Privacy Policy

1. Introduction

vibeanalysis.io ("we", "our", or "us") is operated by Cogny AB, a company registered in Stockholm, Sweden. We are committed to protecting your privacy and handling your data in an open and transparent manner.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (if provided)
• Authentication credentials (encrypted)

Database Connection Information

To provide our analytics services, we store:

• Supabase project connection details (encrypted)
• OAuth tokens for secure database access (encrypted)
• Database query history for your convenience
• Saved metrics and visualizations

Usage Data

We automatically collect:

• Log data (IP address, browser type, pages visited)
• Analytics data to improve our service
• Error reports and performance metrics

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our analytics service
• Execute database queries on your behalf
• Store your saved metrics and chat history
• Improve and optimize our service
• Send service-related communications
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Data Security

We implement industry-standard security measures:

• All database credentials are encrypted at rest
• OAuth tokens are securely stored and regularly refreshed
• HTTPS encryption for all data transmission
• Regular security audits and updates
• Access controls and authentication requirements

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our service (e.g., Supabase for authentication, Anthropic for AI)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Your Data Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Export your data in a machine-readable format
• Object: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@vibeanalysis.io

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. You can control cookie preferences through your browser settings.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place in accordance with GDPR requirements.

10. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: