Privacy Policy
Last updated: April 3, 2026 • Effective Date: January 1, 2026
At VibeAIHub, we believe privacy is a fundamental right. This policy explains how we collect, use, store, and protect your information. We are committed to transparency and giving you control over your data.
1. Information We Collect
Account Information
- Name, email address, and username
- GitHub profile information (if you connect your account)
- Account preferences and settings
- Subscription and billing information (for paid plans)
Repository Data
- Repository URLs you submit for processing
- Temporary copies of repository code during analysis
- Generated documentation and books
Usage Information
- Pages viewed and features used
- Generation history and patterns
- Device information and browser type
- IP address and approximate location
2. How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To process your repositories and generate documentation
- Account Management: To create and maintain your account
- Communication: To send you important updates, security alerts, and support responses
- Improvement: To analyze usage patterns and improve our AI models
- Security: To detect, prevent, and address technical issues and abuse
- Legal Compliance: To comply with legal obligations and enforce our terms
We never sell your personal data to third parties. We only share information as described in this policy or with your explicit consent.
3. Data Security Measures
We implement industry-leading security practices:
- Encryption: All data transmission uses TLS 1.3 encryption
- Isolated Processing: Repository code is processed in isolated, ephemeral environments
- No Persistent Storage: Your source code is deleted immediately after book generation
- Access Controls: Strict access authentication and authorization
- SOC 2 Compliance: We are SOC 2 Type II compliant
- Regular Audits: Third-party security audits and penetration testing
4. Data Retention and Deletion
Repository Code
Your source code is never stored permanently. It exists only temporarily during processing:
- Processing time: Typically 1-10 minutes
- Automatic deletion: Within 24 hours of processing completion
- No backup: Source code is never backed up or archived
Generated Books
Generated documentation is stored until you delete it or your account is closed.
Account Data
Account information is retained until you request deletion or close your account.
Your Rights
You can request data deletion at any time through your account settings or by contacting [email protected].
5. Third-Party Services and Subprocessors
We use the following trusted third parties to operate our service:
| Service | Purpose | Location |
|---|---|---|
| GitHub, Inc. | Repository access via OAuth | USA |
| Stripe, Inc. | Payment processing | USA |
| Vercel, Inc. | Application hosting | USA |
| Anthropic, PBC | AI language models | USA |
All subprocessors are subject to strict data processing agreements and security requirements.
6. International Data Transfers
VibeAIHub operates and processes data primarily in the United States. If you are located in the European Economic Area (EEA) or other regions with data protection laws:
- We transfer data using Standard Contractual Clauses (SCCs) approved by the European Commission
- We comply with GDPR requirements for international data transfers
- We maintain appropriate safeguards to protect your data
7. Cookies and Tracking Technologies
We use the following types of cookies:
- Essential Cookies: Required for authentication and security (cannot be disabled)
- Analytics Cookies: Help us understand how users interact with our service
- Preference Cookies: Remember your settings and choices
We do not use third-party advertising trackers or sell data to advertising networks. You can manage cookie preferences through your browser settings.
8. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete data
- Deletion: Request deletion of your personal data (right to be forgotten)
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to processing of your personal data
- Restriction: Request limitation of how your data is used
GDPR Rights (EU/UK)
If you are in the European Union or United Kingdom, you have additional rights under GDPR:
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
- Right to information about data breaches
CCPA Rights (California)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to equal service and price
We do not sell personal information.
9. Data Breach Notification
In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours of becoming aware, in accordance with GDPR and other applicable regulations. Notifications will be sent to the email address associated with your account.
10. Children's Privacy
VibeAIHub is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.
11. Contact and Questions
If you have questions about this privacy policy or your privacy rights, please contact us:
- Email: [email protected]
- Address: [Legal Address - Redacted for Demo]
- Response Time: Within 30 days for privacy requests
For privacy inquiries from within the EU, you also have the right to lodge a complaint with your local data protection authority.
Updates to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.