Privacy Policy

1. Introduction

Welcome to Vibe Commenting. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered Instagram engagement service. Vibe Commenting helps users build authentic Instagram connections by generating personalized comments using artificial intelligence.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the service.

2. Information We Collect

Google Account Data

When you sign in using Google authentication, we collect:

• Email address
• Display name
• Profile picture URL
• Google account unique identifier

Instagram Account Details

To provide our comment posting service, we collect:

• Instagram username
• Instagram account credentials (securely encrypted for automated posting)
• Profile information from your public Instagram account

Usage Data

We automatically collect certain information when you use our service:

• Session information and activity logs
• Comments generated and their approval/rejection status
• Service preferences and settings
• Device information and browser type
• IP address and approximate location

Payment Data

Payment processing is handled by Stripe. We do not store your credit card details directly. Stripe may collect and store:

• Billing name and address
• Payment method details (stored securely by Stripe)
• Transaction history

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To generate AI-powered comments and post them to Instagram on your behalf
• Account Management: To create and manage your user account
• Payment Processing: To process subscription payments and manage billing
• Service Improvement: To analyze usage patterns and improve our AI algorithms and user experience
• Communication: To send you service updates, security alerts, and support messages
• Compliance: To comply with legal obligations and enforce our terms of service

4. Data Storage & Security

We take data security seriously and implement industry-standard measures to protect your information:

• Infrastructure: Your data is stored on Firebase/Google Cloud Platform, which provides enterprise-grade security
• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/SSL
• Encryption at Rest: Sensitive data, including Instagram credentials, is encrypted at rest
• Access Controls: We implement strict access controls and authentication mechanisms
• Regular Audits: We regularly review and update our security practices

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure.

5. Third-Party Services

We use the following third-party services to operate Vibe Commenting:

Google (Authentication & Cloud)

We use Google for user authentication (Sign in with Google) and cloud infrastructure (Firebase, Google Cloud Platform). Google's privacy policy can be found at: https://policies.google.com/privacy

Stripe (Payments)

We use Stripe to process payments securely. Stripe's privacy policy can be found at: https://stripe.com/privacy

Instagram (API for Posting)

We interact with Instagram to post comments on your behalf. Your use of Instagram is subject to Instagram's terms of service and privacy policy: https://privacycenter.instagram.com/policy

6. Data Retention & Deletion

We retain your personal data only for as long as necessary to provide you with our services and as described in this privacy policy.

Account Deletion: When you delete your account, we will delete or anonymize all your personal data, including:

• Your profile information
• All Instagram accounts you own
• All sessions and generated comments
• Subscription and billing data (subject to legal retention requirements)

How to Request Deletion: You can delete your account directly from the user menu in the application. Alternatively, you can contact us at yuyang.jiang@atelier-persopol.com to request account deletion.

7. Your Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR):

• Right to Access: You have the right to request copies of your personal data
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete
• Right to Erasure: You have the right to request that we erase your personal data, under certain conditions
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data, under certain conditions
• Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions
• Right to Object: You have the right to object to our processing of your personal data, under certain conditions

To exercise any of these rights, please contact us at yuyang.jiang@atelier-persopol.com. We will respond to your request within 30 days.

8. Children's Privacy

Our service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there. Your consent to this privacy policy followed by your submission of such information represents your agreement to that transfer.

For EEA residents, we ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses approved by the European Commission.

10. Changes to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us: