1. Scope and accountability
This Privacy Policy explains how Vibeler collects, uses, discloses, retains, and protects personal information when you use the Services.
Vibeler may act as an organization that controls personal information for platform accounts, billing, security, support, analytics, and legal operations. For creator audience data, newsletters, gated access, and creator-directed communications, creators may also be accountable for their own collection, use, disclosure, consent, and notices.
2. Information we collect
- Account and profile information such as name, email, username, date of birth, profile details, authentication activity, and security settings.
- Creator Stage information such as handles, channels, themes, custom-domain setup, admins, capabilities, products, courses, pricing, coupons, events, posts, articles, newsletters, videos, podcasts, media, comments, reviews, and moderation actions.
- Audience activity such as follows, subscriptions, purchases, tips, course progress, product access, comments, reviews, RSVPs, newsletter subscriptions, notification interactions, and support requests.
- Offering information such as Story frames, captions, replies, watch progress, highlights and expiry; Live Room attendance, audience-visibility choices, speaking requests, questions, question votes, reactions, messages and moderation; private Request submissions, attached files, responses, delivery deadlines, orders and gift invitations; and Member Space posts, approvals, profile-discovery choices, follows, connection invitations and blocks. When live captions are enabled, permitted speakers' audio is processed transiently to produce captions.
- Payment and commerce information processed through Stripe, including transaction identifiers, subscription status, invoices, checkout and Connect status, payout-related status, chargeback/dispute signals, and limited payment-method summaries. Vibeler does not need to store full card numbers.
- Technical and security information such as IP address, device/browser data, session cookies, request logs, rate-limit signals, fraud indicators, media-processing logs, API proxy logs, and approximate location derived from network data.
- AI information such as prompts, selected context, generated drafts, generated quiz drafts, usage and credit records, and related metadata for post, article, newsletter, and course quiz generation.
3. How we use information
- Provide accounts, Stages, studio tools, public creator pages, private-channel access, paid entitlements, media upload/processing/playback, custom domains, comments, reviews, events, Stories, Live Rooms, Requests, Member Spaces, opt-in people discovery and connections, analytics, notifications, and newsletters.
- Process platform subscriptions, audience subscriptions, purchases, tips, coupons, booster packs, email coverage charges, disputes, refunds, chargebacks, and payout-related workflows through Stripe.
- Operate AI text tools through OpenAI or another disclosed AI provider and maintain AI credit balances and history.
- Send transactional emails, verification, recovery, invitation, receipts, support, legal notices, newsletter confirmations, unsubscribe messages, and creator-requested newsletters through email providers such as SendGrid.
- Secure the Services, detect fraud and abuse, enforce policies, prevent spam, preserve evidence, resolve disputes, and comply with legal obligations.
- Improve reliability, performance, routing, analytics, media processing, accessibility, product quality, and support using aggregated or de-identified information where appropriate.
5. Who can see your participation
Creator content and member posts are visible according to the channel's access and publication settings. Posting, asking a room question, sending a live message, or reacting exposes the participation and identifying profile information to its permitted audience. Live Room listeners can choose whether to appear in the audience list. Listening privately hides that audience-list entry; it does not make questions, messages, reactions, or speaking anonymous, or erase attendance records. Watching does not itself opt your profile into Member Space discovery; authorized creator staff and Vibeler may still access attendance and speaking requests.
Story replies are private to their author and the creator unless the channel explicitly allows eligible members to see replies. Private Request submissions and responses are available to the buyer, authorized creator staff, and accepted gift recipients. Vibeler may access relevant information for support, safety, payment disputes, security, or legal obligations. Do not include another person's private information without permission.
Member Space profile discovery is opt-in. Follows and accepted connections belong to your Vibeler account and may persist after you leave a Stage. Turning discovery off stops discovery in that space; it does not delete an existing connection. Blocking removes follows and connections in both directions. Neither action erases content or records already shared with permitted viewers.
Live audio and video are transmitted through the configured LiveKit-compatible server. Only publish after choosing to share your microphone or camera. Vibeler does not automatically create a replay in the current Live Room workflow; a creator may upload and publish a recording separately and must obtain any required permissions. Viewers may independently make copies; Vibeler cannot promise to prevent screenshots or recordings.
6. Canadian privacy rights
PIPEDA and similar provincial private-sector privacy laws require accountability, identified purposes, consent, limiting collection, limiting use/disclosure/retention, accuracy, safeguards, openness, individual access, and challenging compliance where they apply.
You may request access to, correction of, or deletion of personal information, or withdraw consent to future processing where consent is the applicable basis, subject to identity verification and legal or contractual limits. Some information may be retained for security, fraud prevention, tax/accounting, payment disputes, legal compliance, backups, audit logs, or to protect other users.
7. Quebec, British Columbia, and Alberta considerations
Provincial private-sector privacy laws may apply to activities in Quebec, British Columbia, or Alberta. Where those laws apply, Vibeler maintains privacy accountability, clear privacy practices, reasonable safeguards, complaint handling, and confidentiality-incident procedures appropriate to the information and activity.
Quebec law may require additional transparency, privacy governance, impact assessments, confidentiality-incident records and notices, and assessments of transfers outside Quebec. This policy is not a certification that a particular assessment or audit has been completed. Contact [email protected] about the measures applicable to your information.
8. Cross-border processing
Vibeler and its subprocessors may process and store personal information in Canada, the United States, and other jurisdictions where service providers operate. When personal information crosses provincial or national borders in commercial activity, PIPEDA may continue to apply.
9. AI processing
When you use Vibeler AI features, Vibeler sends relevant prompts, context, and generated output to OpenAI as needed to provide text generation. This is a disclosure to a third-party service provider. OpenAI's business/API commitments and privacy terms govern OpenAI's handling of data submitted to its services.
Do not put sensitive personal information, confidential information, payment information, government identifiers, health information, or children's information into AI prompts unless you have a lawful basis and understand the risks.
Stage 3 media, private requests, replies, and live participation are not automatically submitted to creator AI text tools. If you choose to include someone else's material in an AI prompt, you remain responsible for permission and the disclosed third-party processing.
When a host enables live captions, Vibeler sends the audio of permitted speakers to OpenAI for automatic transcription. Listeners do not transmit microphone audio by joining. Captions are distributed to the authorized room audience; Vibeler does not persist caption text or audio for this feature. The room discloses caption processing before you choose to speak. OpenAI's API data-handling terms and the controls applicable to Vibeler's provider account govern provider-side retention; Vibeler's transient processing is not a promise of zero retention by every provider or participant.
11. Security and retention
Vibeler uses reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information. No internet, email, payment, AI, or media service can be guaranteed completely secure.
Retention periods depend on the type of information and the reason it is held. Vibeler may retain records while your account or Stage is active and afterward as needed for operation, backups, payment/accounting, legal compliance, dispute resolution, safety, fraud prevention, and policy enforcement.
A Story or member post's expiry is an audience-access limit, not a secure-erasure deadline. Highlights may remain accessible under their channel settings. Private purchased responses, receipts, gift acceptance, delivery and refund records may remain after a subscription ends. Contact [email protected] for a deletion request; payment, safety, legal, and backup retention limits may apply.
12. Children's privacy
Vibeler is not directed to children. A parent or guardian must be involved where applicable law requires consent. If you believe a child provided personal information without the consent required by law, contact [email protected] so Vibeler can assess and address the request.
13. Contact and complaints
To exercise a privacy right or ask a privacy question, email [email protected]. Please identify the account or Stage involved and describe the request. Vibeler may verify your identity before providing access, making a correction, deleting information, or disclosing account details, and will respond within the period required by applicable law.
If you are not satisfied with Vibeler's response, you may contact the privacy regulator responsible in your jurisdiction. Other legal, security, abuse, and copyright requests can be sent to [email protected], and security reports can be sent to [email protected].