Privacy Policy

    Last Updated: October 18, 2026

    1. Introduction

    Welcome to Virida ("Virida," "we," "our," or "us").

    Virida is a software application designed to help ABA (Applied Behavior Analysis) clinics with social media content and with hiring, including job postings, applications, and applicant phone screens.

    This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (collectively, the "Service").

    By using Virida, you agree to the practices described in this Privacy Policy.

    2. Information We Collect

    We collect only the information necessary to operate and improve our Service.

    A. Information You Provide Directly

    • Name
    • Email address
    • Business name
    • Profile information
    • Payment information (processed via third-party payment providers such as Stripe)
    • Social media account credentials or authorization tokens (via OAuth integrations)
    • Content you upload (photos, videos, captions, service descriptions)

    B. Information Collected Automatically

    • Device information
    • Browser type
    • IP address
    • Usage data
    • Log data (excluding scrubbed PII)
    • Analytics data related to application performance

    We take measures to avoid storing sensitive personal information in logs.

    C. Social Media Account Information

    When you connect third-party accounts (e.g., Facebook, Instagram, TikTok, etc.), we may access:

    • Account ID
    • Page ID
    • Profile name
    • Media permissions
    • Publishing permissions
    • Basic analytics data (where authorized)

    We only access the permissions explicitly granted during authentication.

    3. How We Use Your Information

    We use your information to:

    • Provide and operate the Service
    • Generate AI-assisted social media captions and posts
    • Schedule and publish content on your behalf
    • Improve application performance and user experience
    • Provide customer support
    • Process payments
    • Maintain security and prevent fraud
    • Comply with legal obligations

    We do not sell, rent, or trade your personal information.

    4. AI Processing

    Virida uses generative AI to assist with content creation. Uploaded content (such as images and service descriptions) may be processed by secure third-party AI providers solely for the purpose of generating captions, hashtags, or marketing suggestions.

    We do not use your content to train public AI models.

    5. Job Applicants and Text Messages

    Clinics use Virida to post jobs and receive applications. When you apply to a job through a Virida apply page, we collect the information you enter (such as your name, email address, phone number, and resume) and process it on behalf of the clinic you applied to. The clinic decides how your application is reviewed.

    Text Message Consent

    The apply page asks whether you agree to receive text messages about your application. Agreeing is optional and is not required to apply. If you agree, we record the time of your consent and the version of the consent wording you saw.

    What We Send

    Text messages are about your application only, such as interview scheduling links and updates after a missed call. They are sent in the clinic's name through our messaging provider, Twilio. We do not send marketing or promotional text messages. See our SMS Terms for message frequency and costs.

    Opting Out

    Reply STOP to any message to stop receiving text messages from Virida for any clinic. Reply START to opt back in. Reply HELP for help. To keep your opt-out in effect, we keep a one-way coded form of your phone number, not the number itself.

    Sharing

    No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

    We share your phone number only with Twilio, solely to deliver the messages you agreed to receive, and with the clinic you applied to as part of your application.

    Retention

    We do not store the content of text messages. A record that a message was sent (its type, status, and time) is deleted together with your application, no later than 12 months after you apply.

    6. Data Security

    We implement industry best practices to protect your information, including:

    • HTTPS/TLS encryption in transit
    • Encryption of secrets and sensitive credentials at rest
    • Secure OAuth flows for third-party integrations
    • Regular security updates and monitoring
    • Role-based access controls
    • Scrubbing personally identifiable information (PII) from logs
    • Limited internal access to user data

    While no system can guarantee absolute security, we take commercially reasonable steps to safeguard your information.

    7. Data Retention

    We retain your information only as long as necessary to:

    • Provide the Service
    • Fulfill contractual obligations
    • Comply with legal requirements
    • Resolve disputes

    You may request deletion of your account at any time.

    8. Sharing of Information

    We may share information only with:

    • Payment processors (e.g., Stripe)
    • Cloud hosting providers
    • AI processing providers
    • Analytics services
    • Social media platforms (for publishing functionality)
    • Messaging and phone providers (e.g., Twilio), to deliver text messages and calls to job applicants
    • Legal authorities if required by law

    We require third-party service providers to maintain appropriate safeguards.

    We do not sell user data.

    9. Your Rights

    Depending on your jurisdiction, you may have the right to:

    • Access your personal data
    • Correct inaccurate data
    • Request deletion
    • Object to certain processing
    • Request data portability
    • Withdraw consent

    California Residents (CCPA)

    If you are a California resident, you may request:

    • Disclosure of categories of personal information collected
    • Deletion of personal information
    • Confirmation that we do not sell your data

    We do not sell personal information.

    10. Children's Privacy

    Virida is not intended for individuals under the age of 18. We do not knowingly collect data from minors.

    If we become aware that a minor has provided personal information, we will delete it promptly.

    11. Third-Party Services

    Virida integrates with third-party platforms, including but not limited to:

    • Meta (Facebook, Instagram)
    • Payment processors
    • Cloud service providers
    • AI service providers

    Your use of third-party services is subject to their privacy policies. We are not responsible for third-party practices.

    12. Account Deletion & Data Removal

    You may request account deletion by:

    Upon verified request, we will delete your data within a reasonable timeframe unless retention is legally required.

    For Facebook/Instagram data removal requests, users may contact us at the email above.

    13. International Data Transfers

    If you access Virida from outside the United States, your information may be transferred to and processed in the United States.

    By using the Service, you consent to this transfer.

    14. Changes to This Privacy Policy

    We may update this Privacy Policy periodically.

    If we make material changes, we will notify users via:

    • Email notification
    • In-app notice
    • Updated effective date

    15. Contact Us

    If you have questions about this Privacy Policy, contact us at:

    Virida

    Email: [email protected]

    Website: virida.app