Privacy Policy
What personal data VibingView processes, why, who helps us, how long we keep it and how to exercise your rights.
Last updated
1. Overview
Omar Konbor, a sole trader (entrepreneur individuel) established at 17 bis Hay Essalam, 24000 Casablanca, Morocco is responsible (data controller) for personal data processed to run VibingView. We collect only what we need to provide, bill and protect the service, and we never sell personal data.
2. Information we collect
We process:
- Account data: display name, email address, a hashed password (or your Google or GitHub sign-in identity), email-verification state, encrypted two-factor secrets and hashed recovery codes.
- Security data: hashed session and API tokens, a hashed IP address and browser user-agent for sessions, rate-limit counters and audit records of security-relevant actions.
- Billing data: wallet transactions, payment references, amounts and receipts. Card details are handled by our payment processor and never reach VibingView.
- Service data: workspace, application, database and domain settings, encrypted environment variables, deployment logs and resource metrics reported by your workspace.
- Support and abuse data: the content of support tickets and, for abuse reports, the reporter’s email address, the reported URL and the description.
- Domain registrant data: if you register a domain, the owner’s name, organisation, email address, phone number and postal address. We store it encrypted.
3. Why we use it
To provide the service you ordered, take payments and keep accurate wallet records, secure accounts and prevent fraud and abuse, answer support requests, send service emails you can control in Settings, and meet legal and accounting obligations.
We rely on the performance of our contract with you, on legal obligations (accounting and tax records, lawful requests), and on our legitimate interest in keeping the service secure. Where we rely on consent, for example optional analytics, you can withdraw it at any time.
4. Security
We use TLS for every connection, hashed passwords and tokens, AES-256-GCM encryption for stored secrets, scoped access keys, rate limits and audit logs. Workspace databases stay on a private network. No system is perfectly secure; please report vulnerabilities to support@vibingview.com.
5. Third-party service providers
We share data with providers only as needed for these purposes:
- Infrastructure providers that host the VibingView control plane and customer workspaces. Customer workspaces run in data centres in the European Union.
- Cloudflare, for DNS, network protection and, when enabled, bot protection (Turnstile) on public forms.
- Payment processors, including Creem (merchant of record for card payments) and, when offered, a cryptocurrency processor.
- Resend, our transactional email provider for verification, password-reset and service emails.
- Google or GitHub, only if you choose to sign in with them or connect GitHub repositories.
- A web-analytics provider on public marketing pages only, when enabled. The dashboard never loads analytics.
6. Cookies
The dashboard uses one essential, HTTP-only session cookie to keep you signed in, plus short-lived security cookies during sign-in. If analytics are enabled on public pages, the analytics provider may set its own cookies there.
7. Data retention and account deletion
When you delete your account, your personal details are anonymised as soon as your servers have been destroyed. Wallet, payment and other accounting records are kept for 10 years, as Moroccan commercial law requires. Security logs and support history are kept only as long as they are needed for security, fraud prevention and handling disputes. Data stored on a workspace is destroyed when that workspace is cancelled.
8. Your rights
You can update your profile, revoke sessions and keys, export your data on request, and delete applications, databases and your account from the dashboard. Under Moroccan Law 09-08 and, where it applies to you, the EU GDPR, you may access, correct, delete, restrict or object to the processing of your data, and complain to the data-protection authority (in Morocco, the CNDP).
9. Contact
For privacy requests and questions, email support@vibingview.com. We answer within three business days. Postal address: Omar Konbor, 17 bis Hay Essalam, 24000 Casablanca, Morocco.