Privacy Policy

1. Introduction

VibeCom ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered startup advisory service.

We do not sell your personal information. We never sell, rent, or trade your personal data or startup ideas to third parties for their marketing or commercial purposes.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and authentication credentials
• Startup Ideas and Business Information: Ideas, business concepts, market research queries, and related business information you input into the Service
• Payment Information: Billing details processed securely through our payment processor
• Communication Data: Messages, feedback, and support requests you send to us

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, and device identifiers
• Cookies and Tracking: We use cookies and similar technologies to enhance user experience and analyze usage patterns. See our Cookie Policy for details.

3. How We Use Your Information

We use the collected information for the following purposes:

• Provide Services: Generate AI-powered analysis, competitor research, market sizing, and startup validation reports
• Improve the Service: Understand usage patterns and make the product better
• Personalization: Customize your experience and provide relevant recommendations
• Communication: Send service updates and respond to your inquiries
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with legal obligations and protect our rights

3.1 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Contract: Processing necessary to provide the Service and fulfill our agreement with you (account management, AI analysis, payment processing)
• Legitimate Interests: Processing for purposes such as improving the Service, analytics, and security, where our interests are not overridden by your rights
• Legal Obligation: Processing required to comply with applicable laws and regulations
• Consent: Processing for marketing communications, which you may withdraw at any time

3.2 AI Processing and Your Data

When you use the Service, your inputs are processed by AI to generate analysis and recommendations. We do not use your specific startup ideas or business information to train or fine-tune AI models. Aggregated, anonymized usage data may be used to improve our product and AI capabilities.

The AI generates outputs based on your inputs and general knowledge. These outputs are automated suggestions — no decisions with legal or significant personal effects are made automatically based solely on AI output.

4. Confidentiality of Your Startup Ideas

We understand that your startup ideas are valuable and confidential. We commit to:

• Never share your specific startup ideas, business plans, or proprietary information with third parties
• Never sell your data or use your ideas to train AI models
• Protect your data with industry-standard security measures so only you can access it
• Limit access to your data to authorized personnel who need it to provide the Service
• Allow you to delete your ideas and associated data at any time

4.1 Your idea stays yours — always

We built VibeCom so founders can think out loud without fear. Your startup ideas, business plans, and market research are never sold and never used to train AI models. Your content is private by default — only you can see it. If you choose to create a share link, the shared conversation or report becomes accessible to anyone with that link. You can revoke a share link at any time.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following limited circumstances:

5.1 Service Providers

We work with trusted third-party service providers who help us operate the Service. All service providers are contractually required to protect your information and use it only for the purposes we specify. Our key providers include:

• AI Processing: Google (Gemini), Anthropic (Claude), and OpenRouter — to generate analysis and recommendations from your inputs
• Authentication: Google Firebase — to manage sign-in and account security
• Payments: Stripe — to process subscriptions and payouts securely (we never store your card details)
• Hosting & Infrastructure: Vercel and cloud database providers — to serve and store your data
• Analytics: Google Analytics — to understand aggregate usage patterns (with your consent)

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

5.4 Affiliate Program

If you participate in our affiliate program, we collect and process your referral code, referred user identifiers, commission amounts, and payout details. This data is used to track referrals, calculate commissions, and process payments. We do not share your affiliate earnings or referral data with third parties except our payment processor (Stripe) for payout processing. Referred users may see the referring affiliate's referral code but not their identity.

6. Data Security

We implement industry-standard security measures to protect your information, including encryption of data in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information and startup ideas
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing communications at any time
• Restriction or Objection: Request that we limit or stop processing your information for certain purposes

Users in the European Economic Area (EEA) have additional rights under the GDPR. To exercise any of these rights, please contact us at Memuat...

7.1 California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain legal exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. Because we do not sell personal information, there is no need to opt out.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California privacy rights, please contact us at Memuat.... We will verify your identity before fulfilling any request.

8. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. You may delete your account and data at any time from your profile settings — deletion is immediate and permanent, except where retention is required by law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us.

11. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings. For more details, see our Cookie Policy.

11.1 Do Not Track

Some browsers send a "Do Not Track" (DNT) signal. There is currently no industry standard for how websites should respond to DNT signals. At this time, we do not alter our data collection or use practices in response to DNT signals. If you decline analytics cookies via our cookie consent banner, we will not place analytics tracking cookies regardless of your DNT setting.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us at: