Privacy Policy

This Privacy Policy describes how Vibelets, Inc. (“Vibelets”, “we”, “us”, or “our”) collects, uses, discloses, and protects your information when you use our software-as-a-service (SaaS) platform, applications, and related services (collectively, the “Service”). Vibelets is committed to transparency, accountability, and compliance with international data protection laws such as the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the California Consumer Privacy Act of 2018 (“CCPA”), as amended by the CPRA. 

1. About Vibelets 

Vibelets is an AI-powered marketing tool that helps individuals and teams build, optimize, and analyze digital campaigns using modular components (“Viblets”). Our platform is used globally and designed with privacy and ethical AI at its core. 

2. What Information We Collect 

We collect personal and non-personal data, either directly from you or automatically through your use of the Service. 

a. Information You Provide to Us 

• Account Registration: Full name, business name, email address, password, country 

• Billing Information: Payment card details, billing address (handled securely via a third-party processor) 

• Support Requests: Correspondence and support content 

• User Content: Campaign data, uploaded media, notes, feedback 

b. Automatically Collected Information 

• Usage Data: Log data, feature interaction, clicks, timestamps 

• Device Data: IP address, browser type/version, operating system, screen resolution 

• Tracking Technologies: Cookies, pixels, web beacons, local storage 

c. Third-Party Sources 

• API integrations (e.g., Facebook Ads, Google Ads) may provide us campaign performance data 

• Authentication providers if you use Single Sign-On (SSO) (e.g., Google) 

3. How We Use Your Information 

We use your personal data for the following purposes, in accordance with Article 6 of the GDPR and relevant CCPA provisions:

4. How AI Uses Your Data 

Our platform uses AI/ML technologies to generate insights, recommend content structures, and optimize engagement predictions. Human judgment remains essential — the AI does not automatically publish or deploy campaigns. 

Key AI interactions: 

Analyzing tone, creative structure, and predicted engagement 

Recommending optimized campaign “Viblet” combinations 

Aggregating performance benchmarks 

We do not use your data to train third-party AI models. Our models may be fine-tuned internally for quality improvement in a privacy-preserving manner. 

5. Data Sharing & Disclosure 

We do not sell your data, and we do not share it with third parties except under these conditions: 

a. Service Providers 

Trusted subprocessors for: 

Cloud infrastructure  

Analytics  

Payments  

Communication (e.g., Intercom, SendGrid) 

All subprocessors are bound by data processing agreements compliant with Article 28 of the GDPR. 

b. Legal Compliance 

We may disclose your information to regulators or law enforcement if legally required under applicable laws (Art. 6(1)(c) GDPR). 

c. Business Transfers 

If Vibelets is involved in a merger, acquisition, or asset sale, user data may be transferred as part of that transaction with appropriate privacy safeguards. 

6. International Data Transfers 

If you are located in the European Economic Area (EEA), we may transfer your data to countries outside the EEA. When we do, we ensure appropriate safeguards are in place: 

Standard Contractual Clauses (SCCs) approved by the European Commission 

Data Processing Agreements with adequate protections 

Regular assessments of vendor practices 

7. Data Retention 

We retain your personal data only as long as necessary: 

You may request deletion of your data at any time (see Section 9). 

8. Your Privacy Rights 

For EEA / UK Residents (GDPR) 

You have the following rights: 

Right to access your data (Art. 15) 

• Right to rectify inaccurate data (Art. 16) 

• Right to erasure (“right to be forgotten”) (Art. 17) 

• Right to restrict processing (Art. 18) 

• Right to data portability (Art. 20) 

• Right to object to processing (Art. 21) 

• Right to withdraw consent at any time 

You may lodge a complaint with your local data protection authority  
For California Residents (CCPA/CPRA) 

You have the right to: 

• Know what personal data we collect, use, and share 

• Request deletion of your personal data 

• Opt-out of “sale” or “sharing” of data (we do not sell data) 

• Limit use of sensitive personal information 

• Non-discrimination for exercising privacy rights 

To exercise any rights, please email: [Insert contact email] 

We will respond within 30 days (GDPR) / 45 days (CCPA), with possible extensions as allowed by law. 

9. Cookies & Similar Technologies 

We use first- and third-party cookies for: 

• Session management 

• Analytics (Google Analytics, etc.) 

• Feature customization 

• A/B testing 

You can control cookies via your browser settings or consent banner. 

See our [Cookie Policy] for detailed information and opt-out mechanisms. 

10. Security Measures 

We follow industry best practices to protect your information: 

• End-to-end encryption for data in transit (HTTPS/TLS 1.2+) 

• Encryption at rest (AES-256) 

• Role-based access controls 

• Regular security audits and penetration testing 

• Multi-factor authentication (MFA) for admin access 

Despite our efforts, no method of transmission is 100% secure. 

11. Children's Privacy 

Vibelets is not intended for users under the age of 16. We do not knowingly collect or process personal data from children. If we become aware of data collected from a minor, we will promptly delete it. 

12. Changes to This Privacy Policy 

We may update this Policy to reflect changes in technology, law, or our practices. When we do, we’ll notify you via email or in-app notice. Your continued use of the Service after such changes constitutes your consent to the updated terms. 

13. Contact Us 

To ask questions or exercise your rights, contact our privacy team at: support@vibelets.com