Privacy policy

1. Scope and responsibilities

This policy covers Vyna’s website and demand and supply marketing service. Vyna handles account and service information to operate the product. When an organization adds documents, contacts or other personal information to a workspace, that organization determines its purposes and is responsible for its authority to provide and use that information. Any applicable customer agreement or data-processing agreement supplements this policy.

2. Information processed

• Account information, such as your email address, identity-provider profile, user identifier and sign-in session.
• Organization and workspace details, memberships, roles, invitations and service usage.
• Company websites and publicly available business information used for company research, brand profiles and competitor analysis.
• Workspace content you provide or generate, including evidence, documents, audience records, campaigns, brand guidance and draft content.
• Data retrieved from services a workspace administrator authorizes, such as Search Console reports or document and message excerpts.
• Technical information needed to operate and diagnose the service, such as request details, errors and operational logs.

3. How information is used

Information is used to authenticate users, manage workspace access, research companies, generate drafts and recommendations, import authorized evidence, display cached reports, continue background research, track usage and maintain the service. Company research may start automatically after signup using a work-email domain; personal-email users may need to supply a company website.

Where applicable law requires a legal basis, processing must be supported by the relevant basis, such as providing an agreed service, legitimate interests in operating and protecting the service, legal obligations or consent where required. The appropriate basis depends on the information, purpose and jurisdiction.

4. Connected services and Google data

Connections are optional and belong to the workspace. Availability depends on provider configuration. Only authorized workspace administrators can connect or disconnect accounts. The permission screen identifies the access requested; you can also revoke access in the provider’s account settings.

Search Console access reads verified website properties and search-performance data, including queries, clicks, impressions and average position. Reports are saved in the workspace and may refresh daily while the connection remains authorized.

Google Drive access requests read-only permission. The current import reads recent Google Docs and plain-text files and processes excerpts to suggest evidence, job posts or client communications. Read-only access does not permit Vyna to edit or delete your Drive files. Imported excerpts can be sent to an AI service to classify and summarize them and saved in the workspace inbox for review.

Vyna’s use and transfer of information received from Google APIs must adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google account sign-in is separate from granting Drive or Search Console access.

5. AI processing and public research

Relevant workspace context, brand guidance, selected evidence and imported excerpts may be sent to AI services through Lovable’s AI service to produce drafts or analyses. Public research also uses external search and website-retrieval services. Do not provide sensitive personal information or confidential material unless your organization has authorized the processing and reviewed the applicable provider terms.

AI output may be inaccurate. Suggested anonymization is not a guarantee that all identifying information is removed. Review generated content before sharing it. Organic-search and AI-answer samples are not verified rankings or comprehensive visibility measurements.

6. Sharing and workspace access

Information is handled by hosting, authentication, storage, AI and connected-service providers as needed to deliver the service. Workspace members can access shared information according to their roles; joining by a verified company domain may be enabled by the workspace administrator. Platform-owner reporting shows tenant and usage information, not workspace content.

Disclosure may also be necessary to comply with law, protect rights or respond to a valid legal process. Organizations should review provider agreements, processing locations and any required transfer safeguards before uploading regulated information.

7. Storage, security and retention

Workspace access is controlled through membership-based permissions. Connection credentials are stored encrypted on the server and are not displayed as workspace content. These measures reduce risk but cannot guarantee absolute security.

Workspace records, generated content and cached reports persist to support the service. Disconnecting a provider stops use of that connection; it does not automatically delete information already imported. Dismissing an inbox item is a review action, not a deletion request. A fixed retention schedule, backup-deletion timing and any contractual exceptions must be confirmed with the operator before this policy is finalized.

8. Your choices and requests

You can review editable workspace information, ask your administrator about access, disconnect authorized integrations where your role permits, or revoke access directly with the provider. Depending on applicable law, you may have rights to access, correct, delete, export or restrict personal information, object to processing, withdraw consent or complain to a supervisory authority.

For organization-controlled content, direct requests to your workspace administrator first. For account information and requests to Vyna, email brahmpreetbp@gmail.com or write to Vyna, #318, GH 99, Sector 20, Panchkula. Removing a user from a workspace does not by itself erase shared company records.

9. Browser storage and children

The service uses browser storage and session mechanisms for authentication and continuity. This policy does not assume optional advertising or analytics trackers are enabled; any such use requires an accurate disclosure and consent where required. Vyna is a business service and is not intended for children.

10. Changes and related terms

This policy may change as the service develops. The updated date identifies the latest version; material changes should be communicated as required by applicable law or agreement. Also see the terms of service.