Privacy policy
Last updated 27 September 2026
Vayu is operated by Vayu ("we"). Vayu helps businesses plan, create and publish social media content with AI agents. This policy explains what personal data we process, why, and the rights you have under India's Digital Personal Data Protection Act, 2023 and other applicable laws.
Data we collect
- Account data: your email address (or phone number, if you sign in with an OTP) and your name, workspace and role.
- Business data: brand name, industry, city, languages, brand kit (voice, colours, logo, offers) and the content you or our agents create.
- Connected accounts: when you connect Instagram, Facebook, Threads, YouTube or WhatsApp, we receive the account's id, name, profile picture and an access token. Tokens are stored encrypted in a secrets vault, never in plain database rows, and are used only to publish what you approve and to read the results of those posts.
- Post results: reach, views, likes, comments, shares and saves of the posts we publish for you.
- WhatsApp contacts: phone numbers, names and tags of your customers that you import or that opt in through your link. You must have their consent; we honour opt-outs (a customer replying STOP is never messaged again).
- Owner clone (optional, paid): the selfie recording you make to create an AI presenter of yourself, the consent text you read, and a voice model created from it. We create a clone only of the person who records it.
- Billing: plan, credit balance and payment references. Card and UPI details are handled by Razorpay; we never see them.
- Technical data: sign-in cookies, the language you chose, push-notification subscriptions and security logs.
How we use it
- To provide the service: plan, write, render, schedule and publish your content, and send the WhatsApp broadcasts you start.
- To measure results and suggest what to post next (our Analyst reviews your own posts' numbers).
- To alert you when an account needs reconnecting, a post fails or content waits for your approval.
- To bill you, prevent abuse and keep an audit log of publishing, approval, billing and clone actions.
We do not sell personal data and we do not use your content or your customers' data to advertise to anyone.
Service providers
We use processors that handle data only to run Vayu for you: database and authentication hosting (Supabase), media storage (Cloudflare R2), AI model providers for text, speech, images, video, lip-sync and voice cloning (only the providers configured for this install, for example Google, OpenAI, Anthropic, Sarvam, fal, ElevenLabs), payments (Razorpay) and the social platforms you connect (Meta, Google). Data sent to AI providers is limited to what a task needs, such as your brand kit and the post being written.
Meta and Google data
Data received from Meta platforms (Instagram, Facebook, Threads, WhatsApp) is used only to provide the features you use in Vayu. Vayu's use of information received from Google APIs (YouTube) adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Vayu's access at any time in your Facebook, Instagram, Threads or Google account settings, or disconnect an account on the Accounts page.
Retention
We keep your data while your workspace exists. Deleting a connected account removes its token immediately. Deleting your workspace removes its brands, content, media, contacts, clones and connected accounts; billing records required by tax law are kept for the period the law requires.
Your rights
- Access and portability: download all your workspace data from Settings → Your data (owners).
- Correction: edit your brand, content and contacts in the app.
- Erasure: delete an owner clone on the Presenters page, or delete the whole workspace from Settings → Your data. If you removed Vayu from Facebook, Instagram or Threads, see data deletion.
- Withdraw consent: disconnect accounts, turn off alerts, or ask us to stop processing.
- Grievances: write to the contact details on https://www.tryvayu.online. We reply within 30 days.
Security
Access to every workspace is isolated in the database, platform tokens are encrypted, media is private and shared only through expiring links, and API keys are stored only as hashes.
Children
Vayu is for businesses and is not meant for anyone under 18.
Changes
We will post changes here and, for material changes, notify workspace owners in the app.
Contact
Vayu: the contact details on https://www.tryvayu.online.