Privacy Policy

Last updated April 18, 2026 v3.2

Your privacy matters to us. This policy explains what we collect, why, and the choices you have. It is provided as template copy — replace it with your own before production.

1. Information we collect

We collect information you provide directly, information generated automatically as you use the Service, and information from third parties.

1.1 Information you provide

Account details such as your name, email address and password, billing information, and any content you upload to the Service.

1.2 Information collected automatically

Device and log data, including IP address, browser type, pages viewed, and timestamps, collected to operate and secure the Service.

2. How we use it

We use the information we collect to:

  • provide, maintain and improve the Service;
  • process transactions and send related information;
  • detect, prevent and address fraud and security issues;
  • communicate with you about updates and support;
  • comply with legal obligations.

3. Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember your preferences and understand how the Service is used. You can control non-essential cookies through your browser or our cookie banner. Disabling essential cookies may impair functionality.

4. Data sharing

We do not sell your personal data. We share information only with service providers who process it on our behalf under strict contractual safeguards, with your consent, or when required by law. A current list of subprocessors is available on request.

5. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service. After account closure we delete or anonymize data within 90 days, except where a longer period is required for legal, accounting or security purposes.

6. Your rights

Depending on your location, you may have the right to access, correct, delete or port your personal data, and to object to or restrict certain processing.

To exercise these rights, contact us at privacy@vireo.io. We will respond within the time required by applicable law, typically within 30 days.

7. International transfers

We may transfer and process your data in countries other than your own. When we do, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data receives an adequate level of protection.

8. Children's privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or through the Service and update the "Last updated" date above. Please review it periodically.

10. Contact us

Questions about this policy or your data? Reach our privacy team:

privacy@vireo.io

Vireo, Inc. · Data Protection Officer · San Francisco, CA