Privacy Policy

Last updated: March 24, 2026

1. Information We Collect

Account Information: Name, email address, password (hashed), profile photo, and role (buyer or seller).

Seller Application Data: Professional background, skills, portfolio links, employment status, and screening responses.

Project Data: Project descriptions, design briefs, proposals, messages, deliverables, and review content.

Payment Information: Processed by Stripe. We do not store credit card numbers.

Usage Data: Pages visited, features used, browser type, IP address, and device information.

2. How We Use Your Information

We use collected information to: operate and improve the Platform; match buyers with appropriate sellers using our AI matching engine; process payments and prevent fraud; communicate about your account, projects, and updates; analyze usage patterns to improve the experience; and comply with legal obligations.

3. AI Processing

Project descriptions are processed by AI (Anthropic's Claude) to generate design briefs and improve matching accuracy. This processing occurs on Anthropic's servers subject to their privacy policy. We do not use your project data to train AI models. Seller applications are scored by an automated screening system; significant decisions are subject to human review.

4. Information Sharing

We share information with: other users as necessary (buyer sees seller profiles, seller sees project briefs); payment processors (Stripe) for transactions; AI providers (Anthropic) for brief generation; and law enforcement when required by law. We do not sell your personal data to third parties.

5. Data Storage & Security

Data is stored on Supabase (hosted on AWS) with encryption at rest and in transit. We implement industry-standard security measures including row-level security, encrypted connections, and secure authentication. No system is 100% secure; use the Platform at your own risk.

6. Your Rights

Depending on your jurisdiction, you may have the right to: access your personal data; correct inaccurate data; delete your account and associated data; export your data in a portable format; opt out of marketing communications; and object to automated decision-making.

To exercise these rights, contact privacy@vibrrr.ai.

7. Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics tools to understand Platform usage. You can control cookies through your browser settings, though this may affect functionality.

8. Data Retention

Account data is retained for the life of your account plus 30 days after deletion. Project data and messages are retained for 3 years after project completion for dispute resolution purposes. Payment records are retained as required by law (typically 7 years).

9. Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect data from minors.

10. Changes to This Policy

We will notify users of material changes via email. Your continued use after changes constitutes acceptance.

11. Contact

For privacy inquiries: privacy@vibrrr.ai