Privacy Policy
Last updated: May 2026
1. Information we collect
We collect the following information when you use VibeDay:
- Account information: email address, password (hashed), name, and brand identity you provide during signup.
- Connected social accounts: when you connect Instagram, Facebook, or TikTok accounts, we receive an OAuth access token and basic profile information (account name, account ID, profile photo) from those platforms.
- Content you create: topics, captions, images, video, scheduling preferences, and any content you upload to VibeDay.
- Billing information: processed by Stripe; we do not store credit card numbers on our servers.
- Usage data: pages visited, features used, generation counts, and error logs.
- Device information: browser type, operating system, IP address.
2. How we use your information
- Provide and operate the Service, including AI generation and scheduled publishing
- Process subscriptions and payments
- Send transactional and account-related communications
- Improve the Service and develop new features
- Detect and prevent fraud, abuse, and policy violations
- Comply with legal obligations
3. How we share information
We share information only as needed to operate the Service:
- AI providers: OpenAI, Anthropic, and Google process prompts and return generated content. They process inputs under their own terms.
- Social platforms: when you publish content, we send it to the connected platform via their API.
- Infrastructure providers: hosting (Vercel), database (Supabase), email (Resend), analytics (PostHog), payments (Stripe). These vendors are bound by confidentiality and data processing terms.
- Legal requirements: we may disclose information when required by law, subpoena, or to protect our rights and the safety of others.
We do not sell your personal information to third parties. We do not share your content with other VibeDay customers.
4. Data retention
We retain account information and content for as long as your account is active. If you delete your account, we delete your personal information and content within 30 days, except where retention is required by law (e.g., billing records for tax purposes).
5. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal information. To exercise these rights:
- Account settings allow you to download your data and delete your account at any time
- For other requests, email legal@vibeday.com
To request deletion of data we received from connected social platforms, see our Data Deletion Instructions.
6. Cookies and tracking
We use essential cookies for authentication and analytics cookies (with your consent) to understand product usage. You can opt out of analytics via your account settings.
7. Children
VibeDay is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, email legal@vibeday.com and we will delete it.
8. Security
We use industry-standard security measures including encryption in transit (TLS) and at rest (AES-256), access controls, and audit logging. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
9. International transfers
We process data in the United States. If you are located outside the US, your data will be transferred to and processed in the US under standard contractual clauses.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced via email or in-app notification at least 30 days before taking effect.
11. Contact
Questions or requests? Email legal@vibeday.com or write to: VibeDay, [LLC address pending] .
This Privacy Policy draft is in active legal review. The finalized version will be published before any paying customer is billed.