Privacy Policy

For your own account, Vrilo decides how your information is used, and this policy applies to it.

Each rental business that uses Vrilo also keeps records about its customers. For those records, Vrilo acts on the business's instructions and the business is responsible for them. If you booked with a business that uses Vrilo, its own privacy policy applies, and you should contact it first.

Account details: your name, email address, password (stored only in a scrambled, one-way form), business details and team members.

Billing records: your plan, payment amounts and dates. Card details go directly to our payment provider and do not reach our servers.

Content you add: products, images, website pages, bookings, customer records, documents and messages.

Technical information: IP address, browser details and activity records, which we use to keep accounts secure and to prevent abuse. The activity log also records who changed what in your business.

We use your information to provide and support Vrilo, secure accounts, process billing, send service emails such as password resets and billing notices, fix problems and improve the product. We do not sell personal information, and we do not use the customer records of the businesses we serve for our own marketing.

We use a cookie to keep you signed in and another to remember that you are signed in. Stores built on Vrilo use cookies for their cart and customer accounts. Stores also record page visits for their own analytics, and a business can choose to record whether its emails were opened. We do not use cookies for third-party advertising.

We use trusted providers to run the service: hosting and file storage (Vercel), database hosting (Neon), email delivery (such as Resend) and payment processing for subscriptions (Paystack). They handle information only to provide their service to us.

When a business connects its own payment or email provider, information passes to that provider on the business's behalf. We may also share information if the law requires it, to protect people or the service, or as part of a sale or reorganisation of the business.

Each business's records are kept separate at the database level, access is controlled by roles, payment and email keys are encrypted, and connections are encrypted. No system is perfectly secure, so please use a strong, unique password. If we learn of a breach that affects you, we will tell you as the law requires.

We keep your information while your account is active and for as long as we need it afterwards to meet legal, tax and accounting duties or to resolve disputes. We do not delete a business's data because a payment failed. Email us if you want your account closed and your data removed.

You can see and update most of your information in your account. You can also ask us for a copy of your information, or ask us to correct or delete it. Depending on where you live, you may have other rights, including objecting to some uses or complaining to a data protection authority.

Our providers may process information in other countries, which may have different data protection laws from yours.

Vrilo is for businesses and is not intended for children.

We may update this policy. If a change is significant, we will tell you. The latest version is always on this page.