Privacy Policy

VibeLink collects the following information to provide our services:

• Account Information: Email address (used for account creation, verification, authentication, and password recovery), user ID, password credentials securely handled by our authentication provider, and authentication session data. Your email address is never displayed publicly on your profile.
• Profile Information: Username, full name, job title, company/school, bio, interests, website, and social media links (LinkedIn, Twitter, GitHub, Instagram)
• Profile Photo: Optional profile photo uploaded by you
• Profile Privacy Preferences: Your settings for which profile fields are visible to others
• Connection Information: Your connections and connection request history
• Notification Data: Connection requests, acceptances, declines, and related notifications
• Security Data: Internal rate-limit and security data used to prevent abuse
• Private Connection Notes: Personal notes you write about your connections. These notes are visible only to you and are not shared with the tagged connection or any other users.
• Personal Tags: Custom tags you create to organize your connections. These tags are visible only to you and are not shared with tagged connections or any other users.
• Blocking Information: Users you have blocked and users who have blocked you
• Report Data: Reports you submit about inappropriate profiles

We take data security seriously:

• Supabase: We use Supabase for authentication, database, and storage services
• Vercel: Our application is hosted and deployed on Vercel infrastructure
• Encryption: Passwords are encrypted using industry-standard methods
• Row Level Security: Database policies ensure users can only access their own data
• Storage: Profile photos are stored securely with access controls
• Access: Only authorized personnel can access user data

Your profile is accessible via your username URL (vibelink.name.ng/u/username). The visibility of your profile information depends on your privacy settings:

• Your username is public and used to access your profile
• Individual profile fields have privacy controls that you can adjust in Edit Profile
• By default, your profile photo, job title, company/school, bio, and interests are public. Your full name, website, and social links default to private.
• Connected users may see more profile information than non-connected users
• Your email address is never displayed publicly on your profile

We use your information to:

• Create and maintain your VibeLink account and profile
• Generate and manage your QR code for profile sharing
• Facilitate connections between users
• Send you notifications about connection requests and activity
• Apply your privacy preferences to control profile visibility
• Authenticate your account and maintain security
• Implement rate limiting and abuse prevention measures
• Send password recovery emails
• Store and display your private notes about connections for your personal reference
• Store and apply your personal tags to organize connections
• Enforce blocking preferences and remove connections/notifications when users block each other
• Process reports to maintain platform safety and prevent abuse
• Operate and improve our services

VibeLink uses the following third-party services:

• Supabase: Authentication, database, and storage services
• Vercel: Hosting and deployment infrastructure
• Resend: Transactional authentication emails sent through Supabase Custom SMTP. Resend may process recipient email addresses and authentication email content including reset/verification links.

These services have their own privacy policies and data handling practices. We encourage you to review their policies.

We retain your profile and account data while your account is active. If you delete your account:

• Your primary profile, connections, connection requests, and notifications are deleted
• Your profile photo is deleted from storage
• Your authentication account is deleted
• Rate-limit and security data associated with your account is deleted
• Blocked user relationships are deleted
• Reports submitted by you or about you are deleted
• Private connection notes and personal tags are deleted
• This action is intended to be permanent

Some technical and security records, as well as infrastructure logs, may be retained for limited operational or security periods. Third-party service providers may retain operational records under their own policies. Our retention practices may be updated as VibeLink matures.

You have the right to:

• View and edit your profile information at any time
• Adjust your privacy settings to control profile visibility
• Delete your account and associated data
• Contact us regarding your personal data or to exercise applicable rights

VibeLink is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify users of significant changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

hello@vibelink.name.ng