Legal

Privacy Policy

Last updated: October 2026

This Privacy Policy explains how VYRL (“VYRL”, “we”, “us”) collects, uses, shares and protects information in connection with our customer-growth platform and related services.

Information we collect

We collect information to operate the VYRL platform and the managed services we provide to businesses.

Business account information, such as business name, contact details, industry and account settings.
Customer records created by businesses using VYRL, such as name, phone number, email address, source, SMS consent status, VIP status, tags, notes and activity history.
Activity and engagement data, such as NFC taps, QR scans, page visits, button clicks, bookings intent, reviews and referrals.
Messaging data, including two-way SMS content and metadata, where messaging is enabled and consent has been obtained.
Technical and usage data, such as device and browser information, IP address and interactions with the platform.

Customer information is only stored when intentionally submitted

An NFC tap or QR scan does not, by itself, collect or store a person’s identity. A customer’s contact information is only saved to a business’s CRM when the customer intentionally submits it — for example by joining a VIP list, booking, leaving a review, or sending a message. We record page visits and button clicks as anonymous activity until a customer chooses to share their details.

SMS consent & opt-out

Where two-way SMS is enabled, messages are only sent to customers who have provided appropriate consent to receive them. Message frequency varies based on a business’s configured rules, and message and data rates may apply.

Customers can opt out of SMS at any time by replying STOP to any message.
Customers can reply HELP for assistance or to contact the business.
Opt-out requests are honored and recorded, and we maintain consent status within the CRM.

How we use information

We use the information described above to:

Provide, operate, maintain and improve the VYRL platform and our managed services.
Enable businesses to capture, organize and engage their own customers.
Detect revenue opportunities, generate recommended actions and carry out approved, consent-based follow-ups.
Send transactional and, where consented, marketing or engagement messages on behalf of businesses.
Measure performance, produce analytics, and secure and troubleshoot the platform.
Comply with legal obligations and enforce our terms.

How information is shared

We do not sell personal information. We share information only as needed to operate the platform, including:

With the business that collected a given customer record — each business only has access to its own customers and information.
With service providers and sub-processors who help us deliver the platform, such as hosting, SMS delivery and analytics, under appropriate agreements.
When required by law, legal process, or to protect the rights, safety and security of VYRL, our clients or others.
In connection with a business transfer, such as a merger or acquisition, subject to this Policy.

Data security

We use administrative, technical and physical safeguards designed to protect information against unauthorized access, loss, misuse or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data retention

We retain information for as long as a business account is active and as needed to provide our services, comply with legal obligations, resolve disputes and enforce our agreements. Businesses are responsible for the customer data they collect and may request deletion of records in accordance with applicable law.

Your choices

Customers can opt out of SMS as described above. Depending on your location, you may have rights to access, correct, or delete personal information, or to object to or restrict certain processing. Requests concerning data a business collected through VYRL should be directed to that business; we will assist our clients in responding to such requests.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

Contact us

Questions about this Privacy Policy or our data practices can be directed to our team at privacy@vyrlhq.com. You can also reach us through our contact page.