About this policy
Effective date: October 1, 2026
ViraKeys is operated as ViraKeys in Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, protect, retain, and delete personal information when you use virakeys.com and the ViraKeys license-management, billing, marketplace, download, and Google Drive features.
This policy is intended to describe our current practices. It is not a promise that ViraKeys is certified under, endorsed by, or verified by Google or any privacy regulator.
Information we collect
Account and profile information
We collect the name, email address, password credentials, account role, plan status, security settings, support messages, and other information you provide when creating or managing an account.
License, team, and product information
We process the license records, credentials, notes, product files, team assignments, download activity, and marketplace information you add to ViraKeys. You are responsible for ensuring that you have the right to enter and share this information through the service.
Billing and transaction information
Payments are processed by Stripe. ViraKeys receives transaction, subscription, invoice, refund, and payment-status information needed to provide the service. ViraKeys does not store full payment-card numbers.
Security and technical information
We collect information needed to secure and operate the service, such as IP address, browser or device details, login and security events, session information, and records of downloads or other account activity.
Google Drive data
Google Drive is optional and available only when a user connects a Google account. ViraKeys requests the following Google Drive permissions:
When you use the Drive file picker, ViraKeys may read file metadata needed to present eligible ZIP files, including file ID, name, MIME type, size, and modified time. ViraKeys stores the selected file reference and basic metadata so it can validate and stream the selected package to an authorized recipient. The original product ZIP remains in your Google Drive; ViraKeys does not copy that ZIP into its own storage through this feature.
When Drive backup is enabled, ViraKeys may create a license export in the Google Drive location you choose. We store encrypted OAuth access and refresh tokens required to maintain the connection. We may also cache the connected Google account name and email to help you confirm which account is linked.
ViraKeys does not use Google Drive data for advertising, profiling, credit decisions, or training generalized artificial-intelligence models. We do not sell Google user data. We do not transfer Google user data to third parties except as necessary to provide the requested feature, comply with law, protect rights and safety, or as permitted by you.
ViraKeys' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google API Services User Data Policy: https://developers.google.com/terms/api-services-user-data-policy
Disconnecting Google Drive
You can disconnect Google Drive in ViraKeys, or revoke ViraKeys' access in your Google Account security settings. On in-app disconnection, ViraKeys checks and deletes its tracked license CSV exports before confirming disconnection. If a deletion fails, you will see an error and the connection remains available for retry. Revoking access directly at Google can prevent us from deleting an export; in that case, remove it in Google Drive. Product-file references that require a replacement source are not automatically removed.
pCloud data
pCloud is optional and available only when a user connects a pCloud account. ViraKeys receives an OAuth access token and stores it encrypted so the requested integration can continue working.
When you use the pCloud file picker, ViraKeys reads file metadata needed to present eligible ZIP files, including file ID, name, content type, size, and modified time. ViraKeys stores the selected file reference and basic metadata so it can validate and stream the selected package to an authorized recipient. The original ZIP remains in pCloud and is not copied into ViraKeys storage.
When pCloud backup is enabled, ViraKeys creates or updates a CSV license export in the pCloud folder you choose. The export excludes license keys and passwords. ViraKeys may cache the connected account identity and pCloud data-center location so you can verify which account is linked and requests can be sent to the correct API host.
Disconnecting pCloud
You can disconnect pCloud from the pCloud integration page. ViraKeys first checks and deletes its tracked license CSV exports. If deletion fails, you will see an error and the connection remains available for retry. Revoking pCloud access outside ViraKeys can prevent us from deleting an export; remove it in pCloud if necessary. Product-file references that depend on the disconnected account are not automatically replaced.
Temporary cloud file-list and search caching
To make Google Drive and pCloud browsing and search faster, ViraKeys temporarily caches file-and-folder listing and search metadata, such as identifiers, names, file types, sizes, and modification times. Cached results are kept separate by ViraKeys user and connected cloud account and are used to support the requested browsing and search features.
Search results are reused briefly before being refreshed, and you can request fresh results using the file picker's Refresh control. These caches contain metadata, not ZIP file contents, and do not make your cloud files public. Cached results are separate from selected-file references retained for configured, authorized download workflows.
Cloud license export retention
ViraKeys saves the identifiers and creation times of its tracked license CSV exports in your connected Google Drive or pCloud account. An hourly check attempts to remove each tracked export at the next successful check after it reaches 30 days old, whether or not automatic exporting is still enabled. In-app disconnection attempts removal sooner. Provider errors or revoked access can delay or prevent deletion; a failed in-app disconnect is not reported as complete. Files exported before tracking began whose identifiers are no longer available cannot safely be identified as ViraKeys exports; you may need to delete them yourself. These rules concern license CSV exports, not product ZIP files or operational recovery backups.
How we use information
We use personal information to:
Service providers and disclosures
We share information only as needed to operate ViraKeys, including with:
We may disclose information when required by law or when reasonably necessary to protect ViraKeys, users, payment partners, or the public. We do not sell personal information.
Cookies and similar technologies
ViraKeys uses essential cookies and local storage for sign-in sessions, security, password-confirmation state, display preferences such as dark mode, and service functionality. We do not use advertising cookies. See the Cookie Policy for more detail.
Retention and security
We retain active-account information while your account remains open. After a verified deletion request, we delete or de-identify personal account data within a reasonable period, generally within 30 days, unless a longer period is necessary for a legitimate purpose.
We may retain limited records needed for accounting, tax, payment disputes, fraud prevention, security investigation, backup recovery, legal obligations, and marketplace resale authorization, evidence, moderation, order, delivery, refund, and takedown history. Retained records are restricted to the purpose for which they are kept.
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security.
Your choices and privacy rights
Subject to applicable law, you may request access to, correction of, export of, or deletion of your personal information. You can update account details in ViraKeys, export license data where available, disconnect Google Drive, and use the Account page to request self-service deletion when your account has no records requiring manual review.
To make a privacy, access, correction, export, or deletion request, email privacy@virakeys.com. We may need to verify your identity before fulfilling a request. We will explain if a legal or operational retention obligation limits a deletion request.
Children and changes
ViraKeys is not directed to anyone under 18. Do not use the service if you are under 18.
We may update this policy as our service or legal obligations change. For material changes, we will update the effective date and provide additional notice when appropriate. Continued use after an update means the updated policy applies to your use of the service.
Contact
For privacy questions or requests, contact privacy@virakeys.com.