Privacy Policy

Last updated: 2026-05-13

This Privacy Policy describes how VYRA Data Inc., Dartmouth, Nova Scotia, Canada (“VYRA”) collects, uses, and discloses information when you use VYRA Insights (the “Service”).

Information we collect

  • Account information. Email, name, a one-way hashed password (for email/password sign-in), and your Apple subject identifier (for Sign in with Apple).
  • OAuth tokens. Refresh / access tokens for the third-party data sources you choose to connect (Google Analytics, Search Console, YouTube, Meta Ads, Instagram, Facebook Pages). Tokens are encrypted at rest.
  • Connected-platform data. Analytics metrics retrieved on your behalf and displayed in your dashboard. Never sold, never shared.
  • Product telemetry. Page views, feature usage, and error reports (Sentry, PostHog). Aggregated only — never tied to individual third-party identifiers.
  • Billing. When you subscribe to a paid plan, billing details (cardholder name, payment method, billing email) are collected and stored by our payment processor, Stripe. VYRA never sees full card numbers.

How we use information

  • To authenticate you and keep your account secure.
  • To fetch and display the analytics you connect.
  • To send transactional email (verification codes, invites, billing notices).
  • To improve the Service (aggregated telemetry only).

Third-party processors

  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Anthropic — the Vyn AI assistant is powered by Claude. Messages you exchange with Vyn are sent to Anthropic to generate replies. Anthropic does not train its models on your messages.
  • Sentry — error monitoring (server-side and client-side).
  • PostHog — product analytics (aggregated event stream).
  • Google / Meta / Apple — only for OAuth and Sign in with Apple flows you initiate, and only for the scopes you approve at consent time.

GDPR rights

You may export all of your data at any time via GET /api/user/export(also exposed as “Download my data” in Settings) or request hard deletion via DELETE /api/user/account (the in-app “Delete account” button). See Data Deletion Instructions for details. Deletion is immediate and cascading.

Retention

Account data: kept while the account is active. Subscription cancellation retains data for 30 days in case of resubscription, then hard-deletes. Aggregated, de-identified telemetry may be retained indefinitely.

Apple Sign In private email relay

If you sign in with Apple, Apple may issue a private relay email alias (ending in @privaterelay.appleid.com). We treat this alias as your canonical email and do not attempt to resolve the real address.

Governing law

This Privacy Policy is governed by the laws of the Province of Nova Scotia and the federal laws of Canada applicable therein.

Contact

Privacy questions: support@vyradata.com (subject: “Privacy Inquiry”).