Privacy Policy

Introduction

Welcome to Vibeflow. We provide a comprehensive task management solution that helps teams and individuals organize projects, manage tasks, and collaborate effectively. This privacy policy explains how we handle your personal data when you use our services. Your privacy is our priority.

This policy applies to our website at vibeflow.com, our web application, and any related services we provide (collectively, our "Services").

Information We Collect

Personal Information

We may collect the following types of personal information:

• Account Information: Name, email address, and password when you create an account
• Profile Information: Optional profile details you choose to provide
• Project and Task Data: Content you create, including project names, task descriptions, comments, and attachments
• Communication Data: Messages you send through our support channels
• Payment Information: Billing details and payment method information (processed securely through third-party payment processors)

Automatically Collected Information

• Usage Data: How you interact with our Services, including features used and time spent
• Device Information: Device type, operating system, browser type, and IP address
• Log Data: Server logs that may include IP addresses, access times, and error information
• Cookies and Tracking: We use cookies and similar technologies for authentication, preferences, and analytics

How We Use Your Information

We use your personal information for the following purposes:

• Providing and maintaining our Services
• Creating and managing your account
• Processing payments and managing subscriptions
• Communicating with you about your account and our Services
• Providing customer support
• Improving our Services through analytics and user feedback
• Ensuring security and preventing fraud
• Complying with legal obligations
• Sending you important updates about our Services (with your consent for marketing communications)

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers who help us operate our Services:

• Hosting and Infrastructure: Supabase for database and authentication services
• Payment Processing: Stripe for secure payment processing
• Analytics: Analytics providers to understand how our Services are used
• Communication: Email service providers for transactional and support communications

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Prevent fraud or security issues

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure hosting infrastructure
• Employee training on data protection

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to provide our Services and fulfill the purposes outlined in this privacy policy. Specifically:

• Account information is retained while your account is active
• Project and task data is retained according to your account settings
• Payment information is retained as required for accounting and legal purposes
• Usage and log data is typically retained for up to 2 years for analytics and security purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

You can access and export your data through your account settings or by contacting us.

Correction and Updates

You can update your account information and profile details at any time through your account settings.

Deletion

You can delete your account and associated data through your account settings or by contacting us.

Marketing Communications

You can opt out of marketing communications by using the unsubscribe link in emails or updating your preferences.

Cookies

You can control cookies through your browser settings, though this may affect the functionality of our Services.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences and settings
• Analyze how our Services are used
• Improve our Services and user experience
• Provide security features

You can control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

International Data Transfers

Our Services are hosted and operated in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

We ensure that such transfers are conducted in accordance with applicable data protection laws and implement appropriate safeguards to protect your information.

Children's Privacy

Our Services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you of significant changes via email or through our Services
• Post the updated policy on our website

Your continued use of our Services after any changes indicates your acceptance of the updated privacy policy.

Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

We will respond to your inquiry within 30 days of receipt.