Last updated 27 July 2026
An account needs an email address and a password. If you tell us your brand or agency name we store that too.
Brand context you enter, meaning your pillars, audience, voice, content guidelines and off limits topics, is stored so the product can judge creators against it. It is yours, it is not shared, and it is not used to train any model.
Campaign briefs you write and the runs they produce are stored so you can return to them.
Virlia analyses public content: videos, titles, descriptions, captions, public engagement counts and public comments from YouTube, TikTok and Instagram. We do not access private accounts and we do not log in as you to any social platform.
Where a creator has published a business email address in a public bio or video description, we extract it so you can contact them. We never guess an address from a name pattern. If nothing was published, the field stays empty.
Creators have not signed up for Virlia. We treat their data as what it is, public professional information, and we do not sell it, enrich it with private sources, or build profiles beyond what the public content shows.
A creator can ask us to remove their data. Contact us and we will delete their records and stop processing their content.
Supabase hosts accounts and billing records. Stripe processes payments; we never see or store your card number. Vercel serves the site. OpenRouter runs the models that analyse video frames and transcripts. Apify retrieves public TikTok and Instagram content. PostHog and Vercel Web Analytics measure how the site is used.
Video frames, transcripts and comments are sent to model providers to produce the analysis. Your brand context is included so judgements are made against it. We do not send your data to anyone for advertising.
Account and billing records are kept while your account is open and for as long afterwards as tax rules require.
Runs, analyses and cached video data are kept while your account is open. Delete your account and we delete them.
We use PostHog to see where people get stuck: which pages they arrive on, whether a signup completes, whether a run finishes. It records a named list of steps rather than capturing every click, so it collects less than an analytics tool normally would.
PostHog also records sessions on the marketing pages, which is a replay of how a page was used. Every input and every piece of text is masked before it leaves your browser, so a recording shows layout and interaction, not content. Recording is switched off entirely inside the workspace, so campaign briefs, brand notes and shortlists are never filmed.
Analytics requests are served from our own domain rather than a third party address. That is so they are not blocked, not so they are harder to see: you can block them in your browser and the product works exactly the same.
We set a session cookie so you stay logged in. PostHog sets a cookie to tell one visit from another. Those are the only two. There is no advertising and no cross site tracking on this site, and we sell nothing to anybody.
You can export or delete your account data at any time by contacting us. You can cancel a subscription yourself from the billing portal without talking to anyone.
Questions about this notice, a data request, or a creator removal request: orhan@virlia.com.
Operating entity and governing law: to be confirmed before live payments are accepted.