Privacy Policy

1. Introduction

VibeCEO ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using VibeCEO, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address - for account creation and communication
• Name - first name and last name
• Password - securely hashed and stored
• Company information - company name and job title (optional)

2.2 Usage Data

We automatically collect:

• Chat conversation history and messages
• Login timestamps and session data
• Feature usage statistics
• Device information (browser type, operating system)
• IP address and geographic location

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information on our servers. Stripe collects:

• Credit/debit card details
• Billing address
• Payment transaction history

3. How We Use Your Information

We use collected information for:

• Service Delivery: Provide and maintain our AI advisory platform
• Account Management: Create and manage your account
• Communication: Send service updates, security alerts, and marketing messages
• Personalization: Improve AI responses based on your usage patterns
• Analytics: Understand how users interact with our Service
• Security: Detect and prevent fraud or unauthorized access
• Compliance: Meet legal obligations and resolve disputes
• Product Improvement: Enhance features and develop new capabilities

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt encryption
• Data is transmitted over HTTPS (SSL/TLS encryption)
• Database access is restricted and monitored
• Regular security audits and updates
• Secure cloud infrastructure (AWS/Vercel)

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Sharing and Disclosure

We do NOT sell your personal information. We may share data with:

5.1 Service Providers

• Stripe: Payment processing
• Google Analytics: Website analytics
• Email Service: Gmail SMTP for transactional emails
• Cloud Hosting: AWS/Vercel for infrastructure

5.2 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations (subpoenas, court orders)
• Protect our rights and property
• Prevent fraud or security threats
• Protect user safety

6. Your Data Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information through your account settings
• Deletion: Request deletion of your account and associated data
• Data Portability: Export your conversation history
• Opt-Out: Unsubscribe from marketing emails (service emails still required)
• Withdraw Consent: Revoke permissions at any time

To exercise these rights, use the contact form at the bottom of this page.

7. Cookies and Tracking Technologies

We use cookies and similar technologies for:

• Essential Cookies: Required for login and security
• Analytics Cookies: Google Analytics tracks usage patterns
• Functional Cookies: Remember your preferences

You can control cookies through your browser settings, but disabling certain cookies may affect functionality.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services.

After account deletion:

• Personal information is deleted within 30 days
• Anonymized usage data may be retained for analytics
• Financial records retained for 7 years (legal requirement)
• Backup copies removed within 90 days

9. Children's Privacy

VibeCEO is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, contact us immediately for deletion.

10. International Users

VibeCEO operates in the United States. If you are accessing from outside the US, your data may be transferred to and processed in the United States.

By using our Service, you consent to this transfer.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to deletion of personal information
• Right to opt-out of sale (we do not sell data)
• Right to non-discrimination for exercising rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification for material changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.