Legal

Privacy policy

Plain language, no surprises. Last updated: September 1, 2026.

Virally (“the App”) is operated by MB „Liūto media" (“we”, “us”), a company registered in Lithuania. This policy explains what the App accesses when you install it on your Shopify store, how that information is used, and how it is deleted.

Virally does not store customer personal data. It reads your product and collection data so you can tag products, and stores the video links you add. To show you which videos actually drove sales (“revenue analytics”), it reads your order totals and records only the order’s ID and the sale amount for the video that led to it — never customer names, emails, addresses or payment details.

What we access

DataWhy we need it
Product and collection data (titles, images, handles, prices)So you can tag the products a video features and, optionally, build a collection
The video URLs you add (TikTok, YouTube)To know which clips to show and which products each one links to
Public oEmbed data for each video (embed HTML, thumbnail, author)Fetched from TikTok / YouTube's public oEmbed so the wall can render
Order totals for orders that a Virally video helped generate (order ID, line item amount, our video tag)Only to attribute sales back to the video that drove them (your revenue analytics). We ignore customer names, emails, addresses and payment data in the order.
Store and theme identifiersTo attach your settings to the right store and render the storefront blocks
An email address you enter for review requestsOnly to contact you about your account or a review, if you provide it

How the information is used

Videos are embedded from TikTok and YouTube's own CDN; the App does not host, copy or transcode the video. We do not sell your data or use it to train models.

Sharing

We do not sell, rent or share data with third parties. When your storefront renders a video, the shopper's browser loads it directly from TikTok or YouTube, which is subject to that platform's own privacy policy. Your product and settings data stays on our own server.

Storage and security

Data is stored on our own server in the EU. Databases are held on an encrypted volume (LUKS2, AES-256), all traffic is encrypted with HTTPS/TLS, and backups are encrypted before storage. Server access is limited to the developer and uses SSH key authentication.

Retention and deletion

Contact

Questions about this policy or your data: app@liutomedia.lt
MB „Liūto media", Lithuania · liutomedia.lt
See also our terms and data processing agreement.