VVibe Then DeploySign inCreate an account

Privacy policy

Last updated November 4, 2026

This policy explains what Vibe Then Deploy (“we”, “the service”) collects, why, and who it is shared with. Contact: privacy@vibethendeploy.com.

What we collect

  • Account details: your name and email address. If you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive or store your Google password, and we do not access your Gmail or any other Google data.
  • Passwords are held by our authentication provider (Amazon Cognito) and are never stored in our database.
  • Project content you and your teammates create: briefs, work items, acceptance criteria, comments and activity history.
  • AI provider keys you choose to add. They are encrypted with AWS Key Management Service, never shown again after saving, and never written to logs.
  • Operational data: sign-in events, email delivery status and error logs needed to run and secure the service.

How we use it

Only to provide the service: to sign you in, show your projects to you and the people you invite, send the emails the service needs (verification codes, password resets, invites and an optional daily digest), and keep the service secure. We do not sell your data, show advertising, or use your content to train AI models.

Who it is shared with

  • Members of your projects see that project’s content. Nobody else can.
  • Amazon Web Services hosts the service, stores data and sends email.
  • Google, only if you choose to sign in with Google.
  • The AI provider of a key you or your project supplies (Anthropic or OpenAI). When an AI feature runs, the relevant project content is sent to that provider under that key and that provider’s terms. It is sent to no other AI provider.

Retention and deletion

Project content is kept while the project exists. You can delete your account at any time; projects where you are the only member are deleted with it. Email delivery logs are kept for up to 90 days.

Security

Data is encrypted in transit and at rest. Access to every project is checked on the server for every request.

Changes

If this policy changes materially we will tell account holders by email before the change takes effect.