Privacy Policy
This Privacy Policy explains how Viralyze ("we", "us") collects, uses, shares and protects Personal Data in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the rules under it. Please read it together with our Terms of Use.
1. Definitions
"Personal Data" means any data about an individual who is identifiable by or in relation to such data. "Data Principal" is the individual the Personal Data relates to. "Data Fiduciary" is the person who decides the purpose and means of processing. "Data Processor" is a person who processes Personal Data on behalf of a Data Fiduciary. "Processing" has the meaning given in the DPDP Act. "Service" means the Viralyze app, website, public pages and related services.
2. Who we are and our role
Viralyze is a creator platform for Instagram comment and story-reply automation, link-in-bio pages, and selling products, courses and bookings. It is operated by TechNerve AI, a brand of Minusonetoten LLP (LLPIN: ACJ-3028), registered at 219 Kanara Business Centre, A Wing, Laxmi Nagar, No. 3 Link Road, Ghatkopar East, Mumbai 400075, Maharashtra, India.
For creator account data (your account, your Instagram connection, your usage), Viralyze is the Data Fiduciary. For the data of your audience and customers (people who comment, message you, buy from you or book with you), you are the Data Fiduciary and Viralyze is your Data Processor, acting on your instructions.
3. Personal Data we collect
- Account details: email address (used for login codes), display name, handle, plan and billing status.
- Instagram account data: Instagram user ID, username, account type, granted permissions and an access token, obtained only through Meta's official login.
- Interaction and messaging data: comments that match your keywords, DMs sent by your automations, replies received, public comment replies, delivery status and click events on your links.
- Audience and customer data: names, handles, emails, phone numbers, order and booking details that your audience provides when they interact with your automations, pages, checkout or booking link.
- Google Calendar data (if you connect it): the list of your calendars, free/busy information for the calendars you select, and the events Viralyze creates for bookings. We do not read the contents of your other events beyond their busy times.
- Payment metadata: amounts, currency (INR), order IDs, payout account details you enter. Full card or bank credentials are collected and held by our RBI-authorised payment aggregator, not by us.
- Device and usage data: device type, OS version, app version, crash logs, IP address, approximate location derived from IP, pages viewed and actions taken in the app.
- Cookies and similar tools: on this website we use essential cookies, analytics cookies and the Meta Pixel for our own marketing measurement. You can control cookies in your browser.
We do not sell Personal Data.
4. Instagram data and automated messages
Viralyze requests only the permissions instagram_business_basic and instagram_business_manage_messages, and uses them solely to run the automations you configure: reading comments and story replies that match your triggers, sending the private replies and public replies you wrote, and showing you delivery analytics. We never ask for your Instagram password. We never post to your feed or stories. Disconnecting Instagram in Settings revokes our access and deletes the stored token. Our use of Instagram data complies with Meta's Platform Terms and Developer Policies.
5. Google user data
If you connect Google Calendar, we request the calendar.readonly and calendar.events scopes. We use them only to read free/busy times from the calendars you choose and to create, update or cancel booking events. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it. Disconnecting Google Calendar in Settings revokes access and deletes stored tokens.
6. Purposes of processing
- Providing and operating the Service, including running your automations and public pages.
- Processing orders, bookings, payments and payouts.
- Sending transactional messages (login codes, receipts, booking confirmations and reminders).
- Generating analytics for you about your own audience and sales.
- Measuring and improving our own marketing and product.
- Security, fraud prevention, and compliance with law and with Meta's and Google's platform policies.
7. Consent, legitimate uses and withdrawal
We process your Personal Data mainly on the basis of your consent, given when you create an account and connect services, and for certain legitimate uses under Section 7 of the DPDP Act (for example, where you voluntarily provide data for a specified purpose, or where processing is required by law). You may withdraw consent at any time through in-app controls (disconnect Instagram or Google, delete your account) or by writing to our Grievance Officer. Withdrawal does not affect processing done before withdrawal and may limit features.
8. Sharing and processors
We share Personal Data only as needed to run the Service, with: Meta Platforms (to read comments and send DMs through the Instagram API); Google (Calendar, if connected); our payment aggregator (Razorpay / PayU, for payments and payouts); an email delivery provider (transactional email); an AI provider (Google Gemini or Anthropic), used only to generate variations or translations of your own reply templates and never trained on your data; Meta advertising and conversion measurement (hashed email of our own website visitors only); analytics and crash-reporting tools; and cloud hosting providers. Each processor is bound by contract to process data only on our instructions. We may also disclose data where required by law or to protect rights and safety.
9. Cross-border transfers
Your data is stored primarily in India. Some processors operate servers outside India. Any transfer follows Section 16 of the DPDP Act and does not go to countries restricted by the Central Government.
10. Retention and erasure
We keep Personal Data only as long as needed for the purposes above or as required by law. When you withdraw consent or delete your account, we erase your data, typically within 24 hours, except records we must keep under tax, accounting or other laws (for example transaction records, kept for the statutory period). Backups are overwritten on a rolling basis within 30 days.
11. Audience data (you as Data Fiduciary)
When your audience comments, messages, buys or books, you decide why their data is collected. You must give them your own privacy notice and obtain valid consent where required, and you must respond to their requests. Viralyze provides tools to help: unsubscribe links in emails, and access, correction and erasure handling, usually within 24 hours of your instruction. Audience members may also contact us directly and we will forward requests to you or act on them as your processor.
12. Your rights as a Data Principal
You have the right to access a summary of your Personal Data and how it is processed; to correct, complete or update it; to erase it; to grievance redressal; and to nominate another person to exercise your rights if you are unable to. Use Settings → Privacy and data, or write to the Grievance Officer. If your grievance is not resolved, you may complain to the Data Protection Board of India. You also have duties under Section 15 of the DPDP Act, including not to impersonate anyone or to file false grievances.
13. Children's data
The Service is for people aged 18 and over. We do not knowingly process the Personal Data of children. Where processing of a child's data is unavoidable, we require verifiable consent of a parent or lawful guardian, and we do not track children or direct targeted advertising at them.
14. Security and breaches
We protect data with TLS encryption in transit, encryption at rest for tokens and credentials, access controls, logging and regular review. No system is perfectly secure. If a Personal Data breach occurs, we will notify the Data Protection Board of India and affected Data Principals in the form and time required by law.
15. Grievance Officer
Grievance Officer, TechNerve AI
grievance@technerveai.com
205 Vita Premium Homes, 1st Cross Road, Somasundarapalya, Bengaluru, Karnataka 560102, India
We acknowledge grievances within 24 hours and aim to resolve them within 15 days. For general privacy questions write to privacy@technerveai.com.
16. Changes to this Policy
We may update this Policy from time to time. We will change the "Last updated" date and, for material changes, notify you in the app or by email. Continued use of the Service after a change means you accept the updated Policy.