Privacy Policy
Last updated: July 10, 2026
This Privacy Policy explains how Vyiral (“we”, “us”, “our”) collects, uses, shares, and protects your information when you use our YouTube growth analytics platform at vyiral.com and related services (the “Service”). We are committed to handling your data responsibly and in accordance with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and other applicable laws. By creating an account or using the Service, you acknowledge that you have read and understood this Policy.
1. Introduction & Scope
Vyiral is operated from India and provides analytics, keyword research, competitor tracking, SEO scoring, AI-generated ideas and coaching, and earnings projections for YouTube creators. This Policy applies to personal data we process about visitors, registered users, and subscribers of the Service.
This Policy does not cover the practices of third parties we do not own or control, including Google, YouTube, OpenAI, Razorpay, and our hosting provider, whose handling of your data is governed by their own policies. We list each of these providers, and link to their policies, in the Third-Party Services section below.
2. Definitions
- Personal data — any information that relates to an identified or identifiable individual.
- Data Principal — the individual to whom the personal data relates (that is, you).
- Data Fiduciary — the entity that determines the purpose and means of processing personal data (that is, Vyiral).
- Processing — any operation performed on personal data, such as collection, storage, use, or deletion.
- YouTube data — information we access from your connected channel through the YouTube API Services.
- AI provider — a third-party artificial-intelligence service (currently OpenAI) that powers our AI features.
3. Information We Collect
We collect the following categories of information:
a. Account information
Your name, email address, and a securely hashed password when you create an account. If you sign in with Google, we receive your basic Google profile (name, email, and profile picture) as permitted by you during sign-in.
b. YouTube channel data
When you connect your channel through Google sign-in, we access read-only data such as channel statistics, video metadata, thumbnails, titles, descriptions, tags, and analytics (views, watch time, impressions, subscribers, and estimated revenue where available). We never post, edit, delete, or modify anything on your channel or on your behalf.
c. Payment information
Subscription payments are processed by Razorpay, whose handling of your payment data is governed by the Razorpay Privacy Policy. We do not collect or store your full card, UPI, or bank details. We retain only a record of your transaction (such as payment ID, plan, amount, currency, status, and invoice) needed for billing, accounting, and support.
d. Usage, device & log data
We automatically collect information about how you interact with the Service, such as features used, pages visited, referring pages, approximate location derived from IP address, browser type, device type, operating system, and timestamps. This helps us secure, maintain, and improve the product.
e. AI feature inputs
When you use an AI feature (such as AI Coach, idea generation, SEO suggestions, or keyword insights), we process the content you submit or select for analysis — for example, video titles, descriptions, tags, keywords, and channel context — in order to generate a response. See the AI Features & Providers section for how this data is handled.
f. Communications
When you contact us for support or feedback, we keep a record of your messages and our responses so we can assist you and improve the Service.
4. How We Collect It
- Directly from you — when you register, subscribe, update your profile, use AI features, or contact support.
- From Google / YouTube — through the OAuth authorization you grant when connecting your channel.
- Automatically — through cookies, local storage, and server logs as you use the Service.
5. How We Use Your Information
- To provide and operate the platform, including analytics, keyword research, competitor tracking, SEO scoring, and earnings projections.
- To power AI features — generating ideas, coaching, SEO suggestions, and keyword insights — using our AI provider.
- To create and manage your account and authenticate your sign-in.
- To process subscriptions, payments, invoices, and renewals through Razorpay.
- To communicate with you about your account, transactions, updates, security alerts, and support requests.
- To personalize your experience and remember preferences such as your selected language.
- To monitor, secure, debug, and improve the Service and develop new features.
- To detect, prevent, and address fraud, abuse, or violations of our Terms.
- To comply with legal obligations and enforce our agreements.
We do not use your YouTube data or personal data to serve third-party advertising, and we do not sell your personal data.
6. Legal Bases for Processing
Under the DPDP Act, we process your personal data on the following bases:
- Consent — for connecting your YouTube channel, using AI features, and other optional features, based on the consent you provide, which you may withdraw at any time.
- Performance of a contract — to deliver the Service you have signed up for and to process your subscription.
- Legitimate uses — such as securing the Service, preventing fraud, and complying with law, as permitted under applicable data protection rules.
7. AI Features & Providers
Vyiral offers AI-powered features, including AI Coach, viral idea generation, SEO title, description, and tag suggestions, and keyword insights. These features are powered by a third-party AI provider — currently OpenAI — accessed through the secure AI gateway provided by our hosting provider.
To generate a response, we send the relevant content you submit or select for analysis (such as video titles, descriptions, tags, keywords, and channel context) to the AI provider. We do not send your password, payment details, or Google/YouTube access tokens to AI providers.
- AI outputs are generated automatically and may be inaccurate or incomplete. Treat them as suggestions, not professional advice or guarantees of results.
- Content submitted to OpenAI through its API is handled under the OpenAI Privacy Policy and is not used by OpenAI to train its models, consistent with OpenAI’s API data-usage policies.
- You can choose not to use AI features; the core analytics of the Service do not require them.
For more detail, see the OpenAI Privacy Policy and the OpenAI Usage Policies.
8. YouTube API Services
Vyiral uses YouTube API Services. By using our platform, you agree to be bound by the YouTube Terms of Service. Our use of information received from YouTube APIs adheres to the YouTube API Services Terms of Service and the Google Privacy Policy.
- We request read-only access scopes only. We cannot and do not make changes to your channel.
- We use YouTube data solely to display analytics and insights to you within the Service.
- We do not transfer YouTube data to third parties except as needed to run the Service (for example, secure hosting) or where required by law.
- We do not use YouTube data for advertising, resale, or building independent profiles of individuals.
You can review or revoke Vyiral’s access to your Google account at any time via the Google security settings. When you revoke access or disconnect your channel, we stop accessing new YouTube data and delete cached YouTube data in line with our retention practices below.
9. Third-Party Services & Their Policies
We rely on a small number of trusted providers to run Vyiral. Each processes your data only to provide services to us and is bound by appropriate confidentiality and security obligations. Their handling of your data is governed by their own policies, linked below:
Google & YouTube
Google Sign-In for authentication, and the YouTube Data & Analytics APIs to fetch your channel statistics, video metadata, and analytics on a read-only basis.
OpenAI
Powers our AI features — AI Coach, viral idea generation, SEO title/description/tag suggestions, and keyword insights — by processing the content you choose to analyze.
Razorpay
Processes subscription payments and issues invoices. We never receive or store your full card, UPI, or bank details.
12. International Data Transfers
Some of our service providers (including our AI, payment, and hosting providers) may process or store data on servers located outside India. Where this happens, we take reasonable steps to ensure your data is protected consistent with this Policy and applicable law.
13. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service.
- Account and profile data — retained while your account is active.
- YouTube data — cached for the period needed to display analytics and refreshed periodically; removed after you disconnect your channel or delete your account.
- AI-generated content — ideas, suggestions, and insights we generate for you are stored with your account until you delete them or your account.
- Transaction and invoice records — retained for the period required by tax, accounting, and legal obligations.
- Support communications — retained for a reasonable period to assist you and improve the Service.
When you delete your account, we remove or anonymize your personal data within a reasonable period, except where retention is required by law.
14. Data Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, access controls, and secure infrastructure. In the event of a personal data breach that is likely to affect you, we will notify you and the relevant authority as required by law. No method of transmission or storage is completely secure, but we work hard to protect your information.
15. Your Rights & Choices
Subject to applicable law, you have the right to:
- Access a summary of the personal data we process about you.
- Correct or update inaccurate or incomplete personal data.
- Request erasure of your personal data, subject to legal retention requirements.
- Withdraw consent you previously gave, such as disconnecting your YouTube channel or ceasing to use AI features.
- Nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.
- Raise a grievance with our Grievance Officer (see below).
To exercise these rights, contact us using the details below or use the controls available within the app. We may need to verify your identity before acting on a request.
16. Children’s Privacy
Vyiral is intended for users who are at least 18 years old. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.
17. Third-Party Links
The Service may contain links to third-party websites and services. We are not responsible for their content or privacy practices, and we encourage you to review their policies before providing them with your information.
18. Data Protection Principles (DPDP Act)
Protecting your personal data is central to how we build Vyiral. In line with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we process personal data according to the following principles:
- Lawfulness & transparency — we process personal data only with a valid legal basis and explain how we use it.
- Purpose limitation — we use personal data only for the purposes for which it was collected.
- Data minimization — we collect only what we need to provide the Service.
- Accuracy — we take reasonable steps to keep personal data accurate and up to date.
- Storage limitation — we retain personal data only as long as necessary.
- Security — we protect personal data with appropriate technical and organizational safeguards.
- Accountability — we take responsibility for how we handle personal data.
We seek your consent before connecting your YouTube channel and for other optional processing, and you may withdraw that consent at any time — for example, by disconnecting your channel in the app or revoking access through your Google account permissions. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and some features may stop working as a result.
19. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page and, where appropriate, by notifying you within the app or by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
20. Grievance Officer & Contact
In accordance with applicable Indian law, you may contact our Grievance Officer for any questions, concerns, or complaints about this Policy or your personal data:
- Grievance Officer, Vyiral
- Email: privacy@vyiral.com
- General support: support@vyiral.com
We aim to acknowledge grievances promptly and resolve them within the timelines prescribed under applicable law.
If you are not satisfied with our response, you may have the right to escalate your complaint to the Data Protection Board of India, as established under the DPDP Act.