Privacy Policy

1. Introduction

VibeUsers ("we", "our", "Service") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information.

2. Information We Collect

2.1 Information You Provide

• Email address: Used for account creation and authentication via magic link
• Landing page URL: The website you want to promote
• Payment information: Processed securely by Stripe (we do not store card details)

2.2 Automatically Collected Information

• Usage analytics: We use Umami Analytics (privacy-focused, GDPR-compliant) — page views, browser type, approximate location (country/city only). No personally identifiable information, no tracking cookies, data is anonymized and aggregated.
• Log data: IP addresses and timestamps for security and abuse prevention

3. How We Use Your Information

• Provide and maintain the Service
• Process your subscription payments via Stripe
• Analyze your landing page to extract relevant keywords
• Monitor Reddit for matching conversations
• Generate suggested replies using AI
• Improve the Service through anonymized usage analytics
• Prevent fraud and abuse

4. Data Sharing

We do NOT sell your data. We only share data with:

• Stripe: For payment processing
• Supabase: Our database and authentication provider
• OpenAI/Anthropic: For AI-powered analysis and reply generation (no personal data shared — only landing page content and Reddit posts)

We will never share your email or personal information with third parties for marketing purposes.

5. Reddit Data

• We analyze publicly available Reddit posts and comments
• We do NOT post anything on Reddit on your behalf
• We do NOT access your Reddit account
• You are responsible for any content you choose to post on Reddit

6. Data Storage and Security

• Your data is stored securely in EU-based servers (Supabase EU region)
• We use industry-standard encryption (HTTPS/TLS)
• Payment data is handled entirely by Stripe and never stored on our servers
• Email authentication uses secure magic links (no passwords stored)

7. Data Retention

• Account data is retained while your subscription is active
• After cancellation, data is deleted within 30 days
• You may request immediate deletion by contacting us

8. Your Rights (GDPR)

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured format
• Object: Opt out of certain data processing activities
• Withdraw consent: Cancel your account at any time

To exercise these rights, contact us through the support form on our website.

9. Cookies

We do NOT use tracking cookies. Umami Analytics operates without cookies. Only essential session cookies are used for authentication (magic link login).

10. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors.

11. International Data Transfers

Your data is stored and processed within the European Union. If you access the Service from outside the EU, your data may be transferred to EU servers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our website.

13. Contact

For privacy-related questions or to exercise your rights, contact us via the support form on our website.

14. Legal Basis for Processing (GDPR)

• Contractual necessity: To provide the Service you subscribed to
• Legitimate interests: To improve the Service and prevent fraud
• Consent: For optional features (if any are added in the future)