Privacy Policy
Viralyz.AI — Operated by Reach Digital
1. Introduction
Welcome to Viralyz.AI ("Viralyz," "we," "our," or "us"). Viralyz.AI is operated by Reach Digital and is an all-in-one AI-powered toolkit for short-form content creators. Our features include:
- Instagram Auto DM — keyword-triggered automated Direct Messages
- Bio Store — a personalized link-in-bio storefront for creators, powered by your connected Instagram account
- Script Enhancer — AI-powered video script improvement
- Competitor Tracker — track and analyze competitor Instagram profiles using Meta's Business Discovery API
- Thumbnail Generator — AI-generated thumbnail designs
- Video Caption Generator — automatic caption creation for videos
- Video Analysis — AI-driven performance analysis of your videos
- Profile Analysis — insights into your Instagram account performance
- SEO / Caption Generator — SEO-optimized captions for posts
- Content Planner — schedule and organize your content pipeline
This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website at https://viralyz.ai and all related services (collectively, the "Service").
By using Viralyz.AI, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
2.1 Account Registration Information
When you create a Viralyz.AI account, we collect:
- First name
- Last name
- Email address
- Username
- Password (stored in encrypted/hashed form — we never store your raw password)
- Billing information (processed securely via our payment provider Razorpay; we do not store raw card numbers or payment details on our servers)
2.2 Content You Provide
We collect content you upload or create within the platform, including:
- Video scripts and enhanced scripts
- Captions and SEO copy you generate or save
- Thumbnail designs and prompts
- Competitor handles you add to the Competitor Tracker
- Content planner entries and scheduling data
- Automation rules (keywords, trigger conditions, and reply messages) you configure for Instagram Auto DM
- Bio Store content including your store name, links, product listings, descriptions, images, and customization settings you configure
2.3 Automatically Collected Data
When you use our Service, we automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and features used
- Timestamps of activity
- Referral URLs
2.4 Bio Store Visitor Data
When someone visits your public Bio Store page, we may collect:
- IP address of the visitor
- Browser type and device information
- Links clicked within your Bio Store
- Timestamps of visits
This data is used to provide you with basic analytics about your Bio Store performance (e.g., link click counts, visitor counts). We do not sell or share this visitor data with third parties.
2.5 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to maintain your session, remember preferences, and analyze usage patterns. You can control cookies through your browser settings; however, disabling cookies may limit certain features.
3. Instagram and Meta Platform Data
This section specifically addresses all data collected through our integrations with Instagram and Meta's platforms. Viralyz.AI is officially approved by Meta and integrates with the following Meta APIs:
- Instagram Business API
- Instagram Messaging API
- Facebook Graph API (used during Facebook OAuth onboarding for pages, engagement, and analytics data)
- Instagram Business Discovery API (used for the Competitor Tracker feature)
3.1 How We Connect to Instagram and Facebook — Two Separate Connections
Viralyz.AI uses two separate OAuth connections depending on which features you use. These are independent of each other and serve different purposes:
Connection 1 — Facebook OAuth (Required at Onboarding)
When you first onboard to Viralyz.AI, you are required to connect your Facebook account via Facebook OAuth. This connection gives us access to your linked Instagram Business account through Facebook's permission system.
This connection powers the following features:
- Bio Store (auto-populated with your Instagram profile data)
- Profile Analysis
- Video Analysis
- Competitor Tracker
- Instagram analytics and insights dashboard
- Content Planner
Through this Facebook OAuth flow, we request the following approved Meta permissions:
Permission Why We Need It
instagram_business_basic
To identify your Instagram Business Account, establish the connection, and auto-populate your Bio Store with your Instagram profile data
instagram_manage_insights
To retrieve analytics and performance data for your posts, reels, and account
instagram_basic
To read your Instagram account profile information and media, used to populate your Bio Store profile section
pages_show_list
To access the list of Facebook Pages you manage, required during the Meta OAuth connection flow
pages_read_engagement
To read content and engagement data associated with your connected Facebook Page
business_management
To interact with Meta's Business Manager API as required for Business account verification and API access
public_profile
To read your basic public profile information during the OAuth flow
Connection 2 — Instagram OAuth (Required Only for Auto DM Feature)
When you choose to use the Instagram Auto DM feature, you are required to complete a separate Instagram OAuth connection. This is a distinct and independent connection from the Facebook OAuth done at onboarding.
This connection is not required to use Viralyz.AI generally — it is only required if and when you want to activate the Auto DM feature.
This connection powers exclusively:
- Instagram Auto DM (sending automated Direct Message replies on your behalf)
Through this Instagram OAuth flow, we request the following permission:
Permission Why We Need It
instagram_business_manage_messages
To send automated DM replies to users on your behalf when your configured trigger conditions are met
3.2 Instagram Data Used for Bio Store
When you connect via Facebook OAuth at onboarding and create your Bio Store, we use your Instagram profile data to auto-populate and enhance your storefront:
Data Type Purpose Stored?
Instagram profile picture
Displayed as your Bio Store profile image
Yes, cached
Instagram display name / username
Displayed as your Bio Store name and handle
Yes, cached
Instagram bio text
Optionally pre-filled into your Bio Store description
Yes, cached — you may edit or remove it
Instagram follower count
Optionally displayed on your Bio Store as a social proof indicator
Yes, cached
Recent public posts / reels
Optionally displayed as a media feed section within your Bio Store
Yes, cached
Instagram Business Account ID
To identify your account and link it to your Bio Store
Yes
Important notes about Bio Store and Instagram data:
- All Instagram data used in your Bio Store is data you have already made public on your Instagram profile
- You have full control over what is shown on your Bio Store — you can edit, hide, or remove any auto-populated Instagram data at any time from your Bio Store settings
- We do not display any private Instagram data on your Bio Store
- Your Bio Store is a publicly accessible page hosted by Viralyz.AI at a unique URL assigned to you (e.g., viralyz.ai/store/yourusername). Anyone with the link can view it.
3.3 Instagram Posts, Reels, and Analytics Data
When you connect your Instagram Business account via Facebook OAuth, we access the following data about your content and account performance:
Data Type Purpose Stored?
Post and Reel media IDs
To associate automations with specific posts and optionally display media in your Bio Store
Yes
Post captions and media type
To display your content within the Viralyz dashboard and Bio Store media feed
Yes, cached
Post/Reel performance metrics (likes, comments, reach, impressions, saves)
To power the Video Analysis and Profile Analysis features
Yes, cached
Instagram Business Account ID
To identify your account and route API events
Yes
Instagram Access Token (Facebook OAuth)
To perform API actions on your behalf for analytics, Bio Store, and insights features
Yes, encrypted
Facebook Page data (name, ID, engagement)
To support the Meta OAuth connection and linked account features
Yes, cached
This data is used solely to provide you with the Viralyz features you have enabled. We do not use your post or analytics data for advertising, profiling, or sharing with third parties.
3.4 Instagram Auto DM — Message Data
The Auto DM feature allows you to configure keyword-triggered automated Direct Messages. When you activate this feature, you must complete the separate Instagram OAuth connection described in Section 3.1 (Connection 2). Once connected, Viralyz.AI will send DM replies on your behalf using the Instagram Messaging API when your configured trigger conditions are met.
Data Type How We Handle It
Automated DM reply content
Stored as part of your automation configuration, as entered by you
Recipient's Instagram User ID
Used only to send the automated DM reply. Not stored beyond the automation action.
Trigger conditions and keywords
Stored as part of your automation configuration, as entered by you
Instagram Access Token (Instagram OAuth)
Stored encrypted; used exclusively to send DMs via the Auto DM feature
We do not:
- Read, store, or analyze private messages sent to you by your followers
- Use any messaging data for advertising, profiling, or AI model training
- Access your DM inbox or read any incoming messages
3.5 Competitor Tracker — Instagram Business Discovery API
The Competitor Tracker feature uses Meta's Instagram Business Discovery API to retrieve publicly available profile data about Instagram Business accounts you choose to monitor.
How it works:
- You enter a competitor's Instagram handle in the Competitor Tracker
- We query the Business Discovery API to retrieve that account's publicly available profile information, including follower count, post count, bio, and recent public posts
- This data is displayed within your Viralyz dashboard so you can monitor competitor performance over time
The "Use This Idea" feature:
- Allows you to use a competitor's public post as creative inspiration to generate original content in your own style
- We do not copy, republish, store long-term, or claim ownership of any competitor's content
- The feature is purely a creative reference tool powered by our AI
Important notes:
- We only access publicly available data that is visible to anyone on Instagram
- We do not access private accounts or any non-public data
- All competitor data fetching is performed through Meta's official, approved API
- You can remove any competitor from your tracker at any time, which immediately deletes all stored data for that profile from your account
3.6 What We Do NOT Do With Meta/Instagram Data
We explicitly do not:
- Sell, rent, or transfer your Instagram or Facebook data to any third party
- Read, store, or analyze private messages sent to you by your followers
- Use Instagram or Facebook data to train AI models
- Share Instagram or Facebook data with any analytics or advertising platforms
- Access data from personal (non-Business) Instagram accounts
- Use Facebook Page data for any purpose other than facilitating the required Meta OAuth connection flow
- Display any private or non-public Instagram data on your Bio Store or anywhere else within the platform
3.7 Meta Data Retention
Data Retention Period
Facebook OAuth access token
Deleted immediately upon disconnection or account deletion
Instagram OAuth access token (Auto DM)
Deleted immediately upon Auto DM disconnection or account deletion
Post, reel, and analytics cache
Retained while your account is active; deleted upon account deletion
Facebook Page data cache
Retained while your account is active; deleted upon account deletion
Instagram profile data used in Bio Store
Retained while your account is active; deleted upon account deletion or Bio Store deletion
Bio Store content and configuration
Retained while your account is active; deleted upon account deletion or Bio Store deletion
Automation configurations
Retained while your account is active; deleted upon account deletion
Competitor profile data
Retained while the competitor is in your tracker; deleted when you remove them or delete your account
3.8 Disconnecting Instagram / Facebook
Disconnecting Facebook OAuth (Onboarding Connection):
You can disconnect your Facebook OAuth connection at any time from the Integrations page within Viralyz.AI. Upon disconnection:
- Your Facebook OAuth access token is immediately deleted from our systems
- Bio Store Instagram data sync is deactivated; cached profile data will be removed
- Analytics, insights, and Profile Analysis features will be deactivated
- Competitor Tracker will be deactivated
Disconnecting Instagram OAuth (Auto DM Connection):
You can disconnect your Instagram OAuth connection at any time from the Auto DM settings within Viralyz.AI. Upon disconnection:
- Your Instagram OAuth access token is immediately deleted from our systems
- All active Auto DM automations are immediately deactivated
- Webhook subscriptions are cancelled with Meta
To revoke access independently:
- Go to Facebook Settings → Apps and Websites → Active and remove Viralyz
- Go to Instagram Settings → Apps and Websites and revoke Viralyz access
3.9 Meta Platform Policy Compliance
Our use of Instagram and Facebook data obtained through Meta's APIs strictly complies with:
We do not use Meta platform data in any way that violates these policies.
4. Bio Store — Additional Details
4.1 What Is the Bio Store?
The Bio Store is a free, customizable link-in-bio storefront page created for you within Viralyz.AI. After connecting your Instagram account via Facebook OAuth, you can set up your Bio Store to include:
- Your profile picture and display name (auto-populated from Instagram, editable)
- Custom links (e.g., your website, YouTube, TikTok, products, affiliate links)
- Product or service listings with descriptions and images
- A feed of your recent Instagram posts or reels (optional)
- Social media profile links
- Custom branding, colors, and layout options
4.2 Public Nature of Your Bio Store
Your Bio Store is a publicly accessible web page. Anyone with your Bio Store URL can view it — no account or login is required to view it. You should only include information on your Bio Store that you are comfortable sharing publicly.
4.3 Bio Store Visitor Analytics
We provide you with basic analytics about your Bio Store, including:
- Total visitor count
- Individual link click counts
- General geographic region of visitors (country-level only, not precise location)
- Device type breakdown (mobile vs. desktop)
This analytics data is shown only to you within your Viralyz dashboard. We do not sell or share individual visitor data with any third party.
4.4 Your Control Over Bio Store
You have full control over your Bio Store at all times:
- You can edit, update, or remove any content on your Bio Store at any time
- You can unpublish (make private/inactive) your Bio Store at any time from your dashboard
- You can permanently delete your Bio Store, which will immediately remove the public page and all associated data from our systems
- Deleting your Viralyz.AI account will automatically delete your Bio Store and all associated data
5. Payment Processing
We use Razorpay as our payment processor to handle all subscription payments and billing. When you subscribe to a Viralyz.AI plan:
- Your payment details (card number, CVV, expiry) are entered directly into Razorpay's secure payment interface
- We do not store your raw card details or payment credentials on our servers at any point
- Razorpay processes and stores your payment information in accordance with their own Privacy Policy and PCI-DSS compliance standards
- We receive and store only non-sensitive billing information such as your subscription plan, billing cycle, payment status, and transaction IDs
- For details on how Razorpay handles your data, please review Razorpay's Privacy Policy
6. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Viralyz.AI Service
- Power AI-driven features including script enhancement, caption generation, thumbnail creation, video analysis, profile analysis, and competitor tracking
- Execute Instagram Auto DM automations on your behalf as configured by you, including sending automated DM replies to users who meet your trigger conditions
- Display your Instagram post, reel, and analytics data within your dashboard
- Fetch and display competitor profile data via the Instagram Business Discovery API
- Access and display your connected Facebook Pages and engagement data as required by Meta's connection flow
- Auto-populate and power your Bio Store using your connected Instagram profile data
- Provide you with Bio Store visitor analytics
- Process subscription payments and manage your billing via Razorpay
- Send transactional emails (account confirmation, billing receipts, password reset)
- Send product updates and newsletters (you may opt out at any time)
- Respond to support requests
- Detect and prevent fraud, abuse, or violations of our Terms of Service
- Comply with legal obligations
7. How We Share Your Information
We do not sell your personal data. We may share data in the following limited circumstances:
7.1 Your Bio Store Is Public
Your Bio Store page is publicly accessible. Any content you add to your Bio Store — including your profile picture, name, links, and product listings — is visible to anyone who visits your Bio Store URL. This is intentional and necessary for the Bio Store feature to function as a link-in-bio tool. You are solely responsible for the content you choose to publish on your Bio Store.
7.2 Service Providers
We work with trusted third-party vendors who process data on our behalf, including:
- Razorpay — for subscription payment processing
- Cloud hosting providers — for infrastructure and data storage
- Email delivery services — for transactional and marketing emails
- Analytics providers — for usage analytics (with data anonymized where possible)
All service providers are bound by data processing agreements and may not use your data for their own purposes.
7.3 Legal Requirements
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Reach Digital, our users, or the public.
7.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you before your data is transferred and becomes subject to a different privacy policy.
7.5 With Your Consent
We may share data with third parties when you explicitly consent to such sharing.
8. Data Storage and Security
- All data is stored on secure cloud servers with encryption at rest and in transit (TLS/SSL)
- Instagram and Facebook access tokens are stored with additional encryption beyond standard database encryption
- Bio Store content and configuration data is stored securely and access-controlled so that only you (and our systems) can modify it
- We implement industry-standard security practices including access controls, regular security reviews, and monitoring for unauthorized access
- Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account
9. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account:
- All personal data is deleted within 30 days
- Instagram and Facebook tokens and integrations are deleted immediately
- Your Bio Store is permanently deleted and the public URL is deactivated immediately
- Billing records may be retained for up to 7 years as required by financial regulations
- Anonymized, aggregated analytics data may be retained indefinitely
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a machine-readable format
- Objection: Object to certain types of processing (e.g., marketing emails)
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent
To exercise any of these rights, contact us at support@viralyz.ai. We will respond within 30 days.
GDPR (European Users)
If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR). Our legal bases for processing your data include contract performance, legitimate interests, and your consent. You may also lodge a complaint with your local data protection authority.
CCPA (California Users)
If you are a California resident, you have the right to know what personal data we collect, to request deletion, and to opt out of the sale of personal data. We do not sell personal data.
11. Children's Privacy
Viralyz.AI is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately at support@viralyz.ai and we will delete it promptly.
12. Third-Party Links and Services
Our Service may contain links to third-party websites (e.g., Instagram, Facebook/Meta). This Privacy Policy does not apply to those external sites. Additionally, your Bio Store may contain links to third-party websites or services that you have added. We are not responsible for the privacy practices or content of any third-party sites linked from your Bio Store. We encourage you to review the privacy policies of any third-party services you use or link to.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via email or an in-app notification
Your continued use of Viralyz.AI after changes become effective constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Reach Digital Operating: Viralyz.AI Email: support@viralyz.ai Website: https://viralyz.ai Contact Page: https://viralyz.ai/contact-us
This Privacy Policy was written to comply with applicable data protection laws including GDPR, CCPA, and Meta's Platform Terms, Developer Policies, and Data Use Policy.