Privacy Policy

VibeMail (“we”, “us”) operates the website and product at https://www.vibemail.dev. This policy explains what information we collect, why we collect it, and the choices you have.

Account information. When you sign up we collect your email address, name (if you provide one), and a password hash. If you use Google sign-in, we receive the name, email, and profile identifier Google shares with us.

Project content. Email templates, prompts, chat messages, versions, and related files you create in VibeMail are stored so the product can work.

Usage and billing. We keep records of credit balance, plan, subscription status, and model usage needed to meter credits. Payments are processed by Stripe. We do not store full card numbers.

Technical data. We automatically receive IP address, browser type, and similar device data through our hosting and authentication providers when you visit or sign in.

We use this information to:

• Provide, maintain, and improve VibeMail
• Authenticate you and keep your projects
• Generate, preview, and send test emails you request
• Process subscriptions, credits, and invoices
• Detect abuse, debug issues, and secure the service
• Respond to support requests

We do not sell your personal information.

When you generate or edit an email, we send the relevant prompt, template, and conversation context to third-party model providers (currently including OpenAI and Anthropic) so they can return a result. Do not put secrets, personal data about other people, or confidential material in prompts unless you are comfortable sharing that content with those providers under their terms.

We share information with vendors who help us run the product, including:

• Supabase — database, authentication, and file storage
• Stripe — payments and subscriptions
• Vercel — hosting the website
• Resend — delivering test emails you send from the product
• OpenAI and Anthropic — generating email copy and code
• Google — if you choose to sign in with Google

We may also disclose information if required by law, to protect VibeMail or our users, or as part of a merger, acquisition, or sale of assets.

We use cookies and similar storage to keep you signed in and to operate the app. These are required for authentication. We do not use advertising cookies.

We keep account and project data for as long as your account is open. You can delete projects in the product. If you want your account and associated data deleted, email privacy@vibemail.dev. We may retain limited records as required for billing, security, or legal obligations.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to certain processing. Contact us at the email above to make a request. If you signed in with Google, you can also revoke VibeMail’s access in your Google account settings.

VibeMail is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

We are based in the United States and use processors that may store data in the U.S. and other countries. If you use VibeMail from elsewhere, you understand that your information may be processed in those locations.

We may update this policy. The “Last updated” date at the top will change when we do. Continued use of VibeMail after an update means you accept the revised policy.

Questions about privacy: privacy@vibemail.dev. Related: Terms of Service.