Privacy Policy

If a member enables the Vibe Backend, we store form submissions sent from their sites on their behalf (as their processor): the fields a visitor submits, a hashed identifier instead of the raw IP address, and timestamps. We email the member a notification.

Submissions are stored only with the visitor's consent, kept for a limited retention period and then expire, and can be deleted or exported by the member at any time. Sub-processors include our email provider and our hosting. We do not sell this data.

The data controller is [COMPANY NAME], [REGISTERED ADDRESS]. For any privacy request, contact [PRIVACY EMAIL].

Operator note: fill in your real business and contact details before launch.

Account data: your email, display name, hashed password, and your phone number if you choose to provide it.

Content you create: posts, comments, builds, messages, team activity/role/wage records, and profile details.

Usage data: log and device information needed for security and to operate features (for example last-seen time for presence).

Consent data: whether you agreed to the Terms and whether you opted in to marketing.

Cash-out data: only if you request a cash-out, your legal name and payout (bank) details. Used solely to process the payout, verify identity, and meet legal duties; never shown publicly.

We do not store your full payment card number; payments are processed by our payment provider.

To create and secure your account, provide the service and its AI features, run the Vibes economy, show notifications, prevent abuse, and meet legal obligations.

To send essential service messages (sign-up, account, password, and payment notices). These are always sent because they are necessary to provide the service.

We send marketing tips, events and offers by email or SMS only if you opt in. You can withdraw consent at any time in your account settings, and we will stop. We never send marketing to anyone who has not opted in or who has turned it off.

Service providers that process data on our behalf: Anthropic (Claude) and Google (Vertex AI) for AI features; our payment provider for purchases; email and SMS providers for messages; and our hosting and database provider.

We share only what each provider needs, and we do not sell your personal data.

Some providers may process data outside your country. Where required, we rely on appropriate safeguards for such transfers.

We keep your data while your account is active. When you delete your account, we delete or anonymize your personal data, except where we must keep limited records to comply with the law (for example payment, cash-out, or tax/transaction records) for the period required by law.

Deleted content may be retained for a limited period for error recovery and backups, after which it is destroyed.

You can access, correct, export or delete your data, and withdraw consent at any time. You also have the right to complain to your local data protection authority.

To exercise any right, use your account settings or contact [PRIVACY EMAIL].

Passwords are stored only as salted hashes, sessions use signed HTTP-only cookies, and we apply reasonable measures to protect your data. No system is perfectly secure, so please use a strong, unique password.

VibeCampus is not intended for children under 14. If we learn we have collected data from a child under 14 without the required consent, we will delete it.

We use an essential, HTTP-only session cookie to keep you signed in. It is required for the service to work and is not used for advertising.

We may update this Policy and will note the date above. For privacy questions, contact [PRIVACY EMAIL].