VibeMass Privacy Policy

1. Data Collection

We collect your email and GitHub profile information when you sign up. When you scan a repository, we fetch the source code temporarily to perform the analysis. We do not store your repository contents or raw source code files in our databases after the scan completes. We use essential cookies to keep our platform secure, customize your experience, and analyze site performance.

2. Code Storage & Ephemerality

Your source code is NEVER stored on VibeMass's permanent databases. Analysis is performed in isolated, ephemeral sandboxes. Once the analysis is complete and the report is generated, the sandbox and all its contents are permanently deleted.

3. Right to be Forgotten (Account Deletion)

You can delete your account and all associated data at any time from your account settings. This will permanently remove your email, name, and scan history from our systems. Because we do not store source code, there is no source code to delete upon account closure.

4. Third Parties & Payment Processing

We use Stripe for payment processing. VibeMass does not store or collect your payment card details. That information is provided directly to Stripe, whose use of your personal information is governed by their Privacy Policy. GitHub login and repository access is handled via secure Supabase Auth integrations.

5. GDPR & CCPA Compliance

Under GDPR and CCPA, you have the right to access, rectify, port, and erase your data. If you have any questions or wish to exercise these rights, please contact us at [email protected]. We respond to all requests within 30 days.