B Enterprise customers, Viraly acts as a data processor on behalf of the Enterprise (data controller). Enterprise customers can request:
Data Processing Agreement (DPA) execution
Subprocessor lists and updates
Security audit reports and certifications
Data location specifications
16.2 Merchant Data
Merchants onboarded by Enterprises are subject to their Enterprise's privacy policies in addition to this Privacy Policy. Enterprises are responsible for informing their Merchants about data handling practices.
17. CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance.
18. CONTACT US
For privacy-related questions or to exercise your rights: