This Privacy Policy explains what personal data VibeOven (https://vibeoven.com), operated by the VibeOven team, collects, why, and how long we keep it.
Data we collect
- Account data: your email address, name, password (stored only as a salted hash), and avatar if you upload one.
- Content: the prompts you write, reference images you upload, and the images generated for you.
- Purchase records: which credit pack you bought, the amount, currency and order status. Card and billing details are collected by Dodo Payments; we never receive your full card number.
- Usage and technical data: credit balance and history, generation history, IP address, browser type and request logs used for security and abuse prevention.
- Cookies: strictly necessary cookies for login sessions and your language and theme preference. We do not use advertising cookies.
How we use it
- To provide the Service: generate your images, keep your credit balance and deliver results.
- To process purchases and refunds through our Merchant of Record.
- To send service emails, such as email verification and password reset.
- To keep the Service secure and enforce our Acceptable Use Policy.
Legal bases (EEA/UK users)
We process data to perform our contract with you, to comply with legal obligations (for example tax records), and for our legitimate interests in keeping the Service secure and preventing abuse.
Who we share it with
We share data only with service providers who process it on our behalf:
- Dodo Payments: Merchant of Record for payments, invoicing and tax.
- Cloudflare: hosting, database and file storage.
- Our AI model provider: receives your prompt and reference image only to generate your output.
- Our email provider: delivers service emails.
Training
We do not use your prompts, uploads or outputs to train AI models, and we do not sell your personal data.
Retention
- Uploaded reference images are deleted automatically 7 days after upload.
- Generated images are deleted automatically 30 days after they are created.
- Account data is kept until you delete your account. Deleting your account removes your profile, credit balance and generation history.
- Purchase records may be kept longer where required for tax and accounting.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. You can delete your account yourself in account settings, or contact us at support@vibeoven.com. You may also complain to your local data protection authority.
International transfers
Our providers may process data in countries other than yours. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.
Children
The Service is not directed to anyone under 18 and we do not knowingly collect their data.
Changes and contact
We will post changes to this policy on this page with a new date. Contact: support@vibeoven.com.