Effective from: 08 Jun 2026
Last updated: 08 Jun 2026
1. Introduction
This Privacy Policy ("Policy") describes how VIBE APPS AI PLATFORM CO., LTD ("Vibe Apps", "we", "us") collects, uses, stores, shares, and protects your personal information when you access our website, use the Vibe Apps AI Platform ("Platform"), or interact with related services.
By using the Platform, you confirm that you have read and agree to this Policy. If you do not agree, please stop using the Platform.
Contact information: Legal name: VIBE APPS AI PLATFORM CO., LTD. Address: 68 Nguyen Hue Street, Sai Gon Ward, Ho Chi Minh City, Vietnam. Email: services@vibe-apps.ai. Hotline: 0355156010. Data Protection Officer (DPO): appointed depending on operational scale and legal requirements.
2. Scope
This Policy applies to users who register accounts and use the Platform (individuals, businesses, organizations); visitors to our website, investor pages, careers pages, marketplace, and contact channels; and users who subscribe to our newsletter or submit contact forms.
This Policy does not apply to third-party websites or services we link to (e.g. LinkedIn, YouTube, Facebook, payment partners). Please review their respective privacy policies.
3. Information we collect
3.1. Information you provide directly
- Account: Name, email, password (encrypted), email verification details.
- User profile: Display name, avatar (if any), account settings.
- Workspace and projects: Workspace name, project descriptions, configuration, source code, technical documents, change requests, data you enter during application development.
- AI and codegen: Prompts, application descriptions, content you send to AI copilots/agents for code generation or task processing.
- Payments and subscriptions: Subscription plan details, payment history; invoicing information (company/individual name, tax ID/personal ID, address, email — if provided during checkout).
- Contact and support: Name, email, message content via contact forms; newsletter subscription email.
- Recruitment: Information in CVs/applications (if submitted via email or recruitment channels).
3.2. Information collected automatically
- Device and browser: IP address, browser type, operating system, language, time zone.
- System logs: Access times, pages viewed, actions on the Platform, technical errors.
- Cookies and similar technologies: See Section 8.
3.3. Information from third parties
- OAuth login: When you sign in via Google or GitHub, we may receive email, name, and account identifiers as permitted by you on those platforms.
- Payment partners: Transaction status, payment reference codes (we do not directly store credit card numbers when processed via third-party payment gateways).
3.4. Sensitive information
We do not intentionally collect sensitive data (health, political, religious, etc.). Please do not enter sensitive information into AI prompts or source code unless strictly necessary and you have a lawful basis to do so.
4. How we use information
- Provide services: Create and manage accounts, workspaces, projects; operate AI codegen, deployment, and marketplace features.
- Authentication and security: Login, email verification, MFA (if enabled), fraud detection, account protection.
- Payments and billing: Process subscriptions, invoices, renewals, refunds (if applicable).
- Customer support: Respond to contact requests and resolve technical issues.
- Improve the Platform: Usage analysis (anonymized/aggregated where possible), feature development, performance optimization.
- Communications: Service emails (verification, password reset, system notices); newsletter if you opt in.
- Legal compliance: Respond to lawful requests from authorities, resolve disputes, enforce terms of use.
5. Legal basis for processing
Depending on context, processing may be based on: contract performance (providing services you subscribe to); consent (newsletter, non-essential cookies, optional features); legitimate interests (security, abuse prevention, service improvement); legal obligations (accounting, tax, lawful authority requests).
6. AI, source code, and data you create on the Platform
- Content you enter (prompts, descriptions, code, documents) is processed to provide AI and software development features.
- We may use third-party AI/language model providers to process requests. Data is transmitted securely and only as necessary.
- You are responsible for not submitting trade secrets, third-party personal data, or unlawful information without proper authorization.
- Source code generated by AI undergoes security scanning as part of our process. However, the Platform does not guarantee or assume responsibility for 100% security of applications created. Before production deployment, you should perform or engage reputable independent providers for scanning, pentesting, and additional security assessments.
- AI model training/reuse policy: We strictly limit use of data in each application's database. We only use source code generated by AI through Platform features for cross-reference and optimization when necessary — we do not use business/end-user data in application databases for AI model training or improvement unless you provide separate consent or law requires it.
7. Sharing information with third parties
We do not sell your personal information. Information may be shared with:
- AI and development tool providers: processing prompts/codegen as required for service delivery.
- Payment gateways: processing transactions.
- OAuth providers: Google, GitHub (when you choose to sign in).
- Workspace members you invite (according to permissions you grant).
- Law enforcement or regulators when legally required.
All third parties are required to protect data under contract and process only within the scope assigned.
8. Cookies and tracking technologies
- Essential cookies: maintain login sessions and security.
- Analytics cookies: understand Platform usage via Google Analytics and Splunk (behavior, performance, operational logs — within each tool's configuration and policies).
- Optional cookies: remember language and interface preferences.
Data collected via these tools may include pages visited, session duration, device/browser type, technical events, and system errors (anonymized or aggregated where possible). You can manage cookies through browser settings; disabling essential cookies may affect login functionality.
9. Retention
- Active accounts: retained as needed to provide services.
- After account deletion: data is deleted or anonymized within 60 days, unless law requires longer retention (invoices, disputes, security logs).
- Technical logs: typically 30 days, unless incident investigation requires longer retention.
10. Security
We apply appropriate technical and organizational measures, including password encryption, HTTPS, role-based access control (RBAC), MFA (if enabled by users), monitoring, backups, and incident response procedures.
No system is completely secure. If we detect a data breach affecting you, we will notify you in accordance with applicable law.
11. Your rights
Depending on applicable law (Vietnam cybersecurity law, personal data protection regulations, GDPR for EU users, etc.), you may have rights to: access your personal information; correct inaccurate information; delete your account or request data deletion (within legal limits); withdraw consent (newsletter, non-essential cookies); restrict or object to certain processing; lodge complaints with competent authorities.
To exercise your rights: email services@vibe-apps.ai with subject "Privacy request". We respond within 15–30 days.
12. Children
The Platform is not directed at persons under 16 years of age. We do not knowingly collect information from anyone under 16. If we discover such information, we will delete it.
13. International data transfers
Currently, data is primarily stored in Vietnam and AWS Singapore. As the Platform scales internationally, we may deploy additional regions/cloud locations as operational needs require. When transferring data outside Vietnam, we apply appropriate safeguards under Vietnamese law and update this Policy when necessary.
14. Third-party links
Our website may contain links to LinkedIn, YouTube, Facebook, solution partners, and external marketplaces. We are not responsible for the content or privacy policies of those websites.
15. Changes to this Policy
We may update this Policy from time to time. New versions will be posted on this page with the "Last updated" date. Material changes may be communicated via email or Platform notice.
16. Contact
For questions about this Privacy Policy, contact: VIBE APPS AI PLATFORM CO., LTD. Address: 68 Nguyen Hue Street, Sai Gon Ward, Ho Chi Minh City, Vietnam. Email: services@vibe-apps.ai. Hotline: 0355156010.