Privacy Policy

Last updated: 28 October 2026

This policy explains how Vyral ("Vyral", "we", "us") handles personal information when you use Vyral. It is intended to be read alongside the Nigeria Data Protection Act 2023 and other applicable laws.

1. Information we collect

Account information: your email address, name (if provided), password (stored only in hashed form by our authentication provider), notification preferences and referral code.
Transaction and order information: wallet deposits (amount, reference, status, and the bank transfer details our payment provider returns, such as account name or bank), wallet history, orders (service, target link or username, quantity, price, status), refunds, rewards and referral links between accounts.
Technical and usage data: sign-in and security events, the IP address used for admin sign-in attempts, and basic logs our hosting and authentication providers keep to run and secure the service. We record when you open an order confirmation or Add Funds to understand unfinished checkouts.
Support: messages you send us on WhatsApp are handled through WhatsApp and subject to its policies.

We do not ask for your social media passwords and you should never send them.

2. Why we use it

To create and secure your account and confirm your email.
To process deposits, place and track orders, and apply refunds, discounts and rewards.
To prevent fraud and abuse, including reviewing referrals and suspicious activity.
To send account, payment and order notifications you can control in Settings.
To keep financial records and meet legal obligations.

We rely on performing our contract with you, our legitimate interests in running a secure service, and legal obligations. Where consent is required, we will ask for it.

3. Payment provider processing

Deposits are processed by Korapay. Korapay receives the information needed to create and verify your transfer and processes it under its own privacy terms. Vyral does not receive or store your card or bank login details.

4. Third-party service providers

Order fulfilment providers: receive the target link or username and quantity for each order — not your name or email.
Hosting, database and authentication: our cloud infrastructure provider stores account and transaction data on our behalf.
Logo service: platform logos may be loaded from a third-party image service, which receives standard web request data from your browser.

We share information with authorities only where required by law. We do not sell your personal information. Some providers may process data outside Nigeria; where that happens we rely on safeguards permitted by applicable law.

5. Data retention

We keep account data while your account is open. Financial and order records are kept for as long as needed for accounting, dispute and legal purposes, even after an account is closed.

6. Data security

We use access controls, encrypted connections, per-account data restrictions and limited administrator access with two-step sign-in. No system is perfectly secure, and we will act on and, where required, report personal data breaches.

7. Your rights

Subject to applicable law, you can ask to access, correct or delete your personal information, object to or restrict certain processing, withdraw consent, and request a copy of your data. You can also complain to the Nigeria Data Protection Commission.

8. Account deletion

You can ask us to close and delete your account through support. Some records (such as transactions and orders) may need to be kept for legal or accounting reasons, and verified balances are handled before closure.

9. Contact

10. Changes to this policy

We may update this policy. We will post the new version here with a new date and, for significant changes, let you know in your account.