0. Controller and Contact
vibbs.tv is the controller of personal data processed on this platform. You can contact us at privacy@vibbs.tv. If you need a mailing address, please email us and we will provide it.
1. Introduction
vibbs.tv ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
By using vibbs.tv, you consent to the data practices described in this policy. If you do not agree, please do not use the Platform.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, username, and authentication credentials when you create an account.
- Profile Information: Bio, display name, and other profile details you choose to provide.
- Artist Application Data: Artist name, genre, description, portfolio links, social media links, and use case information submitted with artist applications.
- Payment Information: Payment details are collected and processed by Stripe. We do not directly store your credit card numbers or bank account details. See Stripe's Privacy Policy for details.
- Communications: Messages sent through the Platform's messaging features, stream comments, and any communications you send to us.
- Reports: Information you provide when reporting content, including the reason and any additional details.
2.2 Information Collected Automatically
- Usage Data: Pages viewed, streams watched, features used, and interaction patterns.
- Device Information: Browser type, operating system, device type, and screen resolution.
- Log Data: IP address, access times, referring URLs, and error logs.
- Stream Viewing Data: Which streams you watch, duration of viewing, and viewer counts.
2.3 Information from Third Parties
- OAuth Providers: If you sign in with Google, we receive your name, email address, and profile picture from that service.
- Stripe: Transaction status, payout status, and Connect account status for artists.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Platform
- Process payments and artist payouts
- Authenticate your identity and manage your account
- Send transactional communications (payment confirmations, account notifications)
- Review artist applications and moderate content
- Respond to content reports and enforce our Terms of Service
- Detect and prevent fraud, abuse, and security threats
- Analyze usage patterns to improve the user experience
- Comply with legal obligations
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
4.1 Service Providers
We share information with third-party service providers that help us operate the Platform:
| Provider | Purpose | Data Shared |
|---|
| Stripe | Payment processing | Payment details, transaction data, identity info for artists |
| Supabase | Authentication & database | Account data, user content |
| Amazon Web Services | Hosting & streaming | All platform data (encrypted at rest) |
| Resend | Email notifications | Email address, notification content |
| Textbelt | SMS notifications | Phone number (if provided) |
4.2 Legal Requirements
We may disclose your information if required by law, subpoena, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.
4.4 Public Information
Your username, profile bio, and public streaming activity are visible to other users. Artist profiles and stream pages are publicly accessible.
5. Data Security
We implement industry-standard security measures to protect your information:
- All data is transmitted over HTTPS (TLS encryption)
- Sensitive credentials are stored in AWS Systems Manager Parameter Store (encrypted)
- Payment processing is handled entirely by Stripe (PCI DSS compliant)
- Authentication is managed by Supabase with secure token handling
- Rate limiting protects against abuse and brute-force attacks
- Input validation and sanitization prevent injection attacks
- Security headers (CSP, HSTS, X-Frame-Options) protect against common web vulnerabilities
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
- Account Data: Retained as long as your account is active. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
- Payment Records: Retained for 7 years to comply with tax and financial regulations.
- Server Logs: Retained for up to 90 days for security and debugging purposes.
- Content Reports: Retained for the duration needed to investigate and resolve the report.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate personal data.
- Deletion: Request deletion of your personal data (subject to legal retention requirements).
- Portability: Request your data in a portable, machine-readable format.
- Objection: Object to certain processing of your personal data.
- Withdrawal of Consent: Withdraw consent where processing is based on consent.
To exercise any of these rights, contact us at the email address below. We will respond within 30 days.
8. Cookies and Tracking
vibbs.tv uses the following types of storage:
- Authentication Cookies: We set an HttpOnly session cookie to keep you signed in. These are essential for the Platform to function.
- Session Data: Temporary data used to manage your current session.
We do not use third-party advertising cookies or cross-site tracking technologies. We do not participate in ad networks or sell data to advertisers. For details, see our Cookie Policy.
9. Children's Privacy
vibbs.tv is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.
10. International Data Transfers
Your information may be processed and stored in the United States, where our servers are located. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms to protect data transferred from the EEA, UK, or Switzerland.
11. California Privacy Rights (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Opt out of the sale of your personal information (we do not sell personal information)
- Not be discriminated against for exercising your privacy rights
12. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- We process your data based on: (a) your consent, (b) the performance of our contract with you, (c) our legitimate interests, or (d) compliance with legal obligations.
- You have the right to lodge a complaint with your local data protection authority.
- You may request restriction of processing or object to processing based on legitimate interests.
13. Data Breach Notification
If we become aware of a security incident that affects your personal data, we will notify affected users and relevant authorities as required by applicable law.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform with a new "Last updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: privacy@vibbs.tv