Last updated: September 22, 2026
VibeCast Inc. is the data controller for personal data processed through the VibeCast Service (account holders, organization members, and connected social account metadata). For content you publish to third-party platforms (LinkedIn, X, Instagram, Threads), those platforms act as independent controllers of the data once published, under their own privacy policies.
Contact: support@getvibecast.com
| Purpose | Lawful basis (Art. 6 GDPR) |
|---|---|
| Providing the Service (account creation, authentication, content generation, publishing, scheduling) | Performance of a contract (Art. 6(1)(b)) |
| Processing payments and managing subscriptions | Performance of a contract (Art. 6(1)(b)) |
| Sending content to third-party AI providers for generation | Performance of a contract (Art. 6(1)(b)), as this is a core function you request |
| Error monitoring and security | Legitimate interests (Art. 6(1)(f)) — keeping the Service reliable and secure |
| Marketing-site analytics (Datadog/GA4) for EEA/UK/CH visitors | Consent (Art. 6(1)(a)), obtained via cookie banner |
| Legal/compliance record-keeping (e.g., billing records) | Legal obligation (Art. 6(1)(c)) |
We do not use special category data (Art. 9) as part of normal Service operation. You should not submit special category data as source content unless necessary, in which case explicit consent would be required.
Personal data is shared with the processors listed in Section 3 of the Privacy Policy, each bound by a data processing agreement where they act as a processor on our behalf (cloud hosting, database providers, AI model providers, Stripe, Sentry, Datadog). Social platforms (LinkedIn, X, Instagram, Threads) act as independent controllers for content you choose to publish through them.
VibeCast's infrastructure is hosted in the United States. Transfers of personal data from the EEA/UK/Switzerland to the United States are made using an appropriate safeguard — currently intended to be the EU-U.S. Data Privacy Framework (and UK/Swiss extensions) where the receiving party is certified, and Standard Contractual Clauses (SCCs) otherwise.
See Privacy Policy, Section 4. In summary: data is retained while your account is active and deleted or anonymized within a reasonable period after account deletion, subject to legal, billing, and security retention requirements.
If you are located in the EEA, UK, or Switzerland, you have the right to:
To exercise any of these rights, contact support@getvibecast.com. We will respond within the timeframes required by applicable law (generally one month, extendable in complex cases).
VibeCast uses AI models to generate draft social media content, but this is a content-drafting tool, not automated decision-making that produces legal or similarly significant effects about you within the meaning of Article 22 GDPR. All generated content requires your review before publication.
Our marketing site uses a consent banner for visitors from the EEA, UK, and Switzerland before loading analytics cookies/scripts (OpenTelemetry/Datadog, Google Analytics). You may decline non-essential cookies; essential session/security cookies used within the application itself are necessary for the Service to function and are not subject to the consent banner.
Questions or rights requests: support@getvibecast.com. You also have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or place of the alleged infringement.