This Privacy Policy explains how Elemental Genius LLC ("Elemental Genius," "we," "us," "our") collects, uses, stores, and protects information when you use Virylium, including the Lyra Solus AI companion, at virylium.com and app.virylium.com (the "Service").
1. Information We Collect
1.1 Account Information. When you sign up we collect your email address and, if you provide one, your name. We create an account identifier for you and record the state of your subscription or trial.
1.2 Content and Usage Data. We collect the content you provide to the Service — what you tell Lyra, the answers you give during onboarding, drafts, captions, and brand materials — along with data about how you use the Service, in order to operate and improve it.
1.3 Google Account Data (Drive Integration). If you connect your Google account, we request only Google's drive.file OAuth scope. Google restricts this scope to files our application itself creates — we cannot see, list, or access any other file or folder in your Google Drive. Through this connection Virylium creates and maintains a single file, lyra.soul, containing Lyra's memory and personalization data for your account.
1.4 Connected Social Accounts. If you connect a social platform, we receive an access token from that platform along with basic profile information such as your account identifier, display name, and handle. We request only the permissions needed to publish on your behalf and to identify the connected account. We never receive or store your password for any connected platform.
1.5 Media You Upload. Images and video you upload for publishing are stored in our cloud storage, associated with your account, and used to publish to the platforms you choose.
1.6 Payment Information. Subscription payments are processed by Stripe, Inc. ("Stripe"), a PCI-DSS compliant payment processor. We never receive or store your full card number. We store only the identifiers Stripe gives us — a customer identifier and a subscription identifier — so we can tell whether your subscription is active.
1.7 Automatically Collected Information. Like most web applications we collect certain technical information when you use the Service, including IP address, browser and device type, and usage and log data, through standard web technologies such as cookies and browser local storage.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Authenticate your account and manage your trial, subscription, and billing
- Enable Lyra Solus's memory and personalization through the lyra.soul file in your Google Drive
- Draft, schedule, and publish content to the platforms you have connected, at your direction
- Measure usage against the limits described in your plan
- Communicate with you about your account, billing, and Service updates
- Monitor, troubleshoot, secure, and improve the Service
- Comply with legal obligations and enforce our Terms of Service
We do not sell your personal information, and we do not share it with third parties for their own independent marketing purposes. We do not use your content to train foundation models.
3. Artificial Intelligence and Generated Content
3.1 How Lyra Works. Lyra Solus is an AI companion. To answer you and to draft content, the Service sends your inputs and relevant portions of your lyra.soul memory file to Google's Gemini models running on Google Cloud Vertex AI. Lyra may also generate images at your request using the same infrastructure.
3.2 Outputs Are Machine-Generated. Content produced by Lyra — text, captions, and images — is generated automatically and may be inaccurate, incomplete, or unsuitable for your purpose. You are responsible for reviewing anything before it is published.
3.3 Approval and Autonomy. During your trial, Lyra proposes content and cannot publish on her own; publishing requires your explicit approval. Automated and scheduled publishing becomes available on a paid subscription, and you can turn it off at any time.
4. Where Your Data Is Stored
4.1 Our Infrastructure. Operational account data — excluding the lyra.soul file — is stored in Google Cloud Firestore within our own secured Google Cloud project, hosted in the United States. Uploaded media is stored in Google Cloud Storage in the same project and is not publicly readable.
4.2 Your Google Drive. The lyra.soul file — Lyra's memory for your account — is stored in your own Google Drive, not on our servers. This is deliberate and is central to the product:
- The file remains under your ownership and Google account control at all times
- We read it to load Lyra's memory during your sessions, and write updates as your relationship with Lyra develops
- You may revoke our access at any time through your Google Account permissions or in the Service settings. Revoking access affects Lyra's ability to remember you across sessions, but does not by itself delete the file — it remains yours, and you may delete it yourself or ask us to
4.3 Credentials. OAuth refresh tokens for your Google Drive connection and access tokens for your connected social platforms are encrypted at rest using Google Cloud Key Management Service (KMS) and decrypted only when needed to carry out an action you have asked for. We do not store your password for any third-party service.
5. Google API Services — Limited Use
Virylium's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically: we use Google user data only to provide and improve the features you have asked for, we do not transfer it except as necessary to provide those features or as required by law, we do not use it for advertising, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and de-identified.
6. Connected Platforms and Publishing
The Service can connect to Discord, X (Twitter), Bluesky, Facebook, Instagram, Threads, LinkedIn, TikTok, and Twitch. Connecting any of them is optional and is always initiated by you.
When you publish through the Service, the content and any attached media are transmitted to that platform under your own account, and are then governed by that platform's own terms and privacy policy. We read content from a connected platform only where you have asked us to — for example, reading your Twitch clips so Lyra can turn them into posts elsewhere.
You may disconnect any platform at any time in the Service settings. Disconnecting deletes our stored credentials for that platform; it does not delete content already published there.
7. How We Share Your Information
We share information only as follows:
- Service providers acting on our behalf: Google Cloud (infrastructure, database, storage, key management, and AI processing) and Stripe (payment processing)
- Platforms you connect: the social platforms listed above, and only content and media you or Lyra have prepared and you have authorized for publication
- Legal requirements: where required by law, subpoena, or legal process, or to protect the rights, property, or safety of Elemental Genius, our users, or others
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections
8. Data Retention and Deletion
8.1 Retention. We retain your account and usage data while your account is active. If you cancel your subscription without deleting your account, we retain your data under this policy until you ask us to delete it.
8.2 How to Delete. You may delete your account and associated data either:
- In the Service: through your account settings, which processes the deletion automatically, or
- By web form or email: at elementalgenius.com/deleteme, or by emailing [email protected]
8.3 What Deletion Removes. Deleting your account removes your account record, your operational data and Lyra's logs, your uploaded media, your entitlement record, and your stored credentials for every connected platform. Any active subscription is cancelled. Where technically possible we also revoke our access tokens at the issuing provider rather than merely discarding our copy.
8.4 Your Soul File Is Yours. Because lyra.soul lives in your own Google Drive, we delete it only if you ask us to. When you delete your account you choose whether the file is deleted or left in your Drive. We default to leaving it, because the file is yours and destroying it by default would contradict the promise on which the Service is built.
8.5 Timeline. Upon a verified deletion request, all of your information will be deleted within 45 days. Deletions initiated in the Service are processed immediately.
9. Your Privacy Rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Because Lyra's memory file lives in your own Drive in a plain-text format, your most important data is already portable and under your control by design.
California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, to request deletion, and not to be discriminated against for exercising those rights. We do not sell personal information.
EU, UK, and EEA residents have rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority. Where GDPR applies, we process personal data on these bases: performance of a contract (operating the Service, managing your subscription, and publishing at your direction); legitimate interests (securing the Service, preventing abuse, and improving it); consent (connecting your Google Drive and each social platform, which you give per-service and may withdraw at any time); and legal obligation (tax, accounting, and responding to lawful requests).
To exercise any of these rights, contact us at [email protected].
10. International Users
The Service is operated from the United States and your information is processed and stored there. If you access the Service from outside the United States, you understand that your information will be transferred to, and processed in, the United States, where data protection law may differ from that of your country.
11. Children's Privacy
The Service is not directed to individuals under 18, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it.
12. Cookies and Similar Technologies
We use cookies and browser local storage to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may prevent the Service from working.
13. Security
We use industry-standard safeguards, including encryption of credentials at rest through Google Cloud KMS, encrypted transmission over TLS, server-side access controls, and time-limited signed URLs for media. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
14. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes we will provide notice — such as an in-app notification or an email — before they take effect.
15. Contact Us
Elemental Genius LLC · Brockport, New York · [email protected] · [email protected] for deletion requests.