Privacy Policy

Virel ("we", "us", "our") is a competitive intelligence service for UK SaaS companies, operated by the Virel team and accessible at getvirel.co.uk. Our contact address is hello@getvirel.co.uk.

We collect only what we need to provide the service:

• Account data: name, email address, password (hashed), company name, company website.
• Usage data: pages visited, features used, report views — collected via Vercel Analytics.
• Payment data: handled entirely by Stripe. We never see or store card numbers.
• Communications: emails you send us, support requests.

We do not collect sensitive personal data, sell data to third parties, or use your data for advertising.

• Contract performance: processing your account data and delivering the service you signed up for.
• Legitimate interests: improving the service, preventing abuse, analytics.
• Legal obligation: retaining transaction records as required by UK law.

• Deliver weekly competitive intelligence reports to your inbox.
• Manage your account and subscription.
• Send service notifications (trial status, billing, updates).
• Prevent fraud and abuse (e.g. duplicate trial detection by company domain).
• Improve the product based on aggregated, anonymous usage patterns.

We use a small number of trusted sub-processors:

• Supabase — database and authentication (EU region, Frankfurt)
• Vercel — hosting and edge delivery
• Stripe — payment processing
• Resend — transactional email delivery
• Groq — AI inference for report generation (no personal data sent, only competitor website content)

All sub-processors are bound by data processing agreements. No data is sold.

We retain your data for as long as your account is active. If you cancel or request deletion, we delete your personal data within 30 days, except where retention is required by law (e.g. billing records, which we keep for 7 years).

You have the right to:

• Access the personal data we hold about you
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Data portability — receive your data in a machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email hello@getvirel.co.uk. We will respond within 30 days.

We use only strictly necessary cookies for authentication (session management via Supabase). We do not use advertising or tracking cookies. Vercel Analytics uses no cookies — it is privacy-preserving by design.

All data is encrypted in transit (TLS) and at rest. Passwords are hashed and never stored in plain text. Database access is protected by row-level security policies. We follow industry-standard security practices and review them regularly.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk, the UK supervisory authority. We would appreciate the opportunity to address your concerns first — please email us at hello@getvirel.co.uk.

We may update this policy as the product evolves. We will notify you by email of any material changes at least 14 days before they take effect. The latest version is always at getvirel.co.uk/privacy.