01
Who we are
VYRNA is operated by Lilyane Technologies Inc., a corporation incorporated in Ontario, Canada. For any privacy-related questions, contact us at hello@vyrna.ai.
Privacy Officer
In accordance with applicable Canadian privacy laws, including Quebec's Law 25, Lilyane Technologies Inc. has designated a person responsible for the protection of personal information. Privacy inquiries, access requests, correction requests, and deletion requests may be sent to hello@vyrna.ai.
02
What we collect
When you submit a form on vyrna.ai (such as an access request form), we collect:
- Your work email address
- Your written responses
- The date and time of submission
If you consent to analytics cookies, we also collect anonymized website usage information through Google Analytics 4, including:
- Pages visited
- Session duration
- Device type
- Country and city-level location
We do not intentionally collect personally identifiable analytics data.
03
Connected accounts and marketing data
VYRNA allows you to connect third-party platforms through secure OAuth 2.0 authorization, including:
- Google Ads
- Google Analytics 4
- Meta Ads
- LinkedIn Ads
- Stripe
You control which accounts are connected and may disconnect them at any time.
What we access
VYRNA accesses reporting and performance information in read-only mode. For example, Google Ads data may include spend, impressions, clicks, conversions, CTR, CPC, and campaign-level reporting metrics.
VYRNA never creates, edits, pauses, deletes, or otherwise modifies campaigns, ads, keywords, audiences, budgets, or account settings.
Why we access it
Only to generate reporting, analysis, insights, and recommendations inside your VYRNA workspace. We do not use connected-account data for advertising, retargeting, profiling, data brokerage, or automated decision-making.
How we store it
Customer data is logically isolated within individual VYRNA workspaces. Access controls are implemented to prevent cross-customer access.
Your control
You may disconnect a connected account at any time. Disconnecting an account immediately revokes VYRNA's future access to that account. You may also request deletion of all stored data at any time.
Google API Services User Data
VYRNA's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
VYRNA does not use Google user data to develop, improve, or train generalized artificial intelligence models, machine learning models, or foundation models.
04
Why we collect data
We collect information to:
- Evaluate and respond to access requests
- Contact users regarding VYRNA access
- Deliver the VYRNA analysis service
- Generate reports, insights, and recommendations
- Understand how visitors interact with our website (with consent)
We do not use personal information for advertising purposes.
05
Who we share it with
We use a limited number of trusted service providers to operate VYRNA.
| Provider | Purpose |
|---|---|
| Resend | Email delivery |
| Supabase | Database and backend infrastructure |
| Nango | OAuth authorization and credential management |
| Anthropic | AI-powered analysis generation |
| Google Analytics 4 | Website analytics (with consent) |
| Vercel | Hosting and infrastructure |
Resend — used to route email submissions and transactional emails.
Supabase — used to store customer workspace data and application data securely.
Nango — handles OAuth authorization flows and token management. Nango stores authentication credentials but does not store marketing performance data retrieved by VYRNA.
Anthropic — used to generate written analyses. Computed metrics, business context, and instructions may be sent to Anthropic's API solely to generate outputs requested by customers. Anthropic does not use submitted data to train its models.
Google Analytics 4 — used only when analytics cookies are accepted.
Vercel — provides hosting and infrastructure services.
We do not sell, rent, or otherwise share customer data with advertisers, data brokers, or unrelated third parties.
06
AI and your data
Your data is never used to train AI models. Not ours. Not Anthropic's. Not any third party's.
This applies to:
- Your email address
- Your form responses
- Your brand information
- Your connected-account data
- Any analysis generated through VYRNA
When AI providers are used, they are used solely to generate outputs requested by you under contractual terms that prohibit training on customer data. This is a core product commitment.
07
Data hosting and international transfers
VYRNA stores customer data using cloud infrastructure providers. Data is hosted in Canada whenever reasonably possible.
Some service providers may process data in the United States or other jurisdictions where privacy laws may differ from those in Canada. When such transfers occur, we rely on contractual and technical safeguards designed to protect customer information.
08
How long we keep it
Access request data — retained for up to 24 months unless deletion is requested sooner.
Connected-account data — retained while the account remains connected and while the customer maintains an active workspace.
Analytics data — retained according to Google Analytics retention settings.
Cookie preferences — stored for up to 365 days.
09
Data deletion
You may request deletion of your personal information or connected-account data at any time. Upon verification of your request, data will be permanently deleted within 30 days unless retention is required by law.
Deletion requests may be sent to hello@vyrna.ai.
10
Your rights
Under Quebec's Law 25 and Canada's PIPEDA, you may:
- Access your personal information
- Correct inaccurate information
- Request deletion of information
- Withdraw consent
- Request information about how your data is processed
- File a complaint with the Commission d'accès à l'information du Québec (CAI)
We respond to privacy requests within 30 days.
11
Cookies
We use two categories of cookies.
Essential cookies — required for core website functionality. These cannot be disabled.
Analytics cookies — Google Analytics 4 cookies used only after explicit consent. You may withdraw consent at any time by clearing browser cookies and revisiting the website.
12
Security
VYRNA uses industry-standard safeguards designed to protect customer information. These measures include:
- HTTPS/TLS encryption in transit
- Encryption at rest where supported by providers
- Authentication controls
- Access restrictions based on operational need
- Secure OAuth authorization flows
- Monitoring and logging for operational security
No system can guarantee absolute security, but we continuously work to protect customer information using reasonable technical and organizational measures.
13
Changes to this policy
We may update this Privacy Policy as VYRNA evolves. When changes are made, the "Last updated" date will be revised. Material changes may be communicated to customers by email.
Questions about your privacy?
Contact us at hello@vyrna.ai. We respond to all privacy-related requests within 30 days.
Lilyane Technologies Inc. · Toronto, Ontario, Canada