Privacy Policy

Viralyzo (the "Service", "we", "us") is a LinkedIn-first AI content workspace that helps creators write, schedule and analyse posts. This Privacy Policy explains how we handle personal information when you use the Service at viralyzo.com and related domains.

• Account data — your name, email, password (hashed with bcrypt), profile picture (only if you sign in with Google or LinkedIn).
• Content you create — drafts, scheduled posts, writing samples, generated text and images. These belong to you. We use them only to power the Service for you.
• LinkedIn data — if you connect your LinkedIn profile we store your member URN, an OAuth access token, and (only if you publish via Viralyzo) the URN of the post we created so we can read its engagement back.
• Billing data — handled entirely by Stripe. We never see your card number; we only store the plan you bought and when it expires.
• Usage logs — basic technical logs (IP, user agent, timestamps) for security and abuse prevention. These are auto-purged after 30 days.

• Your LinkedIn password (we use OAuth — LinkedIn never shares it).
• The content of LinkedIn posts you did NOT create via Viralyzo.
• Your contact list, calendar or any other third-party data we don't explicitly ask for.
• Any browsing data outside of our domains.

When you generate a post, hook, rewrite, carousel, image or Writing DNA, your inputs are sent to our AI providers (Anthropic Claude, OpenAI, Google Gemini via the Emergent Universal Key infrastructure) under enterprise terms. Your content is not used to train third-party foundation models. We do not feed your data back to public training corpora.

Your Writing DNA — a structured summary of your voice — is stored in our database against your account so every future generation sounds like you. You can delete it at any time from Settings → Writing DNA.

We share data only with the sub-processors required to deliver the Service:

• Anthropic / OpenAI / Google — AI model providers (text + image generation).
• Stripe — payment processing.
• LinkedIn — only the posts you explicitly publish through us.
• MongoDB Atlas — primary database.

We will never sell, rent, or barter your personal data to third parties.

We keep your account data for as long as you have an active account. If you delete your account, all your drafts, samples, Writing DNA, and LinkedIn tokens are permanently deleted within 30 days. Backups expire on a 60-day rolling window.

• Access — download all your data via Settings → General.
• Correct — edit your profile and writing samples any time.
• Delete — request full account deletion at privacy@viralyzo.com.
• Object / restrict — opt out of any optional processing.
• Portability — your content is exportable as JSON on request.

Passwords are hashed with bcrypt. Sessions use signed JWTs and httpOnly cookies. Database connections use TLS. Webhooks are signature-verified. We monitor for anomalous access and respond to incidents within 24 hours.

We use one essential httpOnly cookie (session_token) when you sign in with Google. No third-party tracking cookies. No advertising pixels.

Viralyzo is not directed at children under 16. We do not knowingly collect data from minors.

If we change this policy in a way that affects your rights, we will email you at least 14 days before it takes effect.

Questions? Reach us at privacy@viralyzo.com.