Privacy Policy

At Vibeler, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Services. We believe in transparency and want you to understand exactly how your data is handled.

By using Vibeler, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Services.

1. Information We Collect

1.1 Information You Provide

We collect information you directly provide to us, including:

1.2 Information Automatically Collected

When you use our Services, we automatically collect certain information:

1.3 Information from Third Parties

We may receive information about you from:

• Payment processors (Stripe) for transaction verification
• Email service providers (SendGrid) for delivery analytics
• AI service providers (OpenAI) for text content generation
• Analytics services that help us improve our Services

2. How We Use Your Information

2.1 Providing Services

• Create and manage your account
• Enable content creation and publishing
• Facilitate subscriptions and payments
• Process AI content generation requests
• Deliver newsletters and email notifications
• Provide customer support

2.2 Improving & Personalizing

• Analyze usage patterns to improve features
• Personalize content recommendations
• Optimize performance and user experience
• Conduct research and development
• Test new features and functionality

2.3 Safety & Security

• Detect and prevent fraud and abuse
• Enforce our Terms of Service
• Protect against security threats
• Verify user identity
• Investigate policy violations

2.4 Communication

• Send transactional emails (receipts, confirmations)
• Provide product updates and announcements
• Respond to your inquiries
• Send marketing communications (with your consent)
• Notify you of changes to our policies

2.5 Legal Compliance

• Comply with legal obligations
• Respond to legal requests and court orders
• Enforce our rights and agreements
• Protect the rights and safety of our users

3. Information Sharing & Disclosure

3.1 Public Information

When you create content on Vibeler, certain information is public by default:

• Your profile information (name, bio, photo)
• Content you post to public channels
• Comments and reactions on public content
• Stage and channel descriptions

3.2 With Other Users

We share information with other users as necessary:

• Creators can see subscriber lists and engagement analytics
• Subscribers can view content based on their subscription tier
• Comments and interactions are visible according to privacy settings

3.3 Service Providers

We share information with trusted third-party service providers who help us operate our Services:

• Stripe: Payment processing and financial transactions
• SendGrid: Email delivery and newsletter distribution
• AWS/R2: Cloud storage and content delivery
• OpenAI: AI content generation services

These providers are contractually required to protect your data and use it only for providing their services to us.

3.4 Business Transfers

If Vibeler is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.5 Legal Requirements

We may disclose your information if required to:

• Comply with legal obligations or court orders
• Respond to lawful requests from government authorities
• Enforce our Terms of Service
• Protect the rights, property, or safety of Vibeler or others
• Prevent fraud or illegal activity

3.6 With Your Consent

We may share your information for other purposes with your explicit consent.

4. Cookies & Tracking Technologies

4.1 What We Use

We use cookies, web beacons, and similar tracking technologies to:

• Remember your preferences and settings
• Authenticate your account
• Analyze usage patterns and traffic
• Measure advertising effectiveness
• Provide security features

4.2 Types of Cookies

4.3 Your Cookie Choices

Most browsers allow you to control cookies through their settings. However, blocking certain cookies may limit your ability to use some features of our Services.

5. Data Retention

5.1 Retention Period

We retain your information for as long as necessary to:

• Provide the Services
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Maintain business records

5.2 Account Deletion

When you delete your account:

• Your profile and personal information are removed from public view
• Some information may be retained for legal or operational purposes
• Cached or archived content may persist temporarily on servers
• Financial records are retained as required by law and accounting standards

5.3 Content Preservation

If you're a creator with active subscribers, some content may be retained to fulfill contractual obligations to your audience even after account deletion.

6. Data Security

6.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Secure authentication with JWT tokens
• HMAC protection for media files
• Regular security audits and penetration testing
• Access controls and monitoring
• Secure backup and disaster recovery procedures

6.2 Your Responsibility

You are responsible for maintaining the security of your account:

• Use a strong, unique password
• Do not share your account credentials
• Enable two-factor authentication
• Log out from shared devices
• Report suspicious activity immediately

6.3 No Guarantee

While we strive to protect your information, no security system is impenetrable. We cannot guarantee absolute security of your data.

7. Your Privacy Rights

7.1 Access & Portability

You have the right to:

• Access your personal information
• Request a copy of your data in a portable format
• Understand how your data is being used

7.2 Correction & Update

You can update your account information at any time through your account settings. Contact us if you need assistance correcting inaccurate data.

7.3 Deletion

You can request deletion of your account and personal information. Some information may be retained as described in Section 5.

7.4 Objection & Restriction

You have the right to:

• Object to certain data processing activities
• Restrict how we use your information
• Opt out of marketing communications
• Disable certain tracking technologies

7.5 Canadian Privacy Rights (PIPEDA)

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

• Know why your personal information is being collected
• Know how your information will be used
• Access your personal information
• Challenge the accuracy and completeness of your information and request amendments
• Withdraw consent for certain uses of your information
• File a complaint with the Office of the Privacy Commissioner of Canada

7.6 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared
• Right to delete personal information
• Right to opt out of sale of personal information
• Right to non-discrimination for exercising privacy rights

Note: Vibeler does not sell your personal information.

7.7 European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR):

• Right of access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

8. Children's Privacy

Vibeler is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information promptly.

If you believe we have collected information from a child under 18, please contact us immediately at [email protected].

9. International Data Transfers

Vibeler is based in Canada. If you access our Services from outside Canada, your information may be transferred to, stored, and processed in Canada and other countries where we or our service providers operate (including the United States for certain AI and cloud services).

We comply with applicable Canadian data protection laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), and take steps to ensure that your information receives adequate protection, including through:

• Compliance with PIPEDA and provincial privacy legislation
• Standard contractual clauses for international transfers
• Data processing agreements with service providers
• Appropriate safeguards when transferring data across borders

10. Third-Party Services

10.1 Third-Party Links

Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10.2 Embedded Content

Content on Vibeler may include embedded content from third parties (e.g., videos, social media posts). These third parties may collect data about you when you interact with their embedded content.

10.3 Social Media

If you connect your Vibeler account to social media platforms, those platforms may collect information about your use of our Services according to their own privacy policies.

11. AI & Data Processing

11.1 AI Content Generation

When you use our AI-powered content generation features, we process your inputs and prompts through third-party AI services such as OpenAI. These services are bound by their own privacy policies and data usage agreements.

11.2 Training Data & Your Rights

Vibeler's Commitment: We do NOT use your personal content, creative work, or AI prompts to train AI models—neither our own nor for third-party use. Your content is yours alone.

Third-Party AI Providers: When you use our AI services, your inputs are processed by third-party providers such as OpenAI. These providers have their own data retention and training policies:

• OpenAI: API inputs are not used for training by default per their enterprise API terms
• Other Providers: Check their respective privacy policies for specifics

We only partner with AI providers that respect creator intellectual property and offer appropriate protections for commercial use.

11.3 Document Intelligence & RAG

If you upload documents for AI-assisted content generation (Retrieval-Augmented Generation), we create vector embeddings of your documents. These embeddings:

• Are stored securely in our database
• Are only accessible to you and your authorized users
• Can be deleted along with the source documents
• Are used solely for your content generation purposes

11.4 AI Output Ownership

You own the content generated through our AI services. We do not claim rights to AI-generated content beyond what's necessary to provide the Services.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the updated policy on our website
• Notify you via email or in-app notification for material changes
• Obtain your consent where required by law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For privacy-related requests (access, deletion, correction), please include:

• Your full name and email address associated with your account
• A detailed description of your request
• Any relevant account identifiers

We will respond to your request within 30 days (or as required by applicable law).