Wyrlo AI Privacy Policy

Wyrlo AI is an AI video generator, run from Mirtskhulava 9/11, Tbilisi 0119, Georgia. In this policy, “Wyrlo” and “we” mean Wyrlo AI, which is the controller of your personal data. The policy covers this website (wyrlo.com) and the app at app.wyrlo.com.

For anything about your data, write to info@wyrlo.com.

Your account

• Your name and email address.
• Your password, kept only as a scrambled value (a salted hash). We can't read it.
• A profile photo, if you add one.

Sign-in records

For each browser you sign in on, we keep the time, the IP address and the browser type. This is what the Devices list on your Profile shows, and it lets us limit repeated sign-in attempts. To stop anyone flooding an inbox, we also count the confirmation and password-reset emails asked for, by IP address and by a scrambled form of the email address that can't be turned back into the address.

Where you came from

When your account is created we note the IP address and the browser type it was made from and the country that address is in. If you came from this website, we also note the site that sent you here, the page you clicked through from and any campaign tag in the link. It is added to the link at the moment you click, so nothing is stored in your browser for it. We use it to see where sign-ups come from and to spot abuse, and it is kept with your account.

Checking that you're a person

When you create an account, ask for a password reset or ask for the confirmation email again, a check run by Cloudflare (Turnstile) confirms that a person is making the request. It runs in your browser at that moment, usually without anything to click, and sends Cloudflare your IP address and details about your browser. We receive only its answer.

Payments and credits

When you buy a credit pack, we keep the amount, the date, which pack it was and the payment company's reference for that payment, and every change to your credits. We also keep the date your bought credits can be used until, and the biggest pack you bought while they could, which sets your account's limits. With each payment we also keep who paid, as the payment company reports it: the name, email address and country on the PayPal account and its PayPal account ID, which our tax records need. You pay on the payment company's own page: your PayPal sign-in, your card and your bank details never reach us.

Before your first purchase we ask for your billing details: your name, your address and country, and, if you buy for a business, its name and its VAT or tax number if it has one. Our tax records need them. We keep them with your account, where you can change them on Billing, and a copy with each payment as it was when you paid. Your account's copy is deleted with your account; the copy with each payment is kept with that payment's record for as long as tax law requires.

What you make

Everything you put into a video and everything made for it: topics, scripts, instructions and prompts, narration recordings (including recordings of your own voice, if you record or upload one), images, video clips and animated graphics (generated, from stock libraries, or uploaded by you), overlays, thumbnails, music, presets, the voices you keep in your library with your tags, the topic searches you run with their ideas and your notes on them (kept until you remove them or your account), settings and the finished videos.

Your own voice

If you narrate a video yourself, your recording is sent to ElevenLabs to be written out word by word, so the video's scenes and captions can follow it; ElevenLabs may keep it for a short time to run its service, under its own privacy policy. We keep the recording as a narration take of that video, like a voice we generate: it is deleted when you delete the take, the video (after Recently deleted) or your account. The file you upload is deleted as soon as it has become a take, or if it couldn't.

Videos you share to the Wyrlo wall

When you send a finished video to the wall on wyrlo.com, we keep a copy of it and a still from it, apart from your own files. We decide which videos the wall shows, and anyone who visits wyrlo.com can watch one that is shown. The wall shows nothing about you: no name, no email address, no channel. With the copy we keep which account shared it and which video it came from. That is never shown on the wall: it lets us deal with a video that breaks our rules, and it is removed when you delete the video or your account. The copy stays on the wall until we take it down, also after you delete the video or your account. To ask us to take it down, write to info@wyrlo.com.

Videos you share by link

When you share a video from its Render page (to a social network, by email or by copying its link), we make a link to it. Anyone who has the link can watch the video and see its title; the page shows nothing else about you or your account. We keep a still from the video with its files, for the link's preview. The link plays the video's latest render, and stops working when you turn it off on the Render page, when the video goes to Recently deleted or is deleted, or when your account is deleted. Where you post the link is your choice: that service fetches its title and still to show a preview, and keeps your post under its own policy.

Usage and cost records

For each paid step we record which step it was, which AI model ran it, how much it used and what it cost. This is what your spend pages show.

Errors

When something goes wrong in the app, we record it so we can fix it: where it happened, the error's message (with keys, email addresses and the private parts of links taken out), when and how often, and the account and video it happened with. When a page fails in your browser, your browser sends us the error, the page of the app it happened on and your browser type. We don't record what you wrote, such as a script or a message; if an error's own message quotes a few words of it, they are kept with the error, cut short.

Messages you send us

When you write to customer support from Support tickets in the app, we keep your subject and your message with your account, together with your browser type. When you report a problem or suggest an idea from Help, we keep your message the same way, with the page of the app you were on before you opened Help (the form shows that page and lets you leave it out). Files you attach to a ticket (screenshots, short recordings, PDFs or text files) are kept with it in private storage. Each message is a ticket: our staff read it and answer in the app, and we keep every reply, yours and ours, with it. We email you that your ticket was created, with a link to it and your message, and then our answers, with the text of the reply. A copy of your messages may be sent to our own inbox. All of these go through the service that sends our account emails.

Our staff may ask an AI model to draft an answer to your ticket. It is sent through OpenRouter (listed below) with your ticket's messages, your first name, and your plan, credits and number of videos, never your email address. A person reads every draft and decides what is sent to you; nothing is sent by the AI on its own.

To find the cause of a problem you report, our staff may also ask an AI model, through OpenRouter, to sum up your ticket with what our records show for your account: the steps that failed and their error messages, the errors the app recorded, your latest credit changes and the state of the video the ticket is about. The model sees the names of the files you attached, not what is in them, and never your email address. Its summary is for our staff only.

Visits to wyrlo.com

If you accept analytics cookies, this website uses Google Analytics to count visits. It records the pages you open, roughly where you are (from your IP address), and your device and browser. If you decline, it isn't loaded at all. The app itself has no analytics and no advertising trackers.

We don't buy data about you from anyone, and the only information we get from other companies is what Google sends when you choose to sign in with Google or connect a YouTube channel (both described below).

• To make your videos: each step sends what it needs to the service that runs it.
• To keep your account secure and to stop abuse of the service.
• To show you what your videos cost.
• To email you about your account and what happens in it: confirming your address, password resets and security notices; a pack you buy, a payment that didn't go through, reminders before your bought credits expire (when depends on your pack, from a week before to six months before), credits our team added or took, and a refund; a finished export (with its download link) or render, a video uploaded to YouTube or an upload that failed, and your video shown on or taken off the Wyrlo wall; if you use Make it for me and ask to be emailed, when your storyboard is ready for a look and when your video is made or has stopped on a step that needs you; your support tickets when they are created, answered and closed; and each step of deleting your account if you ask for that. We don't send marketing email.
• To tell our own staff, by email, when an account is made or is being deleted, when a pack is bought or a payment is refunded, when someone opens or writes on a support ticket, when a video shared to the Wyrlo wall waits for review, and when the check on prompts for AI images, video and animated graphics stops one (who it came from, not the prompt). The notice names the account's name and email address and what happened.
• People on our team can see your account, your videos and what was made for them, and can open the app as you see it, without being able to change anything. We use this to answer your support tickets, to fix problems and to check that the service is used within our rules.
• To fix problems and improve the product.
• To meet legal obligations.

We don't sell your personal information and we don't use it for advertising. Wyrlo does not train AI models on your content. The AI companies listed below handle what is sent to them under their own terms.

Where the law asks for a legal basis (for example in the European Economic Area and the United Kingdom): we process account and project data to provide the service you signed up for, security records and product improvement on the basis of our legitimate interests, and analytics cookies only with your consent.

Wyrlo is built on other companies' services. Each one receives only what its job needs:

• Railway. Runs the app and its database. It receives: your account details, your projects (scripts, topic searches and your notes on them, settings, records of what you made) and sign-in records. Privacy policy
• Cloudflare. Stores files (R2 storage, in the United States), and checks that a person, not a script, is creating an account or asking for an account email (Turnstile). It receives: the files of your videos: narration audio, images, video clips, uploads, thumbnails and finished renders, and files you attach to a support ticket. For the check: your IP address and details about your browser at that moment. Privacy policy
• OpenRouter. Runs the AI steps that write text and generate images and video. It passes each request to the company whose model runs it (for example Google, Anthropic or xAI). It receives: the text the step needs (your topic, script, scene descriptions and instructions) and a label made from the first part of your email address, used to tell accounts apart. When our staff use AI to help write an answer to your support ticket: the ticket's messages, your first name, and your plan, credits and number of videos (never your email address). When our staff use AI to find the cause of a problem you reported: the ticket's messages and the names of files attached to it, and what our records show for your account (the steps that failed and their error messages, the errors the app recorded, your latest credit changes and the state of the video the ticket is about), never your email address. Privacy policy
• ElevenLabs. Records the narration, writes out recordings of your own voice, and makes voices, music and sound. It receives: the script text to be read aloud, the descriptions you write for a voice, a music track or a sound, and a recording of your voice when you narrate a video yourself. Privacy policy
• Pexels, Pixabay and Unsplash. Stock photos and video clips. It receives: the search words for a scene. Nothing about you or your account.
• Freesound. Searching for free music. It receives: the search words. Nothing about you or your account.
• PayPal. Takes payments: the credit packs you buy, each with a single payment. It receives: the amount, what it is for (which credit pack) and a reference for the payment. You pay on PayPal's own page, where you sign in to your PayPal account or give it your card; it sees your IP address and details about your browser there. PayPal tells Wyrlo whether the payment went through, gives its own reference for it, and tells us who paid: the name, email address and country on the PayPal account, and its PayPal account ID. Your PayPal sign-in and card details never reach Wyrlo. Privacy policy
• Creem. Checks the prompt for every AI image and AI video clip against content rules before it is made (see the Acceptable Use Policy). It receives: the prompt as the AI model would get it: the scene's description, the visual style and any description of a recurring person, or the text you type for a thumbnail image. With it, a reference made of your account's id and the video's id. Not your name or your email address. Privacy policy
• Resend. Sends account emails, and short notices to our own staff. It receives: your email address and the email itself. A notice to our staff names your email address and what happened: a new account (with your name, your country and how you reached our site), a pack bought or a refund (with the amount), an account being deleted, or a support ticket, a message or a reply you sent from Help or Support tickets. An answer from our staff to one of your tickets, emailed to you with its text. Privacy policy
• Google. Signing in with Google and publishing to YouTube, if you choose either, and visit statistics for wyrlo.com (Google Analytics). It receives: what is described under “Signing in with Google”, “YouTube” and “Cookies” in this policy. Privacy policy
• TikTok. Posting your videos to TikTok, if you connect an account. It receives: what is described under “TikTok and Instagram” in this policy. Privacy policy
• Meta (Instagram). Posting your videos to Instagram as Reels, if you connect an account. It receives: what is described under “TikTok and Instagram” in this policy. Privacy policy

We may also disclose information when the law requires it, or to protect the rights and safety of Wyrlo and its users. If Wyrlo is sold or merged, your information moves to the new owner under this policy.

If you choose “Continue with Google”, Google sends us your name, email address and profile photo, and we use them to create or open your Wyrlo account. We ask for nothing else, and we never see your Google password.

Wyrlo uses YouTube API Services to connect your channel, publish the videos you choose to publish and show your channel's numbers. By connecting a channel you also agree to the YouTube Terms of Service, and the Google Privacy Policy applies to what Google holds.

What we ask permission for

• To upload videos to your channel, and set their title, description, tags, thumbnail, privacy and schedule. A video whose scenes include AI-made images or clips is marked to YouTube as altered or synthetic content, as YouTube's rules ask.
• To read your channel's details and the statistics of your channel and its videos.

What we store

• The channel's name, ID and picture, the email address of the Google account that connected it, and its subscriber, video and view counts.
• An access key from Google that lets Wyrlo act for the channel. It is stored encrypted.
• For each video you publish through Wyrlo: its YouTube ID and link, its privacy setting and its scheduled time.

Video statistics on the Analytics page are read from YouTube when you open the page.

What we do with it

Only what you ask for: publishing your videos and showing you your own channel's numbers. YouTube data is not shared with anyone else, not used for advertising and not used to train AI models.

Wyrlo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting

Removing a channel on the Channels page deletes the channel and its access key from Wyrlo. To withdraw Wyrlo's permission at Google as well, use Google's security settings. Videos already published stay on YouTube until you remove them there.

If you connect a TikTok account or an Instagram account, Wyrlo posts the videos you choose to post there. By connecting one you also agree to that platform's own terms, and its privacy policy applies to what it holds: TikTok's Terms of Service and Privacy Policy, and Instagram's Terms of Use and Privacy Policy.

What we ask permission for

• TikTok: to read your profile's name and picture, and to post videos to your account.
• Instagram: to read the basic details of your Business or Creator account, and to publish to it.

What we store

• The account's username, name and picture, and its follower and post counts.
• Access keys from the platform that let Wyrlo post for the account. They are stored encrypted.
• For each video you post through Wyrlo: its ID and link, its privacy setting and when it was posted.

What we send

The video, the caption you wrote, the settings you chose for the post (who can see it, comments and similar), and a mark that the video was made with AI. TikTok receives the video file from Wyrlo; Instagram collects it from a private link that stops working after a while.

What we do with it

Only what you ask for: posting your videos and showing you the account you connected. Nothing from TikTok or Instagram is shared with anyone else, used for advertising or used to train AI models.

Disconnecting

Removing an account on the Channels page deletes it and its access keys from Wyrlo. To withdraw Wyrlo's permission at the platform as well, use the list of connected apps in your TikTok or Instagram settings. Videos already posted stay there until you remove them.

The app

• One sign-in cookie, which keeps you signed in. It is required for the app to work and can't be read by scripts. It ends when you sign out, or after 7 days without use.
• One cookie that remembers whether the sidebar is open.
• Where the check that you're a person runs, Cloudflare's code runs in its own frame and may store what it needs for that check. Wyrlo sets no cookie for it.
• Where you pay, you leave Wyrlo for the payment company's own page, which sets its own cookies under its own policy. Wyrlo sets no cookie for a payment.
• Your browser's own storage, for preferences and unsent drafts on that device: the colour theme, the models and voice filters you used last, and what you had typed into a form.

This website

The first time you visit, the site asks whether it may use analytics cookies. Google Analytics is loaded, and sets cookies to tell visits apart, only if you accept. Your answer is remembered in your browser, the site works the same either way, and you can change it at any time with “Cookie settings” at the bottom of every page.

• Your account and your videos: until you delete them or your account.
• A video you delete goes to Recently deleted and is removed for good, with its files, after 30 days. You can remove it sooner from there.
• Sign-in records: until you sign out on that device, or 7 days after its last use.
• Counters used to limit repeated attempts: about a day.
• Usage and cost records: for as long as your account exists.
• Support tickets and messages you sent from Help, the replies in them and the files attached to them: for as long as your account exists.
• Error records: 30 days after the error was last seen, also after your account is deleted (by then they hold only an identifier that no longer leads to anyone).
• A video's share link, and the still its preview shows: for as long as the video exists. The link stops working sooner when you turn it off or move the video to Recently deleted.
• A video you shared to the Wyrlo wall, and its still: until we take it down, also after you delete the video or your account. Which account shared it is kept only while the account and the video exist.
• Payment records (amount, date, what it was for, the payment company's reference, who paid as the payment company reported it, and the billing details you gave): for as long as accounting and tax rules require, also after your account is deleted, without your account's other details.
• When your account is deleted, everything else in it goes with it: your details, videos, files, connected channels, usage records, your support tickets and the messages you sent from Help, and the history of your credits and your plan. A video you shared to the Wyrlo wall stays on the wall, with nothing left that links it to you.

What was already sent to another service to run a step (a prompt, a script to narrate) is kept by that service under its own policy.

Your files are stored in the United States. The other services listed above may process data in the United States and in other countries, which may have different data protection rules from yours.

In the app

• Change your name, photo, email address and password on your Profile.
• See where you are signed in and sign other devices out.
• Export any video as a complete .zip of everything in it.
• Delete any video, upload or music track.
• Turn off a video's share link, on its Render page.
• Disconnect a YouTube channel.

Deleting your account

On your Profile, choose Delete account. We email you a link to confirm, so that nobody else can do it for you. When you open the link you are signed out everywhere and your plan, if you have one, stops renewing. Fourteen days later the account and everything in it is deleted for good: your videos and files, your connected channels (Wyrlo's access to them is withdrawn at Google), your usage records and any unused credits, which aren't refunded. If you sign in during those fourteen days, the account stays as it was. We email you when the day is set and when the account has been deleted. A video you shared to the Wyrlo wall isn't deleted with the account (see Videos you share to the Wyrlo wall).

If you can't sign in, write to info@wyrlo.com from the email address of your account and we will delete it for you.

Your rights

Depending on where you live, you may have the right to get a copy of your data, to have it corrected or deleted, to object to or restrict how it is used, to take it elsewhere, and to withdraw a consent you gave. Write to the address above to use any of them. You can also complain to the data protection authority of your country.

Connections to Wyrlo are encrypted. Passwords are stored as salted hashes. Keys that let Wyrlo act on other services for you are encrypted before they are stored. Your files are kept in private storage and reached through links that expire. No system is perfectly secure, so we can't promise that nothing will ever go wrong; if a breach affects your data, we will tell you.

Wyrlo has no minimum age, but someone too young to agree to a contract where they live needs a parent or guardian to agree for them. If you are a parent or guardian and believe your child gave us personal information without your permission, write to info@wyrlo.com and we will delete it.

When this policy changes we update this page and the date at the top. If a change affects how your data is used in an important way, we will email you before it takes effect.

Wyrlo AI, Mirtskhulava 9/11, Tbilisi 0119, Georgia. Email: info@wyrlo.com.