Privacy Policy

1. Introduction

Vibefolio ("we," "us," "our," or "Company"), operated by Vibe Coding LLC, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered portfolio creation service ("Service").

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Email address and name (through authentication)
• Username and display name
• Profile images and professional photos
• Welcome messages and personal descriptions
• Professional headlines and keywords

Resume and Professional Information (HIGHLY SENSITIVE):

Portfolio Content:

• Portfolio names, descriptions, and settings
• Case study content (headlines, descriptions, highlights)
• Project details and professional accomplishments
• Image uploads and captions
• Custom styling preferences and design choices

Payment Information:

• Payment processing data (handled by Stripe)
• Billing addresses and contact information
• Purchase history and payment details

3. How We Use Your Information

3.1 AI-Powered Portfolio Generation

3.2 Service Provision

• Creating and customizing digital portfolios
• Managing multiple portfolio versions and layouts
• Providing sharing and collaboration features
• Enabling password protection and access controls
• Authenticating users and managing accounts
• Processing one-time payments and managing accounts

3.3 Service Improvement

• Analyzing usage patterns to improve AI recommendations
• Monitoring service performance and reliability
• Using aggregated, anonymized data to improve AI accuracy
• Providing customer support and technical assistance

4. How We Share Your Information

4.1 Third-Party Service Providers

OpenAI (AI Processing) - CRITICAL DATA SHARING:

Other Service Providers:

• Cloudinary (Image Storage): Uploaded images, file metadata, captions
• Stripe (Payment Processing): Payment information, billing addresses, customer data
• Clerk (Authentication): Email addresses, names, authentication data
• Resend (Email Communications): Email addresses, notification content

4.2 Data We DO NOT Share

5. AI Processing and Data Handling

5.1 Artificial Intelligence Disclosures

5.2 AI Limitations and User Responsibility

• AI-generated content may contain inaccuracies or biases
• Users are responsible for reviewing and verifying all AI-generated content
• We do not guarantee the accuracy or suitability of AI-generated portfolios
• AI processing may not capture all nuances of your professional experience

6. Data Security

6.1 Technical Safeguards

• Data encrypted in transit using TLS 1.3
• Data encrypted at rest using AES-256 encryption
• Multi-factor authentication for administrative access
• Regular security audits and vulnerability assessments
• Secure cloud hosting with enterprise-grade protections

6.2 Breach Notification

• Users notified within 72 hours of confirmed breaches affecting personal data
• Regulatory authorities notified as required by law
• Detailed information about the breach and remediation steps
• Free credit monitoring for breaches involving sensitive data

7. Your Privacy Rights

7.1 California Privacy Rights (CCPA/CPRA)

California residents have the following rights regarding their personal information:

7.2 General Privacy Rights (All Users)

• Request a copy of your personal information
• Download your portfolio content and data
• Update your account information and preferences
• Delete specific pieces of content or information
• Close your account and request data deletion

8. How to Exercise Your Rights

8.1 Contact Methods

8.2 Request Processing

• Most requests processed within 30 days
• Complex requests may take up to 45 days
• You will receive confirmation and status updates
• We may request additional information to verify your identity

9. Data Retention

9.1 Retention Periods

• Account Data: Retained while account is active
• Resume and Professional Data: Retained while account is active or until deletion requested
• AI-generated Content: Retained for service provision until account deletion
• Usage Logs: Retained for 2 years for service improvement
• Payment Records: Retained for 7 years as required by law

9.2 Data Deletion

• Account deletion: Most data deleted within 30 days
• Portfolio deletion: Content removed immediately from public access
• Resume data deletion: Removed from our systems within 30 days
• Some data may be retained for legal compliance or security purposes

10. International Data Transfers

10.1 Cross-Border Processing

• Primary data processing in the United States
• Third-party services may process data globally
• Standard Contractual Clauses (SCCs) for EU transfers
• Additional safeguards for sensitive data transfers

10.2 European Union (GDPR)

• Right to access, rectification, erasure, and portability
• Right to restrict processing and object to processing
• Right to withdraw consent and lodge complaints
• Contact support@vibefolio.ai for EU-related inquiries

11. Children's Privacy

11.1 Age Requirements

• Users must be at least 13 years old (or minimum age in their jurisdiction)
• Users under 18 require verifiable parental consent
• Enhanced protections for users under 16
• Special handling for student and educational accounts

11.2 Parental Rights

• Parents can review and delete their child's information
• Parents can refuse further collection or use of information
• Limited data collection for users under 18
• No behavioral advertising to minors

12. Updates to This Privacy Policy

• Users notified of material changes via email
• Updated policy posted on website with effective date
• 30-day notice period for significant changes
• Continued use constitutes acceptance of changes

13. Contact Information