Privacy Policy

Overview

VYRON is an AI-powered customer acquisition and business growth platform operated by EG Wallet ("we," "us," or "VYRON"). We take your privacy seriously and are committed to protecting your personal and business data. This Privacy Policy describes what data VYRON collects, how we use it, the security measures we apply, and the choices you have to access, export, or delete your data.

By creating a VYRON account or using any VYRON service (including the VYRON mobile app and the web platform at vyron.pplx.app), you agree to the practices described in this policy.

Data We Collect

Account Information

When you create a VYRON account, we collect:

• Full name — used to identify you and personalize your experience.
• Email address — used for authentication, account recovery, and notifications.
• Password — stored only as a bcrypt hash (never in plaintext).

Business Information

During onboarding, you may provide details about your business, including:

• Business name, industry, products or services, and business goals
• Target customers, location, and service area
• Operating model (storefront, online, mobile, wholesale, etc.)
• Marketing channels and pricing information
• Website and social media links

Business Data You Create in VYRON

• Opportunities — potential customer matches discovered or imported.
• Campaigns — marketing and outreach campaigns you build.
• Outreach drafts — message drafts you review and approve before any send.
• Follow-up reminders — scheduled nudges for your opportunities.
• Suppression list entries — contacts who have opted out of outreach.
• Settings — your communication and automation preferences.
• Audit logs — a record of significant actions taken on your account.

Usage Data

• Authentication tokens (JWT) issued when you log in.
• IP address, recorded in audit logs for security and compliance purposes.
• Request metadata handled by our hosting infrastructure (Railway and our static-file CDN).

Data We Do Not Collect

VYRON does not install third-party behavioral analytics SDKs (such as Google Analytics, Facebook Pixel, or Firebase Analytics) in the app. We do not track your browsing behavior across other websites or apps.

How We Use Your Data

We use the data described above to:

• Authenticate your account and manage sessions.
• Operate the VYRON platform, including generating opportunities, campaigns, and AI Growth Advisor guidance.
• Send you notifications about new opportunities, campaign performance, and customer responses.
• Maintain audit logs for security, debugging, and regulatory compliance.
• Honor suppression-list and opt-out requests for CAN-SPAM and TCPA compliance.
• Provide data export and account deletion functionality.

We do not sell your personal data to third parties.

Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing your data are:

• Contract — to provide the VYRON service you requested.
• Legitimate interests — to maintain security, audit trails, and prevent abuse.
• Consent — where you have explicitly opted in to specific features (e.g., marketing communications).
• Legal obligation — to comply with applicable laws and regulations.

Data Sharing & Third Parties

VYRON does not sell, rent, or trade your personal data. We share data only as described below:

• Hosting infrastructure — Your account and business data are stored in a PostgreSQL database hosted by Railway. The VYRON frontend is served from a secure static-file CDN.
• Public data sources — VYRON may reference publicly available datasets (such as the U.S. Census ACS API, SAM.gov Opportunities API, SEC EDGAR filings, and Google Places API) to discover business opportunities. These are public records, not personal data about you.
• Service providers — If you connect a third-party service (e.g., an email or SMS provider for outreach), VYRON may transmit data to that provider solely to complete the action you requested. You are responsible for complying with that provider's terms.
• Legal compliance — We may disclose data if required by law, court order, or to protect our rights or the rights of others.

Data Security

VYRON implements multiple layers of security to protect your data:

• Password hashing — All passwords are hashed with bcrypt before storage. Plaintext passwords are never stored.
• HTTPS enforcement — All traffic between your device and VYRON is encrypted with TLS.
• Security headers — HTTP security headers (via Helmet) are applied to all responses.
• Rate limiting — Authentication and API endpoints are rate-limited to prevent abuse and brute-force attacks.
• Multi-tenant isolation — Your business data is isolated from other accounts at the application layer.
• Audit logging — Significant account actions are logged for security review and compliance.
• Session management — Authentication uses signed JWT tokens with a defined expiration.

Data Retention

We retain your data for as long as your VYRON account is active. If you delete your account, all associated data (including your business profile, opportunities, campaigns, outreach drafts, follow-ups, suppression list entries, and audit logs) is permanently deleted from our database.

Anonymized or aggregated data that cannot be linked back to you may be retained for product improvement purposes.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of your data via the in-app data export feature.
• Deletion — Request permanent deletion of your account and data.
• Correction — Update your business profile and account information at any time.
• Opt-out — Add contacts to your suppression list or disable notifications in Settings.
• Portability — Export your data in machine-readable JSON format.
• Withdraw consent — Disable any features you previously opted into.

Account & Data Deletion

You can delete your VYRON account and all associated data at any time:

You can also export a full copy of your data before deletion via Settings → Privacy & Security → Export my data (GDPR / CCPA).

If you need assistance with account deletion, contact us at the email below.

Children's Privacy

VYRON is a business-to-business platform and is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

International Users

VYRON's infrastructure is hosted in the United States. If you access VYRON from outside the United States, your data will be transferred to and processed in the United States. By using VYRON, you consent to this transfer in accordance with applicable data protection laws.

Regulatory Compliance

VYRON is designed to support compliance with the following regulations:

• CAN-SPAM Act — All outreach is approval-based, with suppression-list and unsubscribe support.
• Telephone Consumer Protection Act (TCPA) — SMS outreach requires prior express consent; suppression lists are enforced.
• General Data Protection Regulation (GDPR) — Data export, deletion, and lawful-basis disclosure are provided.
• California Consumer Privacy Act (CCPA) — California residents may exercise access, deletion, and opt-out rights.

This policy is designed to meet the Google Play Data Safety disclosure requirements, including clear description of data collection, usage, sharing, security, retention, and deletion practices.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and notify you through the VYRON platform. Continued use of VYRON after changes take effect constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your personal data, contact us at: