Privacy Policy

1. Introduction

VibelyBuild AI, operated by FutureGen AI LLC (a US LLC, "we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered application development platform and related services. This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, username, profile photo (via Google/Firebase Authentication)
• Payment Information: Billing address, payment method details (processed securely through Stripe)
• User Content: App prompts, descriptions, code, images, and other content you create or upload
• Communication Data: Messages, support requests, and feedback you send us
• Profile Information: Bio, preferences, and settings you configure

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, build requests, AI generation history, click patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Log Data: Access times, error logs, API requests, system events
• Cookies and Tracking: Session tokens, authentication cookies, analytics cookies (see Cookie Policy)
• Performance Metrics: Build times, success rates, feature usage statistics

2.3 AI and Third-Party Data

• AI API Data: Prompts and inputs sent to AI providers (OpenAI, Anthropic, Google AI)
• Generated Content: AI-generated code, images, and text stored for your projects
• Firebase/Firestore: User data, project metadata, build history stored in Google Cloud
• Analytics: Aggregated usage statistics via Firebase Analytics and Google Analytics

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Provision

• Generate applications, ads, and marketing content using AI
• Store and manage your projects, builds, and published apps
• Provide live preview, download, and publishing features
• Process payments and manage subscriptions
• Deliver customer support and respond to inquiries

3.2 Improvement and Development

• Analyze usage patterns to improve AI models and features
• Debug errors, fix bugs, and enhance performance
• Develop new features and services
• Conduct research on AI application generation effectiveness

3.3 Communication

• Send transactional emails (build completion, payment confirmations)
• Notify you of system updates, new features, and service changes
• Send marketing communications (with your consent, opt-out available)
• Respond to support requests and feedback

3.4 Security and Compliance

• Detect and prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service and Acceptable Use Policy
• Comply with legal obligations and regulatory requirements
• Protect the rights, property, and safety of our users and the public

4. Data Sharing and Disclosure

We share your information in the following circumstances:

4.1 Service Providers and Processors

• Firebase/Google Cloud: Authentication, database (Firestore), hosting, analytics
• OpenAI, Anthropic, Google AI: AI model providers for code and content generation
• Stripe: Payment processing and billing management
• Vercel/Render: Application hosting and deployment infrastructure
• Puppeteer/Chrome: Screenshot generation (server-side only)

4.2 Public Information

Information you publish to the VibelyBuild Store (app names, descriptions, screenshots) is publicly accessible. User profiles, feed posts, and public comments are visible to other users.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Storage and Security

5.1 Storage Locations

Your data is stored on secure servers provided by:

• Google Cloud Platform (Firestore): User accounts, project metadata, published apps
• Server File System: Generated project files, screenshots, ZIP bundles (temporary)
• Firebase Storage: User-uploaded images and media

5.2 Security Measures

• Encryption in transit (HTTPS/TLS) for all data transmission
• Firebase Authentication with secure session management
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Secure API keys and environment variable management
• Automated backup and disaster recovery procedures

5.3 Data Retention

• Account Data: Retained until account deletion or 3 years of inactivity
• Build History: Retained for 90 days, then deleted from cache
• Published Apps: Retained indefinitely until manually removed
• Log Data: Retained for 30 days for debugging and security purposes
• Billing Records: Retained for 7 years for tax and legal compliance

6. Your Privacy Rights

6.1 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for data processing at any time

6.2 CCPA Rights (California Residents)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of data collection and sharing practices
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: Equal service regardless of privacy rights exercise

6.3 Exercising Your Rights

To exercise any of these rights, contact us at privacy@vibelybuildai.com. We will respond within 30 days. You may also access, update, or delete certain information through your account settings.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. See our Cookie Policy for detailed information. Key cookies include:

• Essential Cookies: Authentication, session management, security
• Analytics Cookies: Google Analytics, Firebase Analytics for usage statistics
• Functional Cookies: User preferences, language settings, theme selection

You can control cookies through your browser settings. Note that disabling essential cookies may affect service functionality.

8. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover that we have collected information from a child under 18, we will promptly delete such information. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) for transfers from the EEA.

10. AI Model Provider Data Usage

When you use AI generation features, your prompts and inputs are sent to third-party AI providers:

• OpenAI: Subject to OpenAI's API Data Usage Policies. Data is not used to train models by default.
• Anthropic (Claude): Subject to Anthropic's Commercial Terms. Data is not used for model training.
• Google AI: Subject to Google Cloud AI/ML Terms. Data processing follows Google Cloud privacy commitments.

We recommend not including sensitive, confidential, or personal information in AI prompts.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on our website. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us: