Privacy Policy

Virly - UGC Content Rewards — Last updated: July 29, 2026

Who we are

Virly is a Shopify app that lets merchants run content reward campaigns: their customers publish videos on TikTok, Instagram Reels or YouTube Shorts and earn discount codes based on how those videos perform. This policy covers both the merchants who install the app and the participants who join a campaign.

What we collect from merchants

• The store's myshopify.com domain and Shopify API access token (required to operate the app).
• Campaigns, reward tiers, eligibility thresholds and app settings configured by the merchant.
• Product identifiers, titles and images of the products selected in a campaign (used to display them on the campaign page and to restrict discount codes).
• The discount codes issued by the app and their usage counts, as reported by Shopify.

What we collect from campaign participants

To join a campaign, a participant provides an email address, a first name and their social media handle. We also store:

• The URLs of the videos they submit, and the platform each video was published on.
• Public statistics for those videos (views, likes, comments), whether declared by the participant, retrieved automatically or verified by the merchant, along with the history of those values over time.
• Public metadata returned by the platform's own oEmbed endpoint for a submitted video: title, author name and thumbnail URL.
• The single-use access token behind the magic link that gives the participant access to their own space.
• The Shopify customer identifier of the store, when the participant's email matches an existing customer of that store. It is stored only to link a participant to the merchant's own customer record.

Participants do not create an account and no password is stored. We do not collect participants' IP addresses, payment data or browsing behaviour on the merchant's storefront.

Automatic metric tracking

On paid plans, the app periodically refreshes the statistics of submitted videos. To do so, the public URL of a submitted video is sent to Apify Technologies s.r.o., which runs the TikTok and Instagram scrapers on our behalf and returns the public statistics of that video. Only the video URL is transmitted. No merchant or participant personal data is included in these requests.

Hosting and subprocessors

• Hosting: Hetzner Online GmbH (Germany, EU).
• Video statistics: Apify Technologies s.r.o. (Czech Republic, EU) — public video URLs only.
• Video metadata: the oEmbed endpoints of TikTok, Instagram and YouTube — public video URLs only.

We do not sell or share personal data with any other third party, and we do not use it for advertising.

Data retention and deletion

Campaign data is kept for as long as the app is installed on the store. All data belonging to a store, including its campaigns, participants and submissions, is permanently deleted when the app is uninstalled and upon any shop/redact request from Shopify. We honor all mandatory Shopify privacy webhooks (customers/data_request, customers/redact, shop/redact). A participant can ask the merchant, or us directly, to delete their participation data at any time.

Discount codes created by the app are native Shopify discount codes and live in the merchant's own Shopify account. They are not deleted when Virly is uninstalled, and they remain governed by Shopify's own terms.

Contact

For any privacy question, or to exercise your rights over your data, contact us at dev@vima.work.