Legal
Privacy Policy
Last updated: March 1, 2026
1. Overview
Vibestat Analytics ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, why we collect it, and how it is used when you use the Vibestat platform. We process your uploaded files only to generate session analytics — we do not sell or share your raw content with any third parties.
2. Information We Collect
We collect the following types of information:
Account Information
Your email address, display name, and encrypted password when you register. Authentication is handled securely via Supabase.
Uploaded Files
The Markdown .md files you upload are processed by our AI engine. The raw file content is not stored permanently — only the derived analytics (vibe score, skills, problems, session duration) are saved to your account.
Derived Analytics Data
Session metadata such as your Vibe Score, Skill Tree XP, identified problem tags, session duration, and cross-session insight data. This data is tied to your account and is what powers your dashboard.
Usage Data
Anonymized product analytics (page views, feature usage) via PostHog to help us understand how the platform is used and how to improve it.
3. How We Use Your Data
- To generate and display your session analytics and insights
- To maintain your account and authenticate you securely
- To track cross-session patterns (Skill Tree XP, recurring problems, trend charts)
- To send transactional emails (e.g. password reset) — we do not send marketing emails without explicit consent
- To improve the platform through aggregated, anonymized usage analytics
4. Data Storage & Security
All data is stored securely using Supabase (PostgreSQL), hosted on infrastructure with encryption at rest and in transit. Authentication tokens are managed using industry-standard session-based security. We never store raw uploaded file content after the AI analysis pipeline completes.
While we take reasonable measures to protect your data, no system is completely secure. You should exercise caution about the content of the files you upload and avoid including sensitive credentials or personal data of others.
5. Third-Party Services
We use the following third-party services to operate Vibestat:
- Supabase — database, authentication, and secure data storage
- PostHog — anonymized product usage analytics
- Anthropic Claude API — AI analysis of your uploaded chat sessions
Each of these providers has their own privacy policies and data handling practices. We only share the minimum data necessary for each service to function.
6. Data Retention
Your session analytics and account data are retained as long as your account is active. You may delete individual sessions from the Sessions page, which permanently removes that session's data. You may request full account deletion by contacting us through our support page.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Object to or restrict processing of your data
- Data portability — receive a copy of your analytics data
To exercise any of these rights, please contact us through our support page.
8. Cookies
Vibestat uses only essential session cookies required for authentication and security. We do not use advertising cookies or third-party tracking cookies. Our product analytics provider (PostHog) may set a cookie for session continuity in anonymized analytics — this can be opted out of on request.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by posting a notice on the platform or via email. Your continued use of Vibestat after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions or concerns about this Privacy Policy or your data, please contact us through our support page. We aim to respond within 5 business days.