Privacy Policy — VibeNote.Studio

On this page

Who We Are What We Collect Why We Collect It Third Party Services Data Storage Your Rights Data Retention Children Contact

This Privacy Policy explains what information VibeNote.Studio collects, why we collect it, and how we use it. We do not sell your personal data. We only collect what is necessary to run the platform.

1. Who We Are

VibeNote.Studio is operated by Noob{Dev} Technologies. We provide an AI-powered website delivery platform for digital agencies and freelancers.

For privacy-related enquiries, please contact us through the platform or the email on our About page.

2. What We Collect

We collect only the information required to operate the platform and provide the service to you.

Data Type	What It Includes	Why We Need It
Account Info	Name, email address, password (hashed)	To create and manage your account
Agency Info	Agency name, username, phone number, website	To set up your agency workspace
Project Data	Project names, client names, brief data	To generate and manage websites
Payment Info	Transaction records, license status	To manage billing and licenses
Usage Data	Activity logs, edit history, login timestamps	For security and platform improvement
Device Info	IP address, browser type	For security and abuse prevention

We do not collect your clients' personal data directly. If your client fills a brief, the data they submit belongs to your agency account.

3. Why We Use Your Data

We use the data we collect for the following purposes:

To provide, operate, and improve the VibeNote.Studio platform
To authenticate your account and keep it secure
To process payments and manage your licenses
To generate websites based on the brief data you provide
To send essential service communications such as payment receipts
To detect, investigate, and prevent fraudulent activity

We do not use your data for advertising, profiling, or selling to third parties.

4. Third Party Services

VibeNote.Studio uses a small number of trusted third-party services to operate the platform. Each service only receives the data they need to perform their function.

Supabase — Database and authentication. Stores your account and project data securely in the EU.
Anthropic (Claude) — AI generation. Brief data is sent to Claude to generate website content. Anthropic's privacy policy applies.
Cloudflare — Website hosting and CDN. Deployed websites are hosted on Cloudflare Pages. Cloudflare's privacy policy applies.
Razorpay — Payment processing. Payment data is handled entirely by Razorpay. We do not store card details. Razorpay's privacy policy applies.
Google OAuth — Optional login method. If you sign in with Google, Google's privacy policy applies to that authentication process.

5. Data Storage and Security

Your account and project data is stored in Supabase's secure database infrastructure. All data is encrypted in transit using HTTPS and encrypted at rest.

We implement the following security measures:

All passwords are hashed using industry-standard algorithms before storage
Client editor access keys are unique per project and not stored in plain text
Session tokens are stored in secure HTTP-only cookies
Rate limiting is applied to all authentication endpoints

While we take security seriously, no system is 100% secure. If you believe your account has been compromised, contact us immediately.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access — Request a copy of the personal data we hold about you
Correction — Request that we correct inaccurate data
Deletion — Request that we delete your account and associated data
Portability — Request your data in a portable format
Objection — Object to certain processing of your data

To exercise any of these rights, contact us through the platform. We will respond within 30 days.

To delete your account and all associated data, go to Dashboard → Profile → Delete Account, or contact us directly.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law (for example, payment records for tax purposes may be retained for up to 7 years).

Generated website files are deleted from our servers 30 days after account deletion.

8. Children

VibeNote.Studio is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered an account, please contact us and we will delete the account immediately.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us through the platform or the email listed on our About page.

VibeNote.Studio is operated by Noob{Dev} Technologies.