Privacy Policy

1. Who we are

Qlyro (“we”, “us”, “our”) provides an AI-powered social-media command center. This Privacy Policy explains how we collect, use, share, and protect your information when you use Qlyro (the “Service”).

2. Data we collect

Account data: name, email, password hash, organisation and role. Social-platform data: tokens, profile metadata, posts, comments, messages, and analytics for accounts you connect. Content you create: drafts, scheduled posts, media uploads, replies, automations, broadcasts. Usage data: pages visited, features used, device and browser info, IP address. Cookies and similar technologies for session management and analytics.

3. How we use your data

To provide and operate the Service; to publish, schedule, and deliver content on your behalf to platforms you connect; to power AI features (copy generation, insights, automations); to send transactional emails (security, billing, system notifications); to improve, secure, and debug the Service; and to comply with legal obligations.

4. Legal basis

We process personal data on the legal bases of contract performance (to deliver the Service you requested), legitimate interests (to improve and secure the Service), consent (where required, e.g. marketing emails), and legal obligation.

5. Sharing & sub-processors

We share data with infrastructure providers strictly to run the Service: Cloudflare (hosting and edge), Supabase (managed Postgres, Mumbai region), Cloudflare R2 (media storage), and AI providers used to power copilot features. We never sell your personal data.

6. Third-party platforms

When you connect a social account (Facebook, Instagram, LinkedIn, X, Threads, Pinterest, YouTube, Google Business Profile, WhatsApp), we receive and store the tokens and data those platforms expose, scoped to the permissions you grant. You can revoke access at any time from your account settings or the platform itself.

7. Google API Services User Data Policy

Qlyro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Google Workspace user data is accessed only to provide the functionality explicitly requested by the user.
• Qlyro does not use Google Workspace user data to train, improve, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) models.
• Google Workspace user data is never sold, shared for advertising purposes, or used for user profiling.
• All Google user data is processed solely to provide the requested services within the Qlyro platform.

8. Storage & retention

Account, content, and analytics data are stored in our managed database in Mumbai (ap-south-1). Media is stored on Cloudflare R2. We retain data for as long as your account is active. On account deletion, we delete or anonymise personal data within 30 days, except where retention is required by law.

9. Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted, logged, and reviewed. Secrets live in Cloudflare Workers secrets, not in source code. No system is perfectly secure; we cannot guarantee absolute security but we work hard to protect your data.

10. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data; to object to or restrict processing; and to withdraw consent. To exercise any of these rights, email care@qlyro.com.

11. Cookies

We use strictly necessary cookies for authentication and session management, and limited analytics cookies to understand how the Service is used. You can control cookies through your browser settings.

12. International transfers

Your data is primarily processed in India. Some sub-processors (e.g. Cloudflare, AI providers) may process data in other regions under appropriate safeguards.

13. Children

Qlyro is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact care@qlyro.com and we will delete it.

14. Changes

We may update this Privacy Policy from time to time. Material changes will be notified by posting an updated version on this page with a new effective date.

15. Contact

Questions or privacy requests? Email care@qlyro.com.