Privacy Policy
VyrrAI Privacy Policy
Last Updated: 18 August 2026
VYRRAI SMC PRIVATE LIMITED ("VyrrAI", "we", "us", or "our") operates VyrrAI, a conversational commerce and business automation platform that helps businesses manage customer conversations, product information, orders, and related business workflows through supported communication channels and integrations.
This Privacy Policy explains what information we collect, how we use it, how it may be shared, and the choices available to you when you use our website, platform, applications, integrations, and related services (collectively, the "Service").
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
We collect information necessary to create accounts, provide the Service, maintain security, process subscriptions, and improve the operation of our platform.
1.1 Business Account Information
When a business creates an account or communicates with us, we may collect:
- Name
- Business or company name
- Email address
- Phone number
- Account credentials and authentication information
- Business profile and account information
- Billing and subscription information
- Information provided when communicating with VyrrAI
1.2 Business and Product Data
Depending on the features used by the customer, VyrrAI may process information such as:
- Product names and descriptions
- Prices
- Product catalogue information
- Inventory or availability information
- Images and other product information
- Business policies and frequently asked questions
- Knowledge-base information
- Order information
- Customer-service information
- Information supplied through supported integrations
This information is processed to provide the Service to the business customer.
1.3 Customer Conversation Data
VyrrAI may process conversations between a business and its customers through supported channels, including WhatsApp and other communication platforms integrated with the Service. Such information may include:
- Customer names
- Phone numbers or other contact information
- Messages
- Questions and requests
- Order-related information
- Information voluntarily provided by the customer during a conversation
For customer information submitted to VyrrAI by a business customer, the business customer is responsible for determining the appropriate legal basis for collecting and processing that information and for providing any notices or obtaining any consent required by applicable law. VyrrAI processes this information on behalf of the business customer and only for purposes connected with providing the Service.
1.4 Usage and Technical Information
We may collect limited information about how users interact with the Service, such as account activity, feature usage, service events, error information, and other technical information necessary to operate, secure, and maintain the platform.
We do not intentionally collect IP addresses, device identifiers, or browser information as a standard category of customer profile information.
2. How We Use Information
VyrrAI may use information to:
- Create and manage customer accounts
- Provide, operate, and maintain the Service
- Process customer conversations and business workflows
- Connect supported integrations
- Process orders and related business information
- Provide customer support
- Authenticate users and protect accounts
- Detect and prevent abuse, fraud, unauthorized access, or security incidents
- Process subscriptions and payments
- Communicate with customers about the Service
- Diagnose technical problems and improve reliability
- Comply with applicable legal obligations
- Enforce our Terms and other applicable agreements
We do not use customer data for purposes unrelated to providing or operating the Service unless otherwise disclosed or permitted by applicable law.
3. AI Model Training
VyrrAI does not use customer data, product data, or customer conversations to train or fine-tune artificial intelligence models.
Information submitted by a business customer remains subject to the purposes described in this Privacy Policy and the applicable agreement between VyrrAI and the customer.
VyrrAI may use third-party AI and technology providers to process information when necessary to provide requested functionality. Such processing does not give VyrrAI permission to use customer data to train or fine-tune its own AI models.
4. Third-Party Service Providers
VyrrAI may use third-party technology, infrastructure, hosting, payment, communication, analytics, integration, and artificial intelligence providers to operate and deliver the Service.
These providers may process relevant information only to the extent reasonably necessary to perform the services they provide to VyrrAI.
Depending on the features used by a customer, these providers may include infrastructure providers, AI/API providers, payment processors, communication platforms, and integration providers.
Third-party providers operate under their own terms and privacy policies, and their processing may also be governed by agreements between VyrrAI and those providers.
5. WhatsApp, Meta, and Other Third-Party Platforms
The Service may integrate with third-party platforms, including Meta and WhatsApp.
When using these integrations, customers must comply with the applicable terms, policies, rules, and requirements of the relevant third-party platform.
VyrrAI is not responsible for a third-party platform's decision to restrict, suspend, disable, modify, or terminate an account, API access, messaging capability, or other service.
The availability of a VyrrAI integration may depend on the continued availability and functionality of the relevant third-party platform or API.
6. Data Security
VyrrAI takes reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, loss, or destruction.
However, no internet-based service, transmission, or storage system can be guaranteed to be completely secure.
Customers are responsible for maintaining the confidentiality of their account credentials and for ensuring that access to their VyrrAI account is limited to authorized individuals.
7. Data Retention
We retain information for as long as reasonably necessary to:
- Provide the Service;
- Maintain business and account records;
- Meet contractual obligations;
- Resolve disputes;
- Prevent abuse or fraud;
- Comply with legal or regulatory requirements; or
- Enforce our agreements.
The specific retention period may vary depending on the type of information and the reason for which it was collected.
8. Data Deletion and Export
A customer may request deletion of its data by contacting us at contact@vyrrai.com.
Upon a valid deletion request, VyrrAI will delete the relevant information within a reasonable period, subject to information that we are legally required or reasonably entitled to retain.
Deleted information may remain temporarily in backups until those backups are overwritten or deleted through normal backup cycles.
Customers may request an export of their available data before requesting deletion. The format and scope of an export may depend on the type of data and the technical capabilities of the Service.
9. Acceptable Use
You must not, and must not permit anyone else to:
- Use the Service for any unlawful, fraudulent, deceptive, abusive, or harmful purpose;
- Sell, promote, or facilitate the sale of weapons, illegal drugs, counterfeit goods, adult content, or any product or service whose sale or promotion is restricted or prohibited under applicable Pakistani law or applicable Meta or third-party platform policies;
- Send spam, phishing messages, malware, or communications designed to deceive, manipulate, defraud, or harass recipients;
- Attempt to gain unauthorized access to the Service, another customer's account or data, or VyrrAI's systems, networks, or infrastructure;
- Reverse engineer, decompile, disassemble, scrape, copy, reproduce, or otherwise attempt to extract or discover the source code, underlying models, prompts, system instructions, or other proprietary components of the Service, except where such restriction is prohibited by applicable law;
- Use the Service, its outputs, or access to the Service to build, train, develop, or improve a competing product or artificial-intelligence model;
- Resell, sublicense, lease, distribute, or provide access to the Service to any third party without VyrrAI's prior written agreement;
- Impose an unreasonable or disproportionate load on the Service or VyrrAI's infrastructure, or circumvent any usage limit, rate limit, security control, or technical restriction;
- Use the AI Assistant primarily as a general-purpose chatbot for purposes unrelated to your business's customer conversations or the functionality for which the Service is provided;
- Misrepresent your identity, your business, or your affiliation with any person, business, or organization; or
- Use the Service in a manner that could reasonably cause harm to VyrrAI, its infrastructure, its service providers, other customers, or members of the public.
VyrrAI may investigate suspected violations of this Section and may suspend, restrict, or terminate access where reasonably necessary to protect the Service, its customers, or third parties.
9A. AI-Generated Responses and Human Quality Review
The Service uses artificial intelligence to generate, assist with, or recommend responses to End Customers.
You acknowledge that AI-generated responses may occasionally be inaccurate, incomplete, inappropriate, or unsuitable for a particular situation. You remain responsible for configuring the Assistant appropriately and for reviewing and monitoring its performance for your business.
9A.1 Quality Review
To assess and improve the quality, reliability, and accuracy of AI-generated replies, authorized VyrrAI personnel may access and review conversations conducted through the Service during the preceding 60 days.
Such access:
- Is limited to the minimum information reasonably necessary for the relevant quality-assurance purpose;
- Is subject to the safeguards described in our Privacy Policy;
- May include masking or other protection of phone numbers and other identifying information where reasonably practicable;
- Is subject to access controls and audit logging;
- Is limited to authorized personnel with a legitimate business need;
- Is subject to confidentiality obligations; and
- Is not used for marketing purposes.
This quality-review process is a condition of using the relevant Service and is not subject to an individual customer opt-out.
Conversation content accessed for quality assurance will not be used to train or fine-tune artificial-intelligence models and will not be disclosed to another VyrrAI customer.
9A.2 Customer Responsibility for Disclosure
You are responsible for informing your End Customers, through your own privacy notice and other appropriate communications, that conversations conducted through the Service may be reviewed by authorized VyrrAI personnel for quality-assurance purposes.
VyrrAI may provide suggested disclosure wording for this purpose, but you remain responsible for determining the appropriate notice and disclosure requirements applicable to your business.
9B. Transparency to End Customers
9B.1 AI Disclosure
You must clearly and accessibly inform your End Customers that an AI assistant may respond to their messages when the Assistant is used to communicate with them.
Where practical, you should provide this disclosure in the Assistant's initial or first substantive interaction with an End Customer.
9B.2 Human Quality Review Disclosure
You must also inform your End Customers that conversations may be reviewed by authorized VyrrAI personnel for quality-assurance purposes.
A clear statement in your privacy notice and, where reasonably practical, an appropriate notice in the initial conversation may be sufficient depending on the circumstances and applicable law.
9B.3 Your Privacy Notice
You must maintain and publish an appropriate privacy notice explaining:
- What information your business collects from End Customers;
- How your business uses that information;
- How the Service is used to process that information;
- Any applicable sharing or disclosure of information; and
- Any other disclosures required by applicable law.
9B.4 No Misrepresentation as a Human
You must not configure, instruct, or otherwise cause the Assistant to falsely represent that it is a human being.
The Assistant must not intentionally conceal its AI nature where doing so would be misleading or contrary to applicable law or third-party platform policies.
9C. End Customer Responsibilities
You are responsible for ensuring that your use of the Service and your interactions with End Customers comply with applicable laws, regulations, contractual obligations, and third-party platform policies.
This includes obtaining any required consent or other legal basis for collecting, processing, or communicating with End Customers through the Service.
VyrrAI does not determine whether your particular use of End Customer information is lawful and does not replace your own legal, compliance, or privacy obligations.
9D. Quality Review Does Not Constitute AI Training
For clarity, human review of conversations under Section 9A is performed solely for purposes such as quality assurance, troubleshooting, safety, reliability, and improvement of the Service.
Such review does not authorize VyrrAI to use Customer Data, product data, or conversation content to train or fine-tune artificial-intelligence models.
Any use of information for AI model training would require a separate legal basis and disclosure where applicable.
10. Payments
Subscription payments may be processed through third-party payment providers.
VyrrAI generally does not need to store complete payment-card information itself. Payment information may instead be processed by the applicable payment provider according to its own privacy policy and security practices.
11. Communications
We may contact customers regarding:
- Account activity;
- Service updates;
- Security matters;
- Billing and subscription matters;
- Technical issues;
- Important changes to the Service or our policies; and
- Customer support requests.
Customers may contact VyrrAI regarding privacy or data-related matters at contact@vyrrai.com.
12. Children's Information
The Service is intended for businesses and is not directed toward children.
VyrrAI does not knowingly request or intentionally collect personal information directly from children for the purpose of creating accounts.
Where a business customer processes information relating to children through the Service, that business customer remains responsible for ensuring that its collection and processing of such information complies with applicable law.
13. International Processing
VyrrAI and its third-party service providers may process or store information in countries other than the country in which a customer is located.
Where information is transferred internationally, VyrrAI will take reasonable steps appropriate to the circumstances to protect the information and maintain the confidentiality and security of the Service.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, technology, or applicable legal requirements.
When we make material changes, we may provide notice through the Service, our website, or another appropriate communication channel.
The updated Privacy Policy will become effective when posted unless a different effective date is stated.
15. Contact Us
If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the way VyrrAI handles information, please contact:
This Privacy Policy is intended to describe VyrrAI's general privacy practices and does not replace any specific contractual data-processing obligations agreed between VyrrAI and a business customer.