Privacy Policy

1. Introduction

Welcome to VyayOS ("we," "us," "our"). We respect your privacy and are committed to protecting the personal and business data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website atvyayos.comand use our Return on Ad Spend (ROAS) optimization software-as-a-service application (collectively, the "Service").

VyayOS provides B2B (business-to-business) services. In the context of global data protection laws (such as the GDPR or CCPA), when we process data regarding your end-customers via third-party integrations (like Shopify), you are the Data Controller, and VyayOS acts strictly as your Data Processor or Service Provider.

2. Information We Collect

To provide our optimization and automation services, we collect information across three main categories:

3. How We Use Your Information

We do not sell your data. We use the information we collect strictly for the following business purposes:

• Providing the Service: To ingest data, calculate ROAS, generate reporting dashboards, and automatically or manually tweak ad campaigns, budgets, and creative in your Meta ad accounts.
• App Authentication: To securely log you in via Facebook Login and verify your Shopify store identity.
• Service Improvement: To train and improve our internal optimization algorithms and automation models. (Customer Data is aggregated and anonymized before being used for generalized model training).
• Communication: To send you technical notices, API disconnection alerts, billing receipts, and security updates.
• Compliance: To enforce our Terms of Service and comply with legal obligations.

4. How We Share Your Information

We only share your data with third parties in the following limited circumstances:

• Service Providers (Sub-processors): We share data with trusted vendors that power our infrastructure, such as cloud hosting providers (e.g., AWS, Google Cloud), database providers, and payment processors. These vendors are bound by strict confidentiality agreements.
• Third-Party Platforms: We transmit data back to Meta and Shopify to execute the automated ad optimizations and sync conversions as directed by you.
• Legal & Safety: We may disclose data if required by a subpoena, court order, or legal process, or to protect the rights, property, and safety of VyayOS, our users, or the public.
• Business Transfers: If VyayOS is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Third-Party Platform Compliance (Meta & Shopify)

Because our Service integrates closely with Meta and Shopify, we adhere to their strict developer and privacy guidelines:

• Meta App Review & API Policies: We only request the minimum Graph API scopes necessary to operate our Service. You may revoke VyayOS's access to your Meta account at any time via your Facebook Business Integrations settings.
• Shopify Mandatory Webhooks: We fully comply with Shopify's data privacy requirements. Our systems are programmed to automatically receive and process Shopify's customers/data_request, customers/redact, and shop/redact webhooks. When a data deletion payload is received from Shopify, we process it within the required timeframes.

6. Data Retention

We retain your Account Information and Customer Data for as long as your VyayOS account is active. If you cancel your subscription or disconnect your platforms, we will retain your data for a grace period of 48 hours to allow for account recovery. After this period, or upon a verified deletion request, your imported Shopify and Meta data will be permanently deleted or irreversibly anonymized from our active databases.

7. Data Deletion and Your Rights

Depending on your jurisdiction, you have the right to access, correct, or delete your personal data.

How to Delete Your Data:

• From the Dashboard: You can delete your connected Meta and Shopify integrations directly from the Connections page in your VyayOS dashboard. Removing a connection will erase the associated data within 48 hours.
• Meta/Facebook: You can also revoke our app's access through your Facebook Business Integrations settings.
• Shopify: Uninstalling the VyayOS app from your Shopify Admin dashboard automatically triggers a shop/redact webhook, prompting our servers to erase your store data within 48 hours.
• Direct Requests: You can email us at[email protected]to request a full export or deletion of your VyayOS account data. We will respond to all requests within 48 hours.

8. Data Security

We implement industry-standard technical and organizational measures to secure your data, including encryption in transit (HTTPS/TLS) and at rest, secure API key management, and strict access controls for our employees. However, no internet transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

VyayOS is headquartered in Bangalore, Karnataka, India. Your data, including data originating from the European Economic Area (EEA) or the UK, may be transferred to, stored, and processed in France (or other locations as our infrastructure evolves). By using the Service, you consent to this transfer. Where required, we utilize standard contractual clauses or other approved data transfer mechanisms.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. If the changes significantly impact your rights, we will notify you via email or a prominent notice in the VyayOS dashboard.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer at: