Privacy Policy
Last Updated: March 27, 2026 — CyberDr3k Studios Inc., Saint-Leonard, New Brunswick, Canada
1. Introduction
VIRA Solutions is operated by CyberDr3k Studios Inc. ("we," "us," "our"), a corporation registered in New Brunswick, Canada. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the VIRA Solutions platform ("the Service"). We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy legislation.
2. Information We Collect
Account Information
Name, email address, login credentials (stored using secure hashing), and subscription tier. Collected when you register.
Business Profile Data
Brand details, tone preferences, target audience, industry, and other information you enter to customize AI outputs. Used solely to deliver the Service to you.
Prompt and Generation Data
Inputs and prompts you submit to generate content or applications. Transmitted to our AI subprocessors to produce outputs and stored in your account for your reference.
Usage and Technical Data
Device type, browser, IP address, pages visited, feature interactions, session duration, and diagnostic logs. Collected automatically to monitor performance and improve the Service.
Payment Information
Payments are processed by Stripe. We do not store full payment card numbers. We retain limited billing records for accounting purposes.
3. How We Use Your Information
- Provide, operate, and maintain the Service;
- Generate AI content and applications based on your inputs and Business Profile;
- Authenticate your identity and secure your account;
- Process subscriptions, billing, and renewals;
- Send transactional emails (account confirmations, billing notices, security alerts);
- Monitor for abuse, fraud, and Terms of Service violations;
- Analyze aggregate, anonymized usage patterns to improve the platform;
- Comply with legal obligations.
We do not use your personal information or Business Profile data to train AI models. We do not send unsolicited marketing emails.
4. We Do Not Sell Your Data
We do not sell, rent, or trade your personal information to third parties for their marketing or commercial purposes.
5. Cookies and Analytics
Essential cookies: Required for authentication, session management, and core functionality. Cannot be disabled without breaking the Service.
Analytics cookies: We use Google Analytics 4 to understand usage patterns and improve performance using aggregated, non-identifying data.
You may disable non-essential cookies through your browser settings, though this may affect some features.
6. Third-Party Providers and AI Subprocessors
AI Model Providers
Your prompts and inputs are transmitted to our AI subprocessors to generate outputs. Each model is selected automatically based on task type:
- OpenAI, L.L.C. (GPT-4o) — primary model for content generation
- Anthropic, PBC (Claude) — primary model for VIRA Codex and complex tasks
- Google LLC (Gemini) — fast iteration and fallback
We contractually require that AI subprocessors do not use your data to train general-purpose models beyond what is necessary to provide the Service.
Infrastructure
Google Cloud Platform / Firebase — hosting, database, and authentication. Compliant with SOC 2, ISO 27001, and applicable data protection regulations.
Payments
Stripe, Inc. — processes all payment data. PCI-DSS compliant. We do not store raw card data.
Analytics
Google Analytics 4 — used to analyze aggregated, anonymized usage patterns. No personally identifiable information is shared with Google Analytics.
All subprocessors are bound by data processing agreements restricting use of your data to service delivery only.
7. Cross-Border Data Transfers
CyberDr3k Studios Inc. is based in Canada. Our infrastructure and AI subprocessors operate in the United States and other jurisdictions. By using the Service, you acknowledge that your data may be transferred to and processed outside Canada. Where required by PIPEDA, we ensure appropriate contractual safeguards are in place for such transfers.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Upon account closure, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law. Generation history and Business Profile data are deleted upon account closure.
9. Security
We implement reasonable administrative, technical, and physical safeguards including encryption in transit (TLS), secure authentication, access controls, and regular security reviews. No system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.
10. Children's Privacy
The Service is not directed to individuals under 18. We do not knowingly collect personal information from minors. If we become aware of such collection, we will delete it promptly.
11. Your Rights Under PIPEDA
- Right of Access: Request a copy of the personal information we hold about you.
- Right to Correction: Request correction of inaccurate or incomplete information.
- Right to Withdrawal of Consent: Withdraw consent to certain processing, subject to legal and contractual restrictions.
- Right to Deletion: Request deletion of your account and associated personal information.
- Right to Lodge a Complaint: File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
To exercise these rights, contact us at support@virasolutionshq.com. We will respond within 30 days.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last Updated" date at the top of this page. For material changes, we will provide notice via email or in-app notification prior to the change taking effect.