Privacy Policy

Scriptx, UAB collects the following categories of data:

• Account data — your name and email address.
• Technical data — IP address, browser user-agent, and server log information.
• Usage analytics — pages viewed and behaviour on our website, collected via Google Analytics.
• Payment data — payments are processed by Stripe and by Link (Stripe), which acts as merchant of record for checkout purchases and receives the billing details you enter at checkout. We do not store your card details.
• Customer content — applications you upload (.ipa / .apk) and session screenshots. Live video streams are peer-to-peer and are not stored on our systems.
• AI provider keys — if you bring your own LLM API key, it is stored encrypted at rest.
• Support and audit data — support tickets you send us and audit logs of account activity.

You directly provide Scriptx, UAB with most of the data we collect. We collect and process data when you:

• Register for an account on VibeView.
• Use the VibeView platform and upload or test applications.
• Contact our support or ticketing system.

We also collect data automatically through cookies and server logs, and through Google Analytics, to understand how visitors use our website.

Scriptx, UAB collects your data so that we can:

• Provide our service and enable you to manage your account.
• Process billing and subscriptions through Stripe and Link (Stripe), the merchant of record for checkout purchases.
• Troubleshoot and improve our service for internal purposes.
• Protect VibeView against fraud and abuse. For this we record the IP address used when you sign up and sign in, and the one you most recently used VibeView from, a random device identifier stored in a cookie in your browser, and a browser fingerprint (a one-way hash of browser and device characteristics such as screen size, installed fonts, graphics and audio capabilities, time zone and language, computed in your browser when you sign up or sign in), and use them to detect accounts created to get around a suspension or plan limits, including the limit of one Free plan allowance per person. The fingerprint is never shared with a third party or used for analytics or advertising.
• Upload data to sub-processors (cloud hosting, file storage, and backup) that we rely on for our data infrastructure. Each is bound by a Data Processing Agreement.
• Comply with the law and respond to valid legal requests. We will notify you if we receive a subpoena concerning your data, unless we are legally prohibited from doing so.

When you run or test your applications on VibeView, we may process personal data about your end-users on your behalf. In that context Scriptx, UAB acts as a data processor and you are the controller. This processing is governed by our Data Processing Agreement.

If you configure your own AI provider key (BYOK), prompts and screenshots from your sessions are sent to that LLM provider only as required to perform the AI features you have enabled.

Scriptx, UAB stores your data in cloud environments hosted in the European Union (AWS / GCP), managed using policies and procedures aligned with the ISO 27001 standard. Our security controls include:

• Encryption of data in transit (TLS) and at rest, following industry best practice.
• Access control lists and firewall rules granting least-privilege access.
• Encryption of stored AI provider keys.
• Regular monitoring for security vulnerabilities and prompt remediation.

Scriptx, UAB will never sell your data to a third party, and we will not send you unsolicited marketing emails.

Under the GDPR you are entitled to the following rights regarding your personal data:

• Right to access — request copies of your personal data.
• Right to rectification — have inaccurate or incomplete data corrected.
• Right to erasure — request deletion of your data, under certain conditions.
• Right to restrict processing — under certain conditions.
• Right to object to processing — under certain conditions.
• Right to data portability — have your data transferred to you or another organisation.

If you make a request, we have one month to respond. To exercise any of these rights, email us at support@vibeview.io.

If you are a California resident, you have the right to request access to and deletion of the personal information we hold about you, and the right not to be discriminated against for exercising these rights.

We do not sell your personal information. To make a request, contact us at support@vibeview.io.

Cookies are text files placed on your device to collect standard internet log information and visitor behaviour information. We use the following types of cookies:

• Functional / essential — to recognise you, keep you signed in, and remember your preferences.
• Fraud prevention (strictly necessary) — a random device identifier set when you sign up or sign in, used only to detect duplicate accounts and abuse of free allowances. It is not used for analytics or advertising, and is kept for up to 400 days. For the same purpose only, we also compute the browser fingerprint described above when you sign up or sign in; it is not stored in a cookie.
• Behaviour / analytics — Google Analytics cookies that tell us how you use our website (content viewed, browser, device, and IP address).

You can set your browser to refuse cookies, but some features of the site may not function as a result.

The VibeView website may contain links to other websites. This Privacy Policy applies only to our website, so if you follow a link elsewhere you should read that website's own privacy policy.

Storing or recording special-category (sensitive) personal data in our systems is not permitted. If we encounter such data we will delete it immediately.

Prohibited categories include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data used to identify a person, and data concerning health, sex life, or sexual orientation.

Your data is stored within the European Union. Where a sub-processor is located outside the EU — for example Google LLC (Google Analytics) in the United States, or a US-based LLM provider you choose to configure — those transfers are covered by Standard Contractual Clauses (SCCs) or an equivalent safeguard.

We retain your personal data for as long as your account is active and for a limited period afterwards. When you make a valid erasure request we delete your data, subject to any legal obligations that require us to retain it. Sign-up, sign-in and most recent IP addresses and device identifiers (including browser fingerprints) stored with your account are deleted after 12 months.

To make sure each person gets one Free plan allowance a month, we keep a record of which account used it, linked to a one-way keyed hash of your email address (not the address itself), your device identifiers and browser fingerprints, the network (IP address range) you used and, if the allowance was used up, your IP address. The record is kept even if you delete your account, and is deleted at the end of the following calendar month (so after about two months at most), or after 12 months if the account was suspended.

VibeView is not directed to children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

Scriptx, UAB keeps this Privacy Policy under regular review and posts any updates on this page, along with the date it was last updated.

If you have questions about this Privacy Policy, the data we hold about you, or you would like to exercise one of your rights, contact us at support@vibeview.io.

You have the right to lodge a complaint with a supervisory authority. Our lead authority is the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija). You may also contact the data protection authority in your own EU member state.