Privacy Policy

Vibewatch (“we,” “us,” or “our”) provides AI-powered community sentiment analytics for teams. This Privacy Policy explains how we collect, use, store, and share information when you use our service at vibewatch.io and app.vibewatch.io.

Information We Collect

Community Data

When you connect a community platform, we collect the publicly available content you point us at. What we collect depends on the kind of platform, not on which one:

• Servers and group chats — messages from the specific channels an admin explicitly selects. Our integration is read-only, and reads no other channels and no direct messages between users. On Discord the bot holds only the permissions needed to read those channels (View Channels and Read Message History) and never posts, replies, or sends messages.
• Public social platforms and forums — posts and comments matching the accounts, channels, or search terms you configure.
• Governance platforms — the proposals and polls you point us at, including public vote tallies, voting windows, and any public reasons voters attach to their votes.

The platforms we currently support are listed on our platforms page. Connecting a new one does not change the categories above. If we ever begin collecting a category of data not described here, we will update this policy and tell you.

Account Information

We collect your name, email address, and authentication credentials through our authentication provider. If you sign in with a third-party provider (e.g., Google), we receive basic profile information from that provider.

Payment Information

Payment processing is handled entirely by our payment processor. We do not store credit card numbers or bank account details on our servers. We retain a customer ID and subscription status from our payment processor to manage your plan.

Usage Data

We collect standard usage data including pages visited, features used, error logs, and performance metrics. We use a third-party error-monitoring service, which may capture technical context (browser type, OS, stack traces) when errors occur. We do not collect personally identifiable information through error monitoring.

How We Use Your Information

• AI Sentiment Analysis: Community messages are sent to third-party AI providers for sentiment scoring and language detection. Content is processed per request for inference only and is never used to train AI or machine-learning models. We select these providers for quality and reliability and may change them as the technology evolves; in every case we require that message content is used only to return a result and is never retained for model training.
• Report Generation: We aggregate and summarize community activity into weekly reports, delivered via Slack, email, Notion, Buzz, or a webhook, based on your configuration.
• Service Improvement: We use aggregated, non-identifiable usage patterns to improve our product.
• Communications:We send transactional emails about your account (report deliveries, billing, integration alerts) through our email provider; these are required to operate your account and cannot be disabled. We may also send occasional promotional emails about product updates and announcements — you can opt out of these at any time using the unsubscribe link in any promotional email or from your account settings.

Third-Party Services

We use the following third-party services to operate Vibewatch:

• AI model providers— sentiment scoring and report summaries. We route requests through AI infrastructure to one or more large-language-model providers; message content is processed per request and never used to train models. The specific providers may change as the technology evolves.
• Payment processor — payment processing and subscription management
• Authentication provider — sign-in and user management
• Email provider— transactional and marketing email delivery, including a contact list for product broadcasts (United States). Your email address and name are shared with this provider so we can deliver report notifications and product communications.
• Support chat provider— powers live support chat in the app and on our contact page. The chat widget loads only when you start a conversation; the messages you send (and, in the app, your name and email) are shared so we can respond.
• Error monitoring — error and performance tracking
• Cloud infrastructure providers — hosting, CDN, DNS, and encrypted backups (United States)
• Market-data provider — cryptocurrency market data
• Slack, Discord, Notion, Buzz — Report delivery (when configured by you)

Each service operates under its own privacy policy. We only share the minimum data required for each service to function.

Data Retention

Community message data is retained based on your subscription plan: 30 days for Lite, 7 months for Core, and 13 months for Pro. Enterprise retention is customizable. Older messages are automatically deleted through our daily cleanup process. Generated weekly reports and historical insights are kept for the life of your organization — pruning only affects individual messages.

System logs and API usage records are retained for 7 days. Database backups are retained for 30 days.

When you delete your organization, all associated data (messages, integrations, reports, member records) is permanently deleted immediately.

Data Security

We take reasonable measures to protect your data:

• All platform credentials and API tokens are encrypted at rest using industry-standard symmetric encryption
• All connections use HTTPS/TLS encryption in transit
• Database access is restricted to application services only (no external connections)
• We follow security best practices including CORS restrictions, rate limiting, CSRF protection, and security headers

Your Rights

You have the right to:

• Access the data we hold about you and your organization
• Correct inaccurate information in your account
• Delete your organization and all associated data at any time from your settings page
• Disconnect any platform integration, which immediately stops new data collection from that source. Disconnecting does not delete messages already collected — those are removed automatically when they age past your plan's retention window, or sooner if you delete your organization or request deletion

To exercise these rights or request a data export, contact us at support@vibewatch.io.

API Access

Certain subscription plans allow you to enable read-only API access to your organization's sentiment data for use with external tools and AI assistants. API access is scoped exclusively to your organization's data and is subject to rate limits and our acceptable use policy. You control whether API access is enabled and can revoke API keys at any time from your settings.

Data Location

Your data is stored on servers located in the United States. By using Vibewatch, you consent to the transfer and storage of your data in the United States, which may have different data protection laws than your country of residence.

International Users

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights under applicable legislation such as the GDPR or CCPA. These may include the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing activities.

To exercise any of these rights, contact us at support@vibewatch.io. We will respond to your request within 30 days.

Cookies

We use only essential cookies required for authentication (managed by our authentication provider). We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

Children's Privacy

Vibewatch is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our service. Your continued use of Vibewatch after changes take effect constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or our data practices, contact us at support@vibewatch.io.