Privacy Policy

the Vibing Company® ("we", "us", "our") respects your privacy. This policy describes what personal data we collect when you visit vibing.inc or engage our services, how we use it, and the rights you have under the EU General Data Protection Regulation (GDPR).

Controller: Jonathan Osburg · St.-Klara-Str. 7A, 82377 Penzberg, Germany · hello@vibing.inc

We collect only what we need to run the studio and reply to you:

• — Contact data you submit (name, email, project URL, message)
• — Chat transcripts from the intake assistant
• — Billing data processed by Stripe (we never see card numbers)
• — Technical logs (IP, user agent, timestamps) for security and abuse prevention

We use your data to respond to enquiries, scope and deliver work you commission, issue invoices, comply with tax and accounting law, and protect the service from abuse. We do not sell your data and do not use it for advertising profiling.

• — Art. 6(1)(b) — performance of a contract you requested
• — Art. 6(1)(c) — legal obligations (tax, accounting)
• — Art. 6(1)(f) — our legitimate interest in security and answering your messages
• — Art. 6(1)(a) — your consent, where required (cookies, marketing)

Enquiry data is kept for up to 24 months after our last contact. Contracts, invoices and related records are kept for 10 years as required by German commercial and tax law (§§ 147 AO, 257 HGB). Server logs are rotated within 30 days.

We share data only with carefully selected processors acting on our instructions:

• — Stripe (payments)
• — Supabase (hosting and database)
• — Lovable AI gateway (intake assistant inference)
• — Email and analytics providers strictly necessary to operate the site

Where a processor is outside the EU/EEA, transfers rely on Standard Contractual Clauses and supplementary safeguards.

Under GDPR you may at any time:

• — Request access to your data (Art. 15)
• — Correct inaccurate data (Art. 16)
• — Have data deleted (Art. 17)
• — Restrict or object to processing (Art. 18, 21)
• — Receive your data in a portable format (Art. 20)
• — Withdraw consent at any time
• — Lodge a complaint with a supervisory authority

To exercise any right, email hello@vibing.inc.

We use a small number of strictly necessary cookies and, with your consent, basic analytics. See our Cookie Policy for details.

We update this policy as our service evolves. Material changes will be announced on this page with a new "Last updated" date.

Questions about your privacy: write to hello@vibing.inc or the postal address above.