Privacy Policy

Scriptx, UAB collects the following categories of data:

• Account data — your name and email address.
• Technical data — IP address, browser user-agent, and server log information.
• Usage analytics — pages viewed and behaviour on our website, collected via Google Analytics.
• Payment data — billing is handled by Stripe. We do not store your card details.
• Customer content — applications you upload (.ipa / .apk) and session screenshots. Live video streams are peer-to-peer and are not stored on our systems.
• AI provider keys — if you bring your own LLM API key, it is stored encrypted at rest.
• Support and audit data — support tickets you send us and audit logs of account activity.

You directly provide Scriptx, UAB with most of the data we collect. We collect and process data when you:

• Register for an account on VibeView.
• Use the VibeView platform and upload or test applications.
• Contact our support or ticketing system.

We also collect data automatically through cookies and server logs, and through Google Analytics, to understand how visitors use our website.

Scriptx, UAB collects your data so that we can:

• Provide our service and enable you to manage your account.
• Process billing and subscriptions through Stripe.
• Troubleshoot and improve our service for internal purposes.
• Upload data to sub-processors (cloud hosting, file storage, and backup) that we rely on for our data infrastructure. Each is bound by a Data Processing Agreement.
• Comply with the law and respond to valid legal requests. We will notify you if we receive a subpoena concerning your data, unless we are legally prohibited from doing so.

When you run or test your applications on VibeView, we may process personal data about your end-users on your behalf. In that context Scriptx, UAB acts as a data processor and you are the controller. This processing is governed by our Data Processing Agreement.

If you configure your own AI provider key (BYOK), prompts and screenshots from your sessions are sent to that LLM provider only as required to perform the AI features you have enabled.

Scriptx, UAB stores your data in cloud environments hosted in the European Union (AWS / GCP), managed using policies and procedures aligned with the ISO 27001 standard. Our security controls include:

• Encryption of data in transit (TLS) and at rest, following industry best practice.
• Access control lists and firewall rules granting least-privilege access.
• Encryption of stored AI provider keys.
• Regular monitoring for security vulnerabilities and prompt remediation.

Scriptx, UAB will never sell your data to a third party, and we will not send you unsolicited marketing emails.

Under the GDPR you are entitled to the following rights regarding your personal data:

• Right to access — request copies of your personal data.
• Right to rectification — have inaccurate or incomplete data corrected.
• Right to erasure — request deletion of your data, under certain conditions.
• Right to restrict processing — under certain conditions.
• Right to object to processing — under certain conditions.
• Right to data portability — have your data transferred to you or another organisation.

If you make a request, we have one month to respond. To exercise any of these rights, email us at support@vibeview.io.

If you are a California resident, you have the right to request access to and deletion of the personal information we hold about you, and the right not to be discriminated against for exercising these rights.

We do not sell your personal information. To make a request, contact us at support@vibeview.io.

Cookies are text files placed on your device to collect standard internet log information and visitor behaviour information. We use the following types of cookies:

• Functional / essential — to recognise you, keep you signed in, and remember your preferences.
• Behaviour / analytics — Google Analytics cookies that tell us how you use our website (content viewed, browser, device, and IP address).

You can set your browser to refuse cookies, but some features of the site may not function as a result.

The VibeView website may contain links to other websites. This Privacy Policy applies only to our website, so if you follow a link elsewhere you should read that website's own privacy policy.

Storing or recording special-category (sensitive) personal data in our systems is not permitted. If we encounter such data we will delete it immediately.

Prohibited categories include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data used to identify a person, and data concerning health, sex life, or sexual orientation.

Your data is stored within the European Union. Where a sub-processor is located outside the EU — for example Google LLC (Google Analytics) in the United States, or a US-based LLM provider you choose to configure — those transfers are covered by Standard Contractual Clauses (SCCs) or an equivalent safeguard.

We retain your personal data for as long as your account is active and for a limited period afterwards. When you make a valid erasure request we delete your data, subject to any legal obligations that require us to retain it.

VibeView is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Scriptx, UAB keeps this Privacy Policy under regular review and posts any updates on this page, along with the date it was last updated.

If you have questions about this Privacy Policy, the data we hold about you, or you would like to exercise one of your rights, contact us at support@vibeview.io.

You have the right to lodge a complaint with a supervisory authority. Our lead authority is the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija). You may also contact the data protection authority in your own EU member state.