Privacy Policy

Effective date: October 28, 2026

VibeShield is operated by Badar Afzal, an individual (sole proprietor) doing business as VibeShield. This policy explains what we collect and what we do with it. Questions: support@vibeshieldapp.com.

What we collect

• Your email (and name, if you give it) when you join the waitlist, subscribe or email us.
• Your app URL — address and path only, never query strings or credentials — and when you confirmed you own it.
• Scan results: a compact summary of findings (types, severity counts, last check time). Secret values are never stored, logged or shown — only the type of secret and where it was found.
• Payments: handled by Stripe. We never see or store your card number. Stripe shares your email, name, billing country/postcode and subscription status with us. Receipts and billing come from LeadSignal, our billing name. Your card statement shows LEADSIGNAL VIBESHIELD.
• Technical data: your IP address for rate limiting (kept in memory, not stored long-term) and basic server logs (checked hostname, result status, finding counts).

How we use it

To run the checks you ask for, bill your subscription, send your reports and account emails, answer support requests, prevent abuse, and email you about VibeShield updates and founding pricing (you can unsubscribe anytime).

We don't sell your data

We don't sell or rent your personal data, and we don't share it for advertising.

Service providers

• Vercel — hosting and application logs.
• Stripe — payments, subscriptions and the billing portal.
• Resend — sends our emails and receives mail sent to support@vibeshieldapp.com.
• ActiveCampaign — waitlist and customer email list.

Cookies

We don't set tracking or advertising cookies of our own. Stripe sets its own cookies on its checkout and billing pages to process payments and prevent fraud.

How long we keep it

We keep your data while you are subscribed or on the waitlist. If you ask us to delete it by emailing support@vibeshieldapp.com, we delete it within 30 days, except records we must keep by law (for example, payment records held by Stripe).

Your rights

You can ask to see, correct or delete your data, or unsubscribe from any email, by emailing support@vibeshieldapp.com. Every marketing email also has an unsubscribe link.

Children

VibeShield is not for anyone under 18, and we don't knowingly collect data from them. If you believe a minor has given us data, email us and we'll delete it.

Changes

If we change this policy we'll update the effective date above and, for material changes, email subscribers.