Privacy Policy

CloudOneSoftware LLC ("CloudOneSoftware," "we," "us," or "our") operates Virilocity AI Marketing Platform (the "Service"), available at https://app.virilocity.io. This Privacy Policy explains what information we collect, how we use and protect it, and the choices and rights you have. It applies to the Service, our websites, applications, and related integrations.

Virilocity is a business-to-business ("B2B") product intended for use by businesses and their authorized representatives. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.

CloudOneSoftware LLC is the entity responsible for the Service and is based in Jersey City, New Jersey, United States.

For personal data that you and your authorized users provide about yourselves to create and operate an account ("Account Data"), we generally act as a data controller. For personal data contained in the marketing content, contact records, and other materials that you submit to or generate within the Service ("Customer Data"), we generally act as a data processor or service provider acting on your behalf and on your instructions. In that role, you are responsible for having an appropriate legal basis to provide that data to us and for honoring the rights of the individuals it relates to.

2.1 Information You Provide

• Account and profile information, such as your name, business email address, company name, role, and credentials used to authenticate (including federated sign-in identifiers).

• Billing and subscription information necessary to manage your plan. Payment card details are collected and processed directly by our third-party payment processor and are not stored on our systems.

• Customer Data you upload, connect, or generate, which may include marketing copy, brand assets, website URLs, product feeds, contact records synchronized from connected systems, and campaign configurations.

• Communications you send to us, including support requests, feedback, and survey responses.

2.2 Information Collected Automatically

• Usage and log data, such as feature interactions, pages viewed, actions taken, timestamps, device and browser type, and approximate location derived from IP address.

• Authentication and security data, including session tokens, sign-in events, and records used to detect and prevent abuse.

• Cookies and similar technologies used to keep you signed in, remember preferences, and measure and improve the Service, as described in Section 8.

2.3 Information From Connected Services and AI Signals

• Data from third-party services you choose to connect (for example, your CRM, search console, or messaging tools), accessed only with the scopes you authorize.

• AI-search visibility signals that the Service collects about how your brand and content appear across supported AI answer engines. These signals are derived from publicly available query responses and are used to compute your AI Visibility Score and related analytics.

We use the information described above to:

• Provide, operate, secure, and maintain the Service, including authentication, account management, and customer support.

• Generate the core outputs of the Service, including AI Visibility Scores, audits, content recommendations, and analytics.

• Process payments, manage subscriptions, and send service-related and administrative communications.

• Monitor, troubleshoot, and improve performance, reliability, and security, and to detect, prevent, and respond to fraud or abuse.

• Comply with legal obligations and enforce our agreements.

• With your consent where required, send product updates and marketing communications, which you can opt out of at any time.

We do not sell your personal information, and we do not use your Customer Data to train shared or foundational machine-learning models that serve other customers.

The Service uses artificial intelligence and automated systems to analyze content, evaluate AI-search visibility, and generate recommendations and draft materials. Important points to understand:

• AI-generated outputs may contain inaccuracies and should be reviewed by a qualified person before being relied upon or published. The Service is designed to keep a human in the loop for actions that publish or send content.

• We may route certain processing to third-party AI providers under contractual terms that restrict their use of your data to providing the requested service.

• Scoring and analytics are decision-support tools and are not a substitute for your own professional judgment.

Where the General Data Protection Regulation (GDPR) or similar laws apply, we process personal data on the following legal bases: performance of a contract with you; our legitimate interests in operating, securing, and improving the Service, balanced against your rights; compliance with legal obligations; and your consent where consent is required. Where we act as a processor of Customer Data, you are responsible for establishing the applicable legal basis.

We share information only as needed to operate the Service and as described here:

• Service providers and subprocessors that host, secure, and support the Service, including cloud hosting and database providers, our payment processor, and AI and analytics providers. These parties are bound by confidentiality and data-protection obligations.

• Connected third-party services that you authorize, to the extent necessary to provide the integration you enable.

• Legal and safety disclosures when required by law, to respond to lawful requests, to protect rights and safety, or to enforce our terms.

• Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to the protections of this Policy.

A current list of subprocessors is available on request by contacting us at the address in Section 13.

We retain personal data for as long as your account is active and as needed to provide the Service, then for the period required to meet our legal, accounting, and security obligations. Customer Data is retained according to your configuration and is deleted or returned following account termination as described in our Terms and any applicable data-processing agreement. We may retain de-identified or aggregated data that can no longer reasonably be associated with an individual.

We use strictly necessary cookies to operate the Service (for example, to keep you signed in), and we may use functional and analytics cookies to remember preferences and understand usage. You can control non-essential cookies through your browser settings or any cookie controls we make available. Disabling certain cookies may affect functionality.

We are based in the United States and may process information in the United States and other countries where we or our service providers operate. Where required, we rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses, and take steps to ensure your data receives an adequate level of protection.

We implement administrative, technical, and organizational measures designed to protect personal data, including encryption in transit, asymmetric token-based authentication, scoped authorization, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and for configuring access within your account appropriately.

Depending on your location, you may have rights to access, correct, update, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. Residents of certain jurisdictions, including under the GDPR and the California Consumer Privacy Act, have additional rights and the right to be free from discrimination for exercising them.

To exercise your rights regarding Account Data, contact us using the details in Section 13. Where the data is Customer Data that we process on behalf of a business customer, please direct your request to that customer, and we will assist them as required. We will respond within the timeframes required by applicable law.

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us personal data, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

If you have questions, concerns, or requests regarding this Policy or your personal data, contact us at:

• CloudOneSoftware LLC

• Jersey City, New Jersey, United States

• Privacy inquiries: privacy@cloudonesoftware.com

• General support: support@cloudonesoftware.com