Privacy Policy
At Vibie.app, we believe in radical transparency and rigorous privacy protections. This Privacy Policy details how we collect, process, store, and automatically purge data across our interactive video platform.
1. Information We Collect
We collect information in three distinct contexts:
When you create an account or organization on Vibie, we collect your full name, business email address, company name, and hashed passwords (secured using bcrypt).
Payments are processed through our PCI-DSS Level 1 compliant partner, TiloPay. We store only tokenized card references, masked last 4 digits, expiration dates, and card brand identifiers for recurring billing. We never store raw credit card numbers or CVV codes.
When individuals interact with a public Vibie video funnel, we collect the submitted responses with their explicit consent, including: recorded video and audio files, multiple-choice selections, written text inputs, ratings, calendar appointments, uploaded files, IP addresses (for rate limiting and fraud prevention), and browser user-agent strings.
2. Media Retention Lifecycle & Automated Deletion
Automated Media Purge Schedule
To respect respondent privacy, minimize data liability, and uphold strict data hygiene:
- Free Plan: Video and audio media files are retained for thirty (30) calendar days from collection.
- Paid Plans (Starter, Pro, Scale): Video and audio media files are retained for ninety (90) calendar days from collection.
- Enterprise Plan: Custom retention schedules as agreed per SLA.
Upon expiration of the retention threshold, media files are automatically and irreversibly deleted from Cloudflare Stream and application storage.
Account administrators have the ability to download video recordings, export full response archives (via CSV / Webhooks), or manually purge responses at any time prior to the expiration threshold.
3. AI Inference & Third-Party Sub-Processors
Vibie Intelligence uses vetted cloud infrastructure to deliver real-time speech-to-text transcriptions, sentiment analysis, response summarization, and AI video avatars.
Zero-Data-Retention (ZDR) AI Guarantee:
We enforce strict data protection agreements with all third-party AI inference providers:
- Your video audio and transcript text are processed transiently in memory for inference only.
- Data is never retained by inference providers after output generation.
- Your customer data is never used to train, fine-tune, or improve any public or private AI foundational models.
Authorized Infrastructure Sub-Processors
| Sub-Processor | Purpose | Location | Data Policy |
|---|---|---|---|
| Cloudflare Stream | Adaptive HLS video encoding, CDN streaming & storage | Global Edge / USA | 90-day retention, encrypted at rest |
| TiloPay | Payment gateway & tokenized recurring subscription charges | Panama / Global | PCI-DSS Level 1 certified |
| AI Inference Infrastructure | Speech-to-text, sentiment analysis & avatar synthesis | USA / Global | Zero Data Retention (ZDR) |
| PostgreSQL / Redis | Database state, organization records, token session cache | Dedicated VPS | Encrypted backups & TLS in transit |
4. Your Data Rights (GDPR & CCPA Compliance)
Regardless of your geographic location, Vibie honors fundamental global data privacy rights for all users and respondents:
- Right to Access & Portability: Request a copy of all personal data held about you in a structured, machine-readable format (JSON/CSV).
- Right to Erasure ("Right to be Forgotten"): Request immediate permanent deletion of your account, funnels, or video responses.
- Right to Rectification: Correct inaccurate or incomplete personal information via your account profile.
- Right to Withdraw Consent: Revoke microphone/camera recording access in your browser at any time before submitting.
To exercise any of these rights, contact us at [email protected]. We process all verified requests within thirty (30) days without charge.
5. Security & Encryption Standards
We implement defense-in-depth technical and operational security measures:
- Encryption in Transit: All HTTP traffic, API endpoints, and video streams enforce modern TLS 1.3 encryption.
- Encryption at Rest: Video assets, database volumes, and backup archives are encrypted using industry-standard AES-256.
- Authentication Architecture: Multi-tenant isolation, role-based access control (RBAC), and dual-JWT token authentication with Redis blacklist instant revocation.
6. Cookies & Tracking Technologies
Vibie uses only strictly necessary authentication cookies (fluvio_access_token, fluvio_refresh_token) required to keep your session secure across page reloads and device interactions. We do not use third-party advertising trackers, cross-site behavioral tracking cookies, or sell user personal information to data brokers.
7. Contact Our Data Protection Officer
If you have questions, feedback, or concerns regarding our privacy practices or data processing agreements, please reach out to our Data Protection team at: