Vyrelis CRM holds information about your agency’s clients, much of it health information. This page says, in plain language, what we collect, what we do with it and how to reach us.
Who we are
Vyrelis CRM is operated by Creative Duo LLC, doing business as Vyrelis, a Florida company serving insurance agencies in the United States. In this policy “we” means Vyrelis and “agency” means a business that signs up for Vyrelis CRM.
Agency data and your clients’ data
Agencies use Vyrelis CRM to keep records about their own clients and leads. For that information the agency decides what is collected and why; we store and process it only to provide the service to that agency. When the agency is a covered entity under HIPAA, we act as its business associate.
If you are a client of an agency and want to see, correct or delete your information, contact your agency. They can export or erase your record from Vyrelis CRM, and we help them do it.
What we collect
- Account information: name, email address, profile photo, the agency you belong to and your role, and sign-in security details, handled by our authentication provider.
- What agencies put in the CRM: client and lead records, coverage and plan details, notes, tasks, documents, signatures, messages and commission statements.
- Connections an agency turns on: tokens for Google Calendar, social accounts (Facebook, Instagram, Threads, LinkedIn and others) and messaging channels, stored encrypted and used only for what the agency switched on.
- Usage and security records: an audit log of who viewed or changed which record and when, plus technical logs (IP address, browser, errors) used to keep the service running and secure.
- Billing: plan, number of users and usage. Card details go straight to our payment processor; we never see or store the card number.
How we use it
To run the service for the agency, secure it, support it and bill for it. We do not sell personal information, we do not use agency or client data for advertising, and we do not use it to train AI models.
How we protect it
- Each agency’s data is walled off from every other agency in the database, not only in the app.
- Sensitive fields are encrypted with a key that belongs to that agency. Social Security numbers are never stored.
- Every view and change of a client record is written to an append-only audit log.
- Data is encrypted in transit, and money actions ask you to confirm it is you again.
AI features
Every AI request passes through one gateway. A request that carries client data goes only to an AI provider that has signed a business associate agreement with us. Requests without client data (for example help questions or a social post draft) may go to other providers, and identifiers are scrubbed before they leave. AI suggestions are drafts for a person to review.
How long we keep it
- Client records stay until the agency deletes them, or until the agency’s account is deleted.
- Records the law requires agencies to keep are kept for that period: the audit log for six years, signed Scope of Appointment records and approved marketing for ten years.
- Assistant conversations are deleted after one year, or sooner when you delete them.
- When an agency asks us to delete its account there is a 30-day holding period; then its data is erased, except the records the law requires us to keep.
Your choices and rights
You can update your account details in the app at any time. To ask for a copy of your account information, a correction or deletion, write to [email protected]. Depending on your state you may have further rights; we answer every request and will not treat you differently for making one. Vyrelis CRM is for businesses and is not directed to children.
Changes and contact
If we change this policy we update the date above, and we tell agency admins by email before a material change takes effect. Questions go to [email protected]. See also the terms of service.