Privacy Policy

What Vyrro AI does

Vyrro AI lets you connect an AI assistant such as Claude or ChatGPT, ask it to build a small app, and deploy that app to a public Vyrro AI URL with persistent shared state.

Vyrro AI is operated by Vyrro AI, Inc., a Delaware corporation.

Vyrro AI's role

Vyrro AI is the data controller for the account and operational data described below. When you build an app that collects personal data from its own visitors — for example form entries, RSVPs, or poll votes — you decide what to collect and why, so for that data you are the controller and are responsible for having a lawful basis and giving the people who use your app appropriate notice. Vyrro AI stores and serves that data for you as part of operating the service and does not use it for its own purposes.

Vyrro AI, Inc. does not currently offer signed data processing agreements, SOC 2 reports, or formal compliance certifications. This policy describes a good-faith privacy process, not an audited or certified compliance program.

Information Vyrro AI collects

• Account information from Google sign-in, such as your name, email address, profile image, and Google account identifier.
• Generated app metadata, such as app name, description, slug, status, deployment history, and capability schema.
• Uploaded deployment files, such as HTML, CSS, JavaScript, and other assets your AI assistant asks Vyrro AI to deploy.
• Data stored inside generated apps, such as RSVP responses, poll votes, score entries, list items, or form submissions.
• Operational data, such as OAuth session records, audit events, request IDs, timestamps, status codes, and error details.
• Basic technical data your browser or AI client sends with requests, such as IP address, user agent, and request headers.
• Billing data for paid plans, such as your subscription status, plan, and the customer and subscription identifiers from our payment processor. Vyrro AI does not receive or store your full payment card number.

How Vyrro AI uses information

Vyrro AI uses this information to authenticate you, create and deploy apps, keep app data available, show your apps in the dashboard, process payments and manage subscriptions for paid plans, prevent abuse, troubleshoot errors, and maintain service security.

Legal bases for processing

Where data protection laws such as the GDPR apply, Vyrro AI relies on the following legal bases to process your personal data:

• Performance of the service you request — signing you in and operating, creating, deploying, and serving your apps and keeping their data available.
• Legitimate interests — keeping Vyrro AI and its users secure, preventing abuse, troubleshooting problems, and improving the service, weighed against your rights and freedoms.
• Consent — where Vyrro AI specifically asks for it. Where processing relies on consent, you can withdraw it at any time without affecting processing already carried out.

App visibility

Generated apps are public by link by default — anyone with a generated app URL can open the app and may be able to read or write data depending on how it was built. You can also make an app private, shared only with people you invite, who sign in with a magic link. Vyrro AI is still an early product, so do not put regulated, confidential, or highly sensitive information into generated apps.

Vendors and subprocessors

Vyrro AI relies on a small number of vendors to operate, and shares only the data each one needs:

• Google — sign-in and identity (your Google profile and account identifier).
• Cloudflare — hosting, compute, storage, networking, and abuse-prevention tooling for Vyrro AI and the apps you deploy.
• Stripe — payment processing and subscription billing for paid plans (your billing email, subscription details, and the card details you enter with Stripe). Vyrro AI does not receive or store your full card number; see Stripe's Privacy Policy.

When you use Vyrro AI from an AI client such as Claude or ChatGPT, that client also processes your conversation and tool calls according to its own terms and privacy policy. Vyrro AI relies on Google's and Cloudflare's own data protection terms as their customer.

International data transfers

Vyrro AI runs on Google's and Cloudflare's global infrastructure, so your data may be processed in countries other than the one you live in. Those providers offer their own safeguards for international transfers, such as standard contractual clauses, which Vyrro AI relies on as their customer.

Retention

Vyrro AI keeps personal data only as long as it is needed for the purposes above:

• Account and identity data — while your account is active; removed when your account is deleted.
• App, deployment, and app collection data — until you delete the app, or until your account is deleted.
• Short-lived operational records, such as sign-in, upload, and idempotency tokens — automatically expire within minutes to 24 hours.
• Audit and security logs — kept for a limited period for security, abuse prevention, and legal compliance.
• Billing records for paid plans — kept as long as needed to provide the paid service and to meet financial, tax, and legal obligations.
• Deployment files and snapshots — kept while needed to serve or manage the app, and removed when the app is deleted except for limited records retained for security, abuse prevention, or legal compliance.

Deleting an app removes the live app resources Vyrro AI controls, including its stored data. Vyrro AI may keep limited records where needed for security, reliability, abuse prevention, or legal compliance.

Delaware privacy requests

Where the Delaware Personal Data Privacy Act applies, verified consumers may request access, correction, deletion, or a portable copy of covered personal data and may appeal a denied request by replying to our response with the subject “Privacy Appeal.” We aim to respond within 45 days and may extend once by another 45 days when reasonably necessary, with notice. We do not sell personal data or use it for targeted advertising or qualifying profiling.

Delaware privacy requests

Where the Delaware Personal Data Privacy Act applies, verified consumers may request access, correction, deletion, or a portable copy of covered personal data and may appeal a denied request by replying to our response with the subject “Privacy Appeal.” We aim to respond within 45 days and may extend once by another 45 days when reasonably necessary, with notice. We do not sell personal data or use it for targeted advertising or qualifying profiling.

Delaware privacy requests

Where the Delaware Personal Data Privacy Act applies, verified consumers may request access, correction, deletion, or a portable copy of covered personal data and may appeal a denied request by replying to our response with the subject “Privacy Appeal.” We aim to respond within 45 days and may extend once by another 45 days when reasonably necessary, with notice. We do not sell personal data or use it for targeted advertising or qualifying profiling.

Delaware privacy requests

Where the Delaware Personal Data Privacy Act applies, verified consumers may request access, correction, deletion, or a portable copy of covered personal data and may appeal a denied request by replying to our response with the subject “Privacy Appeal.” We aim to respond within 45 days and may extend once by another 45 days when reasonably necessary, with notice. We do not sell personal data or use it for targeted advertising or qualifying profiling.

Your privacy rights

Depending on where you live, you may have rights over your personal data, including the right to:

• access the personal data Vyrro AI holds about you and receive a copy;
• export your data (data portability);
• correct inaccurate data;
• delete your data (erasure);
• object to or restrict certain processing;
• withdraw consent where processing is based on consent; and
• complain to your local data protection authority.

You can delete individual apps you own at any time from the Vyrro AI dashboard. Vyrro AI does not currently offer self-serve account deletion: to delete your whole account, or to access or export your data, email Vyrro AI, Inc. at [email protected] and Vyrro AI will respond within 30 days. On such a request, Vyrro AI will delete or anonymize your account data and delete the apps and data it controls, except limited records it must retain for security, abuse prevention, or legal compliance.

You can also disconnect Vyrro AI from the AI client where you enabled it, and choose not to include sensitive information in public generated apps. Vyrro AI will not treat you differently for exercising these rights.

Security

Vyrro AI uses OAuth for account connection, HTTPS for public endpoints, per-app storage isolation for backed apps, and an Vyrro AI-authored generation engine for server-side behavior. No internet service can guarantee perfect security, but Vyrro AI is designed to keep generated frontend code separate from Vyrro AI's backend infrastructure.

Children

Vyrro AI is not directed to children. You must be old enough to consent to use an online service in your country — generally at least 16 in the EU and EEA — to use Vyrro AI.

Contact

For privacy questions or to make a data request, contact Vyrro AI, Inc. at [email protected].