Vyral AI · Last Updated: 4 June 2026 · Effective Date: 1 January 2025

This Privacy Policy is fully compliant with:

• India's Digital Personal Data Protection Act, 2023 (DPDP Act)
• European Union General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA / CPRA)
• India IT Rules, 2011 (Reasonable Security Practices)

Vyral AI ("we", "us", "our") is operated by Urbee Home Services Pvt Ltd, registered in India. We are the Data Fiduciary under the DPDP Act 2023 and the Data Controller under GDPR.

Contact: Urbeehelpcentre@gmail.com· 

CategoryExamplesPurposeAccount DataName, email, phone, business nameAccount creation & authenticationContent DataPrompts, generated images/videos, captionsAI content generation & personalizationUsage DataFeatures used, generation counts, timestampsService improvement, billing limitsDevice DataDevice model, OS, app version, IPSecurity, fraud prevention, debuggingPayment DataTransaction ID only (no card details)Subscription billing (via Razorpay)Social Platform DataOAuth tokens (encrypted)Publishing on your behalfOptional DataBrand logo, voice recordings, photosBrand personalization

We do not intentionally collect: biometric data, health data, financial account numbers, religious/political beliefs, or sexual orientation. Voice recordings are processed locally on your device and only converted to text — original audio is never stored on our servers.

• Consent: For marketing emails, personalized recommendations
• Contract: To provide the services you signed up for
• Legitimate interest: Fraud prevention, security, analytics
• Legal obligation: Tax, accounting, law enforcement requests

Under DPDP Act 2023, GDPR, and CCPA, you have these rights — exercisable from Settings → Privacy & Security:

• Right to Access: Get a copy of all data we hold about you (response within 30 days)
• Right to Correction: Fix any incorrect data
• Right to Erasure ("Right to be Forgotten"): Delete your account and all associated data
• Right to Portability: Export your data in machine-readable JSON format
• Right to Withdraw Consent: Revoke any previously given consent
• Right to Object: Object to processing for direct marketing
• Right to Restrict Processing: Pause processing while disputes are resolved
• Right to Opt-Out of Sale: We never sell your data, but you can opt out anyway (CCPA)
• Right to Non-Discrimination: We will not deny service or charge more for exercising rights
• Right to Grievance Redressal: Contact our DPO at dpo@vyral.ai or file a complaint with the Data Protection Board of India

Data TypeRetention PeriodActive account dataFor the lifetime of your accountAfter account deletionDeleted within 30 days; backups purged in 90 daysPayment records7 years (tax compliance under Indian law)Generated contentUntil you delete it or close your accountAnonymized analyticsIndefinitely (cannot be re-identified)

We implement reasonable security practices as required by IT Rules 2011 and ISO 27001 standards:

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Hashed passwords (bcrypt with salt)
• Two-Factor Authentication (2FA) available
• Regular security audits and penetration testing
• Restricted employee access (need-to-know basis)
• Active session monitoring
• Automatic logout after inactivity

In the event of a data breach affecting your personal data, we will notify the Data Protection Board of India within 72 hours and affected users without undue delay, as required by DPDP Act 2023 and GDPR.

We do not sell, rent, or trade your personal data. We share data only with:

• Service Providers: Firebase (Google), Razorpay (payments), AI providers (OpenAI/Stability) — all under Data Processing Agreements compliant with DPDP/GDPR
• Social Platforms: Only the content you explicitly publish, via your authorized OAuth tokens
• Law Enforcement: Only when legally required by valid court order or government request
• Business Transfers: If acquired, your data transfers under the same protections (we will notify you 30 days in advance)

Your data is primarily stored in India (Mumbai region). Some processing happens in EU and US data centers operated by Google Firebase. All international transfers use:

• Standard Contractual Clauses (GDPR Art. 46)
• Country-specific adequacy decisions where available
• Compliance with India's data localization requirements for financial data

The Vyral AI mobile app does not use third-party tracking cookies. We use:

• Essential storage: To keep you logged in (LocalStorage)
• Analytics: Anonymous usage statistics (Firebase Analytics)
• No advertising trackers

Vyral AI is not intended for users under 18 years old. We do not knowingly collect data from minors. If a parent/guardian believes their child has provided us data, contact urbeehelpcentre@gmail.com for immediate deletion.

Vyral AI uses artificial intelligence to generate content. Important disclosures:

• Your prompts and uploads are sent to AI providers (OpenAI, etc.) for processing
• AI providers operate under their own privacy policies and data processing agreements
• Generated content may resemble training data but is not exact reproduction
• You retain ownership of all content you generate
• We do not use your data to train our AI models without explicit consent

We will notify you of material changes via email and in-app notification at least 30 days before changes take effect. Continued use after the effective date means acceptance.

For privacy questions or to exercise your rights:

• Email: urbeehelpcentre@gmail.com
• Response time: Within 7 days for acknowledgment, 30 days for resolution

If unsatisfied, you may file a complaint with:

• India: Data Protection Board of India, MeitY, New Delhi

 Urbee Home Services Pvt Ltd. All rights reserved.