vibedasher

Privacy Policy

Last Updated: August 19, 2026

Introduction

At Vibedasher, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Business Intelligence platform.

Information We Collect

Personal Information

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, password, and company details
  • Profile Information: Job title, department, and preferences
  • Payment Information: Billing address and payment method details (processed securely through Stripe)
  • Communication Data: Messages, feedback, and support requests

Usage Information

We automatically collect certain information when you use our platform:

  • Log Data: IP address, browser type, operating system, and access times
  • Usage Analytics: Features used, dashboards created, and interaction patterns. We use PostHog, including session replay, which records your interactions with the application interface.
  • Device Information: Device type, unique device identifiers, and mobile network information
  • Cookies and Similar Technologies: We use cookies to enhance your experience and analyze usage

Data You Upload

When using Vibedasher, you may upload or connect your data sources:

  • Database Connections: Connection strings and credentials (encrypted at rest)
  • Uploaded Files: CSV, Excel, and other data files
  • Query Results: Cached query results for performance optimization
  • Visualizations: Charts, dashboards, and reports you create

How We Use Your Information

We use the information we collect to:

  • Provide Services: Operate, maintain, and improve our platform
  • Process Transactions: Handle billing and payment processing
  • Communicate: Send service updates, security alerts, and support messages
  • Personalization: Customize your experience and provide relevant features
  • Analytics: Analyze usage patterns to improve our services
  • Security: Detect, prevent, and address security incidents and fraud
  • Compliance: Meet legal obligations and enforce our terms

Data Storage and Security

Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption: Data is encrypted in transit (HTTPS, TLS 1.2 minimum and TLS 1.3 with modern clients) and at rest (AES-256)
  • Access Controls: Role-based access control, with account isolation enforced server-side on every request (multi-factor authentication for end users is on our roadmap, not yet available)
  • Monitoring: structured application logging in AWS CloudWatch
  • Infrastructure: hosted on AWS, whose own infrastructure holds SOC 2 Type II and ISO 27001 certifications (these are AWS's certifications, not Vibedasher's)

Data Retention

  • Account Data: Retained while your account is active and for 90 days after deletion
  • Application Logs: Retained 7 to 14 days depending on the service
  • Backups: Point-in-time recovery on our primary datastores, with a rolling 35-day window
  • Legal Holds: Data may be retained longer if required by law

Data Sharing and Disclosure

Third-Party Services

We share data with trusted third-party service providers:

  • Cloud Infrastructure: AWS (data hosting and processing)
  • Payment Processing: Stripe (payment transactions)
  • Product Analytics: PostHog (usage analytics and session replay)
  • Communication: Email service providers for transactional emails
  • AI Services: OpenRouter, which routes your prompts to the underlying model provider you select (Anthropic, Google, Mistral, DeepSeek, Meta, xAI and others). This applies only when you use AI-powered features, and OpenRouter is a sub-processor for every such request.

All third parties are contractually obligated to protect your data and use it only for specified purposes.

We may disclose your information if required by law or in response to:

  • Valid legal processes (subpoenas, court orders)
  • Requests from law enforcement or government agencies
  • Protection of our rights, property, or safety
  • Investigation of fraud or security issues

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Your Rights and Choices

Data Access and Control

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data — available self-serve in the product
  • Portability: Export your data in a machine-readable format
  • Objection: Opt out of certain data processing activities
  • Restriction: Limit how we process your data

Account deletion is built into the product. The other rights are not yet self-serve — email privacy@vibedasher.com and we will action them for you.

You can control cookie settings through your browser. Note that disabling cookies may affect platform functionality.

Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link or updating your preferences in your account settings.

On-Premise Deployment

For customers using our on-premise or self-hosted solution:

Self-hosting is an Enterprise engagement scoped with us rather than a self-serve download. Where we deploy into your infrastructure:

  • Data Sovereignty: Your data remains on your infrastructure
  • No Cloud Storage: We don't store or access your data unless you explicitly grant access for support
  • Local Processing: Analytics run on your infrastructure. AI features still require an API key for a hosted AI provider — we do not ship a bundled local model.
  • Audit Logs: Full control over access logs and monitoring

Children's Privacy

Vibedasher is not intended for users under 16 years of age. We do not knowingly collect personal information from children.

International Data Transfers

If you're accessing Vibedasher from outside the region where our servers are located, your data may be transferred internationally. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data processing agreements with third parties

We run in AWS us-east-1 (North America) and eu-central-1 (Europe).

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Email notification to your registered email address
  • Prominent notice on our website or platform
  • In-app notification upon login

Continued use of Vibedasher after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

For EU residents, you have the right to lodge a complaint with your local data protection authority.

Regional-Specific Information

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt out of the sale of personal information (Note: We do not sell personal information)
  • Right to non-discrimination for exercising CCPA rights

European Residents (GDPR)

For users in the European Economic Area, UK, and Switzerland:

  • Legal Basis: We process data based on consent, contract performance, legal obligations, and legitimate interests
  • Data Protection Officer: Contact dpo@vibedasher.com
  • Right to Object: You can object to processing based on legitimate interests
  • Automated Decision-Making: We don't make automated decisions that significantly affect you without human review

This policy is effective as of August 19, 2026. Please review it periodically for updates.