Privacy Policy

Last updated: March 2, 2026

This policy explains what data is collected and how it is used.

Data Collected

Account & Profile Data

When you create an account, Vibitely collects your email address, name, profile photo, and any optional profile information you provide such as username, bio, and social links.

Project and Content Data

Vibitely stores websites you create, including HTML, CSS, JavaScript code, uploaded images, and project metadata. Also stored is content you publish to the community showcase, comments, and messages.

Generated Content Data

When you use website generation or image creation features, your prompts and requests are processed to generate content. Generated output is stored as part of your projects. Input data may be temporarily processed by third-party service providers according to their privacy policies.

Usage and Technical Data

Standard technical information is collected including IP addresses, browser type, session data, and feature usage statistics to improve the platform and maintain security.

Deployed Website Data

When you deploy websites to Vibitely hosting, the website files and configuration necessary to serve your content to visitors are stored.

How Data Is Used

To Provide Platform Services: To authenticate users, generate and store websites, process image creation requests, deploy and host websites, and enable community features.
To Improve the Platform: To analyze usage patterns, optimize performance, and develop new features based on user needs.
For Communication: To send important service updates, usage notifications, and support responses.
For Security and Compliance: To protect the platform from abuse, maintain service quality, and comply with legal obligations.

Personal data is NOT sold. Data is not used for targeted advertising or shared with third parties for marketing purposes.

Data Sharing & Third Parties

Service Providers: Third-party services are used for infrastructure, hosting, content delivery, and authentication. These providers process data only as necessary to provide their services.
Content Generation: Prompts and requests for website, image, video, and audio generation are processed by Runware, our AI media generation provider. Runware may route requests to sub-processors including Pruna AI (video generation) and ElevenLabs (audio/music generation). Your prompts are used solely for generation and are not stored by these providers beyond their standard processing retention periods.
Authentication Services: When you sign in through Google or GitHub, your authentication is handled by those providers according to their privacy policies.
Public Content: Content you choose to publish to the community showcase is publicly visible. Deployed websites are accessible to anyone with the URL.
Legal Requirements: Data may be disclosed if required by law or to protect rights and users.

Your GDPR Rights

As Vibitely operates within the EU, you are protected by the General Data Protection Regulation (GDPR). You have the right to access, correct, export, or delete your personal data. You can manage your profile and download your projects through your account settings. For complete data deletion or specific data requests, please email: [email protected]

Email Data

Paid subscribers can create professional email accounts ([email protected]). Email is stored on Vibitely's own mail server (Stalwart, self-hosted in the EU). We do not use third-party email providers to store your inbox -- your messages stay on our infrastructure and are not processed for advertising or analytics.

You can read, send, and delete emails from the Vibitely inbox. Deleting your account removes all associated email data within 30 days.

AI Agents & VPS Data

Premium subscribers get a dedicated virtual server (VPS). Any code, files, databases, and agent logs stored on your VPS are yours. We do not access or process VPS data except for infrastructure management (provisioning, health checks, security patching).

When you delete an agent or close your account, VPS data is wiped. Agent activity logs are retained for 30 days for security audit purposes, then permanently deleted.

Data Security & Retention

We protect your data with HTTPS encryption everywhere, secure authentication, and regular security reviews. We retain data as long as your account is active or as needed to provide services.

When you delete your account, your personal data is removed from production systems within 30 days. Projects you have exported or downloaded stay under your control. We recommend keeping local backups of anything important.