Privacy Policy

    Effective Date: April 21, 2025

    VibeEval, accessible at vibe-eval.com, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information in connection with our vulnerability scanning and risk assessment services.

    1. Information We Collect

    We may collect the following categories of information:

    a. Personal Information

    When you sign up, contact support, or interact with our platform, we may collect:

    • Name, email address, company name (if applicable), and other contact details

    b. Usage & Technical Data

    Automatically collected information includes:

    • IP address, browser type, operating system, device identifiers, and pages visited
    • Interaction data collected through tools like Microsoft Clarity, Modal, and Lovable for behavioral analytics and user experience optimization

    c. Test Data (Customer Data)

    As part of our services, we collect:

    • URLs, domains, and applications you submit for testing
    • Logs, metadata, vulnerability findings, and testing behavior collected during scans

    d. Infrastructure & Deployment

    We run our platform on Vercel, which may temporarily process limited metadata (such as request logs and geolocation) as part of platform delivery.

    2. How We Use Your Information

    We use the collected information to:

    • Provide, secure, and maintain our vulnerability scanning services
    • Respond to support requests and inquiries
    • Analyze service performance and user behavior
    • Improve our platform and tailor the user experience
    • Prevent fraud, abuse, and unauthorized access

    3. Third-Party Services and Data Sharing

    We do not sell or rent your personal data.

    We may share limited information with trusted third-party service providers strictly for operational purposes:

    ServicePurpose
    Microsoft ClarityBehavioral analytics (session replays, heatmaps)
    ModalUI interaction and modal tracking
    LovableCustomer support and engagement tools
    VercelCloud hosting and performance delivery

    We may also share information with regulatory or legal authorities if required by law or to protect our legal rights.

    4. Data Retention

    We retain your data for the following periods:

    • Account Information: Retained for the duration of your account plus 90 days after account deletion
    • Scan Results and Test Data: Retained for 12 months from the date of the scan, or until account deletion
    • Usage and Analytics Data: Retained for 24 months for service improvement purposes
    • Support Communications: Retained for 3 years to maintain service quality and legal compliance
    • Legal and Compliance Data: Retained as required by applicable law or to resolve disputes

    You may request early deletion of your data by contacting us at support@vibe-eval.com, subject to our legal retention obligations.

    5. Data Security

    We implement industry-standard technical and organizational safeguards to protect your data, including:

    • HTTPS encryption
    • Role-based access control
    • Regular vulnerability and security assessments
    • Secure scan processing and storage practices

    6. Your Rights

    Depending on your jurisdiction (e.g., GDPR, UK GDPR, CCPA), you may have the right to:

    • Access a copy of your personal data
    • Request correction or deletion of your information
    • Object to or restrict certain data processing activities
    • Withdraw consent for optional cookies or analytics tools

    You can exercise these rights by contacting us at support@vibe-eval.com.

    7. Cookies and Tracking Technologies

    We use cookies and similar technologies to:

    • Analyze usage patterns
    • Improve service performance and user navigation
    • Track user interactions (via Clarity, Modal, Lovable)

    You can control or disable cookies through your browser settings. However, disabling certain cookies may impact functionality.

    8. Data Storage & International Transfers

    Data may be processed in Ukraine or by service providers in jurisdictions such as the United States or EU countries. We ensure appropriate safeguards (such as Standard Contractual Clauses or equivalent) for international data transfers in compliance with global data protection laws.

    9. Changes to This Policy

    We may update this Privacy Policy periodically. If changes are material, we will notify you via email or prominent notice on our website. Continued use of our services indicates your acceptance of the updated policy.

    10. Contact Us

    If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at:

    📧 support@vibe-eval.com