Privacy Policy

Effective Date: March 20, 2026 | Website: vibezai.app | Support: support@vibezai.app

At Vibez AI, we are committed to handling your personal data responsibly, transparently, and in accordance with applicable data protection laws. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have.

By using Vibez AI, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

• Email address (required for account creation and login)
• Password (hashed and encrypted — never stored in plain text)
• Full name and profile picture (optional)

Content You Create:

• Photos and images you upload for AI editing
• Text prompts you enter to generate or edit images
• AI-generated images saved to your gallery

Payment Information:

• All payment processing is handled entirely by DodoPayments, our Merchant of Record
• We never receive, view, or store your full payment card details
• We receive only transaction confirmation data (e.g., order ID, plan type, amount)

1.2 Information Collected Automatically

When you use the platform, we automatically collect:

• Browser type, operating system, device type, and screen resolution
• Features used, pages visited, and session duration
• IP address (used for security and fraud prevention only)
• Error and crash logs (used for debugging and platform stability)

1.3 Information We Do NOT Collect

• Your precise GPS or physical location
• Your contacts or address book
• Your browsing history outside of Vibez AI
• Data from other apps or third-party services not listed in this policy

2. How We Use Your Information

2.1 To Deliver the Services

• Create and manage your account
• Process photos and generate AI images
• Manage your credit balance and subscription status
• Send transaction receipts and service notifications

2.2 To Improve the Services

• Analyse anonymised usage patterns to improve features and performance
• Identify and resolve bugs and errors
• Optimise platform speed and reliability

2.3 Communication

• Respond to support requests
• Send important service and account updates
• Send marketing communications only if you have explicitly opted in

We do NOT:

• Sell your personal information to any third party
• Use your photos or uploads for advertising purposes
• Use your uploaded or generated images to train, fine-tune, or improve any AI model
• Send unsolicited marketing emails

3. Your Photos & AI Processing

Your photos are private. We do not share, sell, publish, or display your uploaded photos to any person or organisation outside of those listed in Section 4.

No AI training. Your uploaded photos and AI-generated images are never used to train, fine-tune, or improve any AI model — by us or by any third party we work with.

Real-time processing. Photos are sent to our AI processing provider, fal.ai, solely to deliver your requested output. fal.ai processes images in real-time and does not retain them for training purposes. Please refer to fal.ai's Privacy Policy for details on their data handling practices.

Storage. Your images are stored on Cloudflare R2 and remain in your gallery until you delete them or close your account.

Deletion. You may delete any photo from your gallery at any time. Upon account deletion, all associated data is removed within 30 days, subject to any legal retention obligations.

4. How We Share Your Information

We do not sell your personal data. We share information only with the following service providers, and only to the extent necessary to deliver the Services:

• DodoPayments — Secure payment processing and Merchant of Record services
• fal.ai — AI image generation and photo editing processing
• Supabase — Database management and user authentication
• Cloudflare R2 — Encrypted file storage
• Vercel — Application hosting and content delivery
• PostHog — Anonymised product analytics and error tracking

All service providers are contractually obligated to protect your data and may only process it for the purposes for which it is shared. We do not permit them to use your data for their own commercial purposes.

We may also disclose your information where required to do so by law, court order, or regulatory authority.

5. Data Storage & Security

Technical Safeguards:

• All data is encrypted in transit using TLS/HTTPS
• All data is encrypted at rest
• User authentication is handled securely via Supabase Auth
• Our infrastructure providers maintain SOC 2 compliance

Payment Security:

• All payment processing is PCI DSS compliant via DodoPayments
• We never store, log, or have access to complete payment card information

While we implement industry-standard security measures, no system is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you in accordance with applicable law.

6. Data Retention

Active accounts:

• Account data: Retained for as long as your account is active
• Photos and generated images: Retained until you delete them
• Usage and analytics data: Retained for 12–24 months

Deleted accounts:

• Most personal data is deleted within 30 days of account deletion
• Payment transaction records: Retained for 7 years to comply with financial and legal obligations

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate data via your profile settings or by contacting us
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a structured, machine-readable format
• Opt-out: Unsubscribe from non-essential communications at any time

To exercise any of these rights, email support@vibezai.app. We will respond within 30 days. If you are located in the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority.

8. Cookies & Tracking

Essential Cookies: Used for session management, security, and authentication. These are required for the platform to function and cannot be disabled.

Analytics (PostHog): Used for anonymised usage statistics and error tracking. This can be disabled via your browser settings or by contacting us.

We do NOT use:

• Advertising or targeting cookies
• Cross-site tracking technologies
• Third-party ad networks

9. Children's Privacy

Vibez AI is not intended for children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account or provided us with personal data, please contact support@vibezai.app and we will delete the data promptly.

10. International Data Transfers

Your data may be processed and stored in the United States and other countries where our infrastructure providers operate. Where we transfer data outside your jurisdiction, we take steps to ensure appropriate safeguards are in place in accordance with applicable data protection law, including the use of standard contractual clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this document. For material changes, we will notify you by email or in-app notification where reasonably practicable. Your continued use of the Services after any update constitutes your acceptance of the revised policy.

12. Contact Us

For any privacy-related questions, requests, or concerns:

Email: support@vibezai.app

Website: vibezai.app

Response time: Within 48 hours

BY USING VIBEZ AI, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO THE COLLECTION AND USE OF YOUR INFORMATION AS DESCRIBED HEREIN.