Privacy Policy

How Vyera collects, uses and protects personal data

Last updated: 23 September 2026

This policy explains how Vyera collects, uses, shares and protects personal data when you visit vyera.ai, join our waitlist, use the Vyera platform (the "Service"), or appear in information the Service analyses. It also explains your rights and how to exercise them.

1. Who we are

Vyera is a trading name of Linvex Solutions Limited, the controller of the personal data described in this policy, except where section 2 says otherwise. Our company details are at the end of this policy.

For any privacy question, request or complaint, email support@vyera.ai.

2. Our roles

We are a controller for account, sign-in, billing, waitlist, website, usage and support data, and for publicly available data we collect to operate the Service, such as web pages, search results and reviews.

We are a processor when a business customer submits content to the Service that contains personal data, for example names in documents it uploads. We process that data on the customer's behalf and on its instructions, under our Data Processing Addendum at vyera.ai/dpa. The customer is the controller, and individuals should direct requests about that data to the customer. This policy applies to it only where it describes our security, service providers and transfers.

3. The personal data we collect

Account and sign-in data. Your name, business email address, company name, role and account settings, your two-factor authentication settings, and a record of security events such as sign-ins. If you sign in with a third-party identity provider such as Google or Microsoft, we receive your name, email address and profile image from that provider.

Waitlist data. Your email address and any other details you give when you join the waitlist.

Billing data. Your plan, payment status, billing contact and address, VAT number where given, and limited card details such as card type, expiry and last four digits. Full card numbers are handled by our payment processor and never reach us.

Business profile and content. Information you give the Service about your business, such as your website, services, prices, customers, positioning and competitors, and the files, instructions, prompts and feedback you submit. This is mostly business information, but it can contain personal data.

Conversations. Your messages with the Vyera agent and with our support team inside the Service or by email.

Connected account data. Data from accounts you choose to connect, only within the permissions you grant:

  • website analytics and search console accounts: performance data such as traffic, pages, search queries, impressions and clicks;
  • social media accounts: your account identifier, profile name and image, the permissions needed to publish, and the posts you publish through the Service. We do not read your feed, messages or followers' data; and
  • workplace messaging tools: the workspace and channel identifiers needed to send alerts. We do not read your messages.

Generated content. The analysis, text, images, audio and other Outputs the Service generates for you, which may include personal data drawn from the sources above.

Usage and device data. IP address, browser and device type, pages and features used, timestamps, error logs and similar technical information.

Cookies and similar technologies. See our Cookie Policy at vyera.ai/cookie-policy.

Public web and market data. To analyse your market, the Service collects publicly available information about businesses. This can include personal data about people in their business capacity, such as names, job titles and public statements, public reviews, and answers from AI assistants and search engines that mention people. Section 8 explains how we handle this.

4. How we use personal data, and our lawful bases

PurposeLawful basis
Creating and running your account, providing the Service and generating Outputs on your instructionContract
Connecting accounts and publishing content on your instructionContract
Billing, payments, tax and accountingContract; legal obligation
Providing support and responding to requests and complaintsContract; legitimate interests
Securing the Service, preventing fraud and abuse, and enforcing our TermsLegitimate interests
Analysing publicly available business information to provide the ServiceLegitimate interests
Improving the Service, using aggregated or de-identified data wherever possibleLegitimate interests
Sending service messages, such as receipts, security alerts and changes to our termsContract; legitimate interests
Sending product news and marketing to business contacts and waitlist members, with an unsubscribe link in every messageLegitimate interests; consent where required
Website analyticsConsent
Measuring our adverts and showing Vyera adverts on other sitesConsent
Complying with law and responding to lawful requests from authoritiesLegal obligation

Where we rely on legitimate interests, we have assessed that our interests are not overridden by yours. You can ask us for details of that assessment.

We do not sell personal data. If you accept advertising cookies, our advertising partners receive information about your visit so we can measure our adverts and show you Vyera adverts on other sites. You can withdraw that consent at any time in Cookie settings.

5. AI processing

The Service uses third-party AI models (language, image and speech models) to analyse data and generate Outputs. We send these providers only the data needed for the task you ask for. Under our agreements with them, they may not use your data to train their models, and we do not use your Customer Content to train generalised AI models.

We may change the AI providers we use as models improve. If we ever use an AI provider whose terms allow training on your data, we will tell you before it happens.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

6. Google user data

If you connect Google services such as Google Analytics or Google Search Console, we access the data you authorise on Google's consent screen ("Google user data"). We use it only to provide the connected features you have chosen, such as showing your performance alongside market insights.

Vyera's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we:

  • use Google user data only to provide and improve the user-facing features you have connected;
  • do not use it for advertising, and do not sell it;
  • do not transfer it to others, except to the service providers described in section 9 where needed to provide those features (including AI model providers that generate your analysis), for security, to comply with law, or as part of a merger or sale with your consent;
  • do not allow people to read it, unless you give us permission for support, it is needed for security or to investigate abuse, it is required by law, or it has been aggregated and anonymised; and
  • do not use it to develop, improve or train generalised AI or machine learning models.

We keep Google user data only while the integration is connected. When you disconnect it or delete your account, we immediately revoke and delete the access tokens, delete stored Google user data within 30 days, and remove remaining copies from backups within 90 days. You can revoke access at any time in Vyera or in your Google Account settings.

7. Social and other connected accounts

When you connect a social media account, we use it only to publish content you approve, or content you have set to publish automatically, and to show you what was published. When you disconnect an account, we revoke our access and delete the stored tokens immediately, and delete other data obtained from it within 30 days. Posts already published remain on the platform until you remove them there.

8. People who appear in public data

If you are named in public information the Service analyses, for example as a director, employee or spokesperson of a business, or as the author of a public review, we process that information under our legitimate interests in helping businesses understand their market. We process it because it relates to a business, not to build profiles of individuals.

Sources. Publicly available sources, obtained directly or through data providers.

Limits. We collect only information already public, we do not collect special category data on purpose, and we show this information only to the customers whose accounts track the business concerned.

Retention. Review data is kept for up to 12 months. Other public data is kept only as long as needed to show historical trends in the accounts that track the business concerned.

Your rights. You can object to this processing or ask us to erase your data at any time by emailing support@vyera.ai, and we will stop unless we have compelling grounds to continue. Because we do not hold contact details for most people who appear in public data, contacting each of them individually would involve disproportionate effort, so we make this information publicly available here instead.

9. Who we share personal data with

We share personal data only as follows.

Service providers who process data on our behalf under written contracts, only for the purposes we specify:

CategoryPurposeLocations
Cloud hosting and infrastructureHosting the website and Service, storage, backups and email deliveryUK, EU and United States
AuthenticationSign-in, sessions and account securityUnited States
Security and content deliveryProtecting the website and Service from attacks and botsGlobal network
PaymentsProcessing payments and preventing fraudEU and United States
AI model providersGenerating analysis, text, images and audioUnited States
Data providersSearch, market and public web dataEU and United States
AnalyticsWebsite analytics, only if you consentUnited States
Advertising platformsMeasuring Vyera adverts and showing them on other sites, only if you consentUnited States

Business customers can request our current list of service providers that process customer data, as set out in our Data Processing Addendum. Any individual can ask us about the recipients of their own personal data.

Platforms you connect, when you ask us to publish or send content to them.

Professional advisers, such as lawyers, accountants and insurers, where needed.

Authorities and others where required by law, or where needed to protect our rights, users or the public.

A buyer or successor if we are involved in a merger, acquisition or sale of assets. This policy will continue to apply to your data.

10. International transfers

Linvex Solutions Limited is registered in England and Wales. Some of our service providers, and some of the people and systems that support the Service, are located outside the UK, including in countries that do not have UK adequacy regulations. When we transfer personal data outside the UK, we protect it with a lawful transfer mechanism: UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or, where the recipient is certified, the UK Extension to the EU-US Data Privacy Framework. Data about people in the EU is protected by equivalent safeguards under the EU GDPR. You can ask us for details of the safeguards that apply.

11. How long we keep personal data

DataRetention
Account data, business profile, Customer Content, Outputs and agent conversationsWhile your account is open. After closure and the 30-day export window, deleted or anonymised within 30 days, with backup copies removed within 90 days
Connected account dataWhile connected. Deleted within 30 days of disconnection, with backup copies removed within 90 days
Waitlist dataUntil you create an account, ask us to remove you, or we close the waitlist
Billing records6 years, to meet UK tax and accounting law
Support conversations and complaintsUp to 24 months after resolution
Technical and security logsUp to 12 months
Review dataUp to 12 months
Marketing opt-outsKept so we can respect your choice

We may keep data for longer where the law requires it or to establish, exercise or defend legal claims.

12. Security

We protect personal data with appropriate technical and organisational measures, including encryption in transit and at rest, encrypted storage of passwords and access tokens, least-privilege access controls, multi-factor authentication for administrative access, logging and monitoring, and confidentiality obligations for everyone with access. No system is completely secure. If a breach affects your personal data, we will notify you and the regulator where the law requires.

13. Your rights

You have the right to:

  • access your personal data and receive a copy;
  • ask us to correct or complete your personal data;
  • have your data erased;
  • restrict how we use your data;
  • object to processing based on legitimate interests, and to direct marketing at any time;
  • receive data you gave us in a portable format; and
  • withdraw consent at any time, without affecting processing that took place before.

To exercise any right, email support@vyera.ai. We may need to confirm your identity. We will respond within one month, which the law allows us to extend by up to two further months for complex requests, in which case we will tell you why.

Complaints. If you are unhappy with how we handle your personal data, you can complain to us at support@vyera.ai. We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome without undue delay. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ico.org.uk). If you are in the EU or EEA, you can contact your local data protection authority.

United States residents. We do not sell personal information. Advertising cookies, which let our advertising partners use information about your visit to show you Vyera adverts on other sites, are set only if you consent, and you can switch them off at any time in Cookie settings. You may ask us to access, correct or delete your personal information by emailing support@vyera.ai, and we will not discriminate against you for doing so.

14. Marketing

We send marketing emails to business contacts and waitlist members about Vyera. Every marketing email includes an unsubscribe link, and you can also opt out by emailing support@vyera.ai. Opting out does not stop service messages about your account.

15. Children

The Service is for business users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact support@vyera.ai and we will delete it.

16. Changes to this policy

We may update this policy from time to time. We will notify account holders of material changes by email or in the Service before they take effect. The date at the top shows when this policy was last updated.

17. Contact and company details

Privacy questions, requests and complaints: support@vyera.ai

Legal notices: info@vyera.ai

Vyera is a trading name of Linvex Solutions Limited, a company registered in England and Wales under company number 17048922.