Privacy Policy
In short: we collect the details you type into our forms, the review authorizations you sign, and, if you subscribe, your billing details through Stripe. We don't use cookies, analytics or advertising trackers. We never sell your data. You can ask us to see, correct or delete it at any time by emailing hello@safe2vibe.com.
This Privacy Policy explains how Safe2Vibe ("Safe2Vibe", "we", "us") handles personal data when you visit safe2vibe.com (the "Site"), join our waitlist, apply to join our reviewer community, or use the Safe2Vibe service (the "Service").
1. Who is responsible for your data
Safe2Vibe is the controller of the personal data described in this policy, except where we process data on behalf of our customers as described in section 7. You can reach us at hello@safe2vibe.com.
2. What we collect
Waitlist and reviewer applications
When you fill in the form on the Site, we collect:
| Data | Who provides it | Required |
|---|---|---|
| Name and email address | Everyone | Yes |
| Country | Everyone | No |
| Whether you have an app or are a developer | Everyone | Yes |
| Site language you used | Collected automatically from the page | Yes |
| Your app's web address and the tool you built it with | App owners | No |
| Years of coding experience, LinkedIn or GitHub profile | Developers | No |
Review authorizations
When you authorize a review, we collect your name, email, company and role (optional), the app's name and address, its repository (optional), the scope you choose, your notes and your typed signature, so we can verify your authority and keep a record of your authorization.
Technical data
Our hosting provider records standard server logs when you load a page, including your IP address, browser type, the page requested and the time. We use these logs only to keep the Site running and secure.
What we don't collect
The Site does not use cookies, analytics tools, advertising pixels, fingerprinting or session recording. Fonts and scripts are served from our own domain, so loading the Site doesn't share your visit with third parties such as Google.
Paid plans and reviews
If you subscribe to a paid plan, Stripe collects your payment details directly; we never see or store your full card number. We receive your name, email, plan and payment status from Stripe. To review your app, we also process account details (name, email, company) and the information needed to review your app: its address, any security settings snapshot of your database you choose to share, read-only access to code you choose to share, scan results, and messages you exchange with our reviewers. Section 7 explains how we handle data inside your app.
3. Why we use it and our legal basis
| Purpose | Legal basis (where GDPR or similar laws apply) |
|---|---|
| Send you Safe2Vibe updates | Your consent, given when you submit the form |
| Perform the free review you requested and keep a record of your authorization | Steps you asked us to take, and our legitimate interest in proving every review was authorized |
| Evaluate your application to join the reviewer community | Steps you asked us to take before entering into a contract |
| Provide the Service, support and expert hours | Performance of our contract with you |
| Keep the Site and Service secure and prevent abuse | Our legitimate interest in protecting our users and systems |
| Meet legal, tax and accounting obligations | Legal obligation |
We don't use your data for automated decisions that have legal or similarly significant effects on you, and we don't use your personal data to train AI models.
4. Who we share it with
We never sell or rent your personal data. We share it only with:
- Service providers that host and run Safe2Vibe for us, under contracts that require them to protect it. The current list is on our Subprocessors page.
- Reviewers in our community, only when you are a customer and only the information needed to work on your review, under signed confidentiality agreements.
- Authorities, when the law requires it, and only to the extent required.
- A buyer or successor, if Safe2Vibe is involved in a merger or acquisition, in which case this policy continues to protect your data.
5. International transfers
Our providers store data in the United States. When we transfer personal data from the European Economic Area, the United Kingdom, Switzerland or other countries with transfer rules, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep it
- Updates list: until you unsubscribe or ask us to delete it, and no more than 24 months after your last interaction with us.
- Review authorizations: for as long as needed to show the review was authorized, up to 6 years after the review.
- Reviewer applications: up to 24 months, so we can contact you when we open new spots.
- Customer data: for as long as your account is active, then deleted within 30 days, except where we must keep records for legal or accounting reasons.
- Server logs: according to our hosting provider's retention period, typically a few days to a few weeks.
7. Data inside the apps we review
When a customer connects an app to the Service, the app may contain personal data about the customer's own users. For that data, the customer is the controller and Safe2Vibe acts as a processor, following the customer's instructions and our Data Processing Addendum. We access only what is needed to perform the review, with read-only access, and we don't use that data for any other purpose.
8. How we protect it
We use encryption in transit and at rest, access limited to the people who need it, and providers that meet recognized security standards. Read more on our Security page.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing. These rights are recognized, for example, by the GDPR in Europe, the CCPA in California, the LGPD in Brazil and Law 1581 of 2012 (Habeas Data) in Colombia.
To exercise any right, email hello@safe2vibe.com. We will answer within 30 days and won't treat you differently for using your rights. If you're not satisfied, you can complain to your local data protection authority.
California residents: we do not sell or share personal information for cross-context behavioral advertising.
10. Children
Safe2Vibe is not directed to people under 18, and we don't knowingly collect their personal data. If you believe a minor has given us their data, contact us and we will delete it.
11. Changes to this policy
If we change this policy, we will update the date at the top. If the change is significant, we will tell you by email or with a notice on the Site before it takes effect.
12. Contact
Questions about privacy: hello@safe2vibe.com.