Privacy Policy

1. What we collect

• Account: your name, email address and password (stored only as a secure hash by our database provider), the workspaces you belong to and your role.
• Your sites: the addresses of sites you connect, the public text we read from their pages, the translations, glossary rules and settings.
• Usage: how many words were translated and how many translated pages were viewed per month (counts only, used for plan limits).
• Assistant connections: which AI assistant apps you connected, when, and to which workspace.
• Security records: an audit log of sensitive changes (team, sites, domains, plans, keys), and short-lived counters by IP address to stop abuse (rate limits).
• Messages: waitlist sign-ups, support emails and abuse reports you send us (with your email if you give it).
• Visitors of translated pages: we pass their request to your original site to build the page. We don't set cookies on them, don't build profiles and only keep the counts above. Our hosting provider keeps standard technical logs (such as IP address and time) for a short period.

2. Why we use it

• To provide the service you asked for: sign-in, translating and serving your pages, support (contract).
• To keep the service safe: rate limits, abuse handling, audit log, error monitoring (legitimate interest).
• To send service emails: sign-in links, password resets, security alerts, beta invites, limit warnings (contract / legitimate interest).
• To meet legal obligations, such as tax records once payments start (legal obligation).

We don't send marketing emails without your consent, and we don't use advertising or analytics cookies.

3. Cookies

We only use cookies that are needed for the service: to keep you signed in, remember which workspace you opened, and complete an AI assistant sign-in. No tracking or advertising cookies.

4. Who processes data for us

We use a small number of service providers (for hosting, database, AI translation, email and so on). Each only gets what it needs for its job. The full list, with what each one does and where, is on our subprocessor list. Text from your pages is sent to our AI translation provider to translate it; that provider does not use it to train its models under its commercial terms.

5. International transfers

Some providers process data outside your country (for example in the United States or the European Union). Where the law requires it we rely on approved safeguards such as standard contractual clauses. [Lawyer to confirm the transfer mechanisms per provider]

6. How long we keep it

• Account, site and translation data: while your account exists; deleted within 30 days after you ask us to delete it.
• Usage counts and the audit log: as long as the workspace exists.
• Waitlist emails: until launch or until you ask us to remove them.
• Backups: overwritten on a rolling basis (about 7 days).

7. Your rights

Depending on where you live (for example under the GDPR in the EU and UK, the CCPA/CPRA in California or the PDPL in the UAE) you can ask to see, correct, export or delete your personal data, object to or restrict some uses, and withdraw consent. During the beta we handle these requests by email: write to support@vibelingual.com from your account's email address and we answer within 30 days. You can also complain to your local data protection authority.

We don't sell or share personal information for advertising, as defined by the CCPA/CPRA.

8. Security

Data is encrypted in transit, workspaces are separated from each other in the database, secrets are never stored in code, and we keep an audit log of sensitive changes. If a breach affecting your personal data happens, we will tell you and the authorities as the law requires.

9. Children

VibeLingual is not meant for children under 16 and we don't knowingly collect their data.

10. Changes and contact

We will tell you about important changes by email or in the dashboard. Contact for privacy questions: support@vibelingual.com. [EU/UK representative and data protection officer, if required]