Privacy Policy — VibeNest

1. Information We Collect

We collect the following types of information:

Account information: email address, name (if provided), authentication provider (email/Google)
Deployment data: Git repository URLs, build configurations, environment variable keys (values are encrypted and not accessible to us)
Usage analytics: page views, feature usage, and interaction data within the platform
Visitor analytics: for your deployed projects' wiki pages, we collect anonymized visitor data (daily-salted hash of IP + user agent, no raw IPs stored)

To provide and maintain the Service (deploying your applications, serving your wiki pages)
To process billing and credit transactions
To send service-related communications (deployment status, subscription warnings)
To improve the Service through aggregated, anonymized usage analytics
To provide AI-powered features (repo analysis, content generation) when you initiate them

We take security seriously:

Environment variables are encrypted with AES-256-GCM with per-value nonces
Passwords are hashed using industry-standard algorithms (ASP.NET Identity)
All connections use HTTPS with automatically provisioned SSL certificates
Visitor analytics use daily-salted hashing for privacy-first unique visitor counting — we never store raw IP addresses

We use the following third-party services:

Google OAuth: for social login (only if you choose to sign in with Google)
OpenRouter / LLM APIs: for AI features. Your repository file structure (not source code) may be sent to LLM providers when you use AI analysis features
SMTP provider: for transactional emails (confirmation, password reset)

We do not sell your personal data to third parties.

Account data is retained while your account is active
Deployment logs are retained for 30 days
Analytics data is retained for 12 months
You can request account deletion, which will remove your personal data and stop all deployments

You have the right to:

Access your personal data (available via the "Download Personal Data" feature in account settings)
Correct inaccurate data
Request deletion of your account and associated data
Export your data before account deletion

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification.

For privacy-related questions or data requests, contact us through the platform's support channels.