1. Information we collect
We collect information you provide directly (account email, name, billing details), information generated as you use Vibely (prompts, generated code and designs, projects, deployment metadata), and standard technical signals (IP, device, browser, timestamps) needed to deliver and secure the service.
- Account information you submit during sign-up or settings changes.
- Project content you create, including prompts, files, screenshots, and uploads.
- Connector credentials you authorize (e.g. GitHub, Supabase, Stripe) — stored encrypted.
- Usage and diagnostic logs to maintain reliability and investigate abuse.
- Payment and billing details processed through our payment providers.
- Communications you send us (support, feedback, abuse reports).
2. How we use information
We use your information to operate Vibely, run agent loops on your behalf, generate previews and deployments, process payments, and send you transactional notifications about your account.
We also use aggregated, de-identified data to improve our prompts, agent reliability, and product. We do not sell your personal information to third parties.
3. AI model providers
Vibely routes prompts to AI model providers under data-processing terms that prohibit them from training on your content. Providers receive only the input necessary to fulfill a turn and standard request metadata.
4. Sharing and disclosure
We share information with vetted sub-processors (cloud hosting, payments, analytics, model providers) under contractual confidentiality and security obligations. We disclose information when required by applicable law or court order, or to protect users from serious harm. We do not sell personal data.
5. Cookies and tracking
We use essential cookies for authentication, session management, and security. We use analytics cookies (aggregated, non-identifying) to understand how the product is used. We do not use advertising or cross-site tracking cookies. For full details, see our Cookie Policy at /cookie-policy. You may disable non-essential cookies via your browser settings.
6. Data retention
Project data is retained for as long as your account is active. You can delete projects at any time. When you close your account, we delete your personal data within 30 days, except where retention is required by law (e.g. tax records, dispute resolution obligations).
7. Security
We encrypt data in transit (TLS 1.3) and at rest (AES-256). Access to production systems is gated by SSO and multi-factor authentication and is logged. Connector credentials and tokens are stored encrypted with per-tenant scoping.
8. India — Digital Personal Data Protection Act 2023 (DPDP)
Vibely operates from India and processes personal data as a "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023. You have the following rights under the DPDP Act:
Right to access: Request a summary of personal data we hold and how it is processed.
Right to correction and erasure: Request correction of inaccurate data or erasure of data no longer needed for the stated purpose.
Right to grievance redressal: File a complaint with our Grievance Officer (see below) or with the Data Protection Board of India.
Right to nominate: Nominate a person to exercise rights on your behalf in case of death or incapacity.
To exercise any of these rights, contact [email protected]. We will respond within 30 days.
9. Grievance Officer
In accordance with the Information Technology Act 2000 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, we have appointed a Grievance Officer.
Name: Grievance Officer, Vibely
Email: [email protected]
We will acknowledge your grievance within 24 hours and resolve it within 30 days of receipt.
10. International data transfers
Vibely's infrastructure is primarily hosted in India. If you access the service from outside India, your personal data is transferred to and processed in India. For users in the European Economic Area or United Kingdom, such transfers are made under Standard Contractual Clauses (SCCs) approved by the European Commission. For users in other jurisdictions, we apply equivalent contractual protections.
11. California residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of your personal information. Vibely does not sell personal information. For full details and to submit a request, see our CCPA Notice at /ccpa.
12. EEA and UK residents (GDPR)
If you are located in the European Economic Area or the United Kingdom, our lawful basis for processing your personal data is: (a) contract performance — to provide the service you signed up for; (b) legitimate interests — to improve and secure the platform; and (c) consent — for any optional communications. You have the right to lodge a complaint with your local data protection supervisory authority.
13. Children
Vibely is not intended for use by persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact [email protected] and we will delete it promptly.
14. Changes to this policy
We may update this policy as the service evolves. Material changes will be announced via email or in-product notice at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent revision.
15. Contact
For privacy questions, requests, or grievances, email [email protected]. Vibely is operated by Mana Intelligence Pvt Ltd, incorporated in India.
Questions about this document? Email
[email protected].