Privacy Policy

This Privacy Policy applies to the VibeSing website, Studio, user center, public share pages, subscriptions, and related features (collectively, the "Service"). It explains what information we collect, how we use it, when we share it, and what choices you may have.

By using VibeSing, you acknowledge the practices described here and in our Terms of Service.

We collect several categories of information depending on how you use the Service:

• Account and profile data. When you sign up or sign in through Clerk, we receive identifiers and profile fields such as your Clerk user ID, primary email address, display name, and profile image.
• Billing and subscription data. If you purchase a paid plan, we store subscription records such as Stripe customer ID, Stripe subscription ID, status, price ID, billing period dates, and related metadata. Stripe handles payment card details; we do not store full card numbers.
• Voice and media inputs. We collect voice labels, uploaded audio files, recorded microphone samples that you choose to submit, YouTube URLs used to create a dataset, dataset archives, trained voice-model artifacts, source audio for generation, generated clips, and related file metadata.
• Share and creative metadata. If you customize share pages, we collect share headlines, dedication text, lyric excerpts, theme choices, branding settings, prompts, and optional reference/selfie images used for share-cover generation.
• Usage, device, and log data. We collect service activity and technical information such as request logs, error logs, quota usage, artifact activity, page visits, browser and device information, and approximate geolocation inferred from IP or other request metadata through our infrastructure and analytics providers.
• Public share data. If you create a share link, the audio, artwork, share text, voice label, and related metadata included in that share may become publicly accessible to anyone with the URL.

Voice samples, trained voice models, and some related media may be considered sensitive or biometric data in certain jurisdictions. Do not upload or record any person's voice unless you have all permissions and notices required by law.

• Directly from you. For example, when you create an account, upload files, record a sample, paste a YouTube URL, generate a clip, create a share, contact us, or start a subscription.
• Automatically. We and our providers collect technical data needed to authenticate sessions, run the app, measure usage, secure the Service, and diagnose errors.
• From third parties. We receive profile and session data from Clerk, billing information from Stripe, infrastructure and analytics data from Vercel, AI/media processing data from providers such as Replicate and Vercel AI Gateway or the model providers it invokes, and trend or preview metadata from third-party music services.

If you use the in-browser microphone recorder, audio is first captured locally in your browser. It is uploaded to our Service only when you submit the dataset-creation request.

We use information we collect to:

• create and secure your account and keep you signed in;
• store your private artifacts and serve the outputs you request;
• create datasets, train voice models, generate clips, generate share-cover images, and publish public share pages when you ask us to;
• manage quotas, usage budgets, subscription status, renewals, and billing support;
• operate the trend feed and related content links or previews;
• monitor performance, diagnose bugs, prevent abuse, and secure the Service;
• understand usage patterns, improve the Service, and plan product changes using service metrics and aggregated or de-identified analysis; and
• comply with law, enforce our policies, and respond to valid legal requests.

Depending on where you live, we generally rely on one or more of the following legal bases when required: contract performance, legitimate interests, consent, and compliance with legal obligations.

We may share information in the following situations:

• Service providers and infrastructure partners. For example, Clerk for authentication, Stripe for subscription billing, Vercel for hosting, storage, and analytics, Replicate for dataset/training/voice-generation workflows, and Vercel AI Gateway or the underlying image-model provider for share-cover generation.
• Public sharing initiated by you. When you create a share link or share asset, the content included in that share can be accessed by people who receive the link.
• Legal and safety reasons. We may disclose information if we reasonably believe it is necessary to comply with law, respond to a valid legal process, protect users, investigate fraud or abuse, or enforce our policies.
• Corporate events. If VibeSing is involved in a merger, acquisition, financing, restructuring, or sale of assets, information may be transferred as part of that transaction subject to applicable law.

We do not currently use the Service to deliver third-party display advertising inside the app.

VibeSing uses cookies and similar technologies to keep the Service working, secure signed in sessions, and understand how the app is used.

• Authentication cookies. Clerk uses cookies and session-related mechanisms so you can sign in, stay signed in, and use protected routes safely.
• Local storage. The current app stores small interface preferences in the browser, such as whether the Studio workflow guide has been dismissed.
• Analytics. We use Vercel Web Analytics to measure activity such as page visits and traffic patterns. Our current setup is designed to be privacy-minded and may operate without traditional analytics cookies, but it can still process request and device metadata such as page path, referrer, browser, operating system, device type, and approximate location derived from IP.

You can control some cookies through your browser settings and revoke microphone access through browser or device permissions, but parts of the Service may stop working correctly if essential authentication or security features are disabled.

We keep information for as long as reasonably necessary to provide the Service, maintain your account, comply with law, resolve disputes, and protect the Service.

• Account data. We keep account and profile records while your account is active and for a reasonable period afterward for security, support, legal, and operational purposes.
• Billing records. Subscription and payment-linkage records may be kept as long as needed for tax, accounting, fraud-prevention, and audit requirements.
• Artifacts and outputs. Private datasets, voice models, songs, and related artifacts are generally kept until you delete them, your account is deleted, or we remove them under our retention practices.
• Public shares. Share pages and share assets may remain available until removed, replaced, or retired by us, even if the original creator stops actively using the Service.
• Provider-side processing. Some providers may keep content for shorter or longer periods under their own policies. For example, Replicate describes API prediction data as being removed automatically on a short retention cycle, while outputs that we save into our own storage remain subject to our retention practices instead.

Backups, caches, and security logs may persist for a limited additional period even after active data is deleted.

We use technical and organizational measures that are designed to protect information against unauthorized access, disclosure, alteration, and destruction. No internet or storage system is completely secure, so we cannot guarantee absolute security.

VibeSing and the providers we use may process information in multiple countries. By using the Service, you understand that information may be transferred to and processed in jurisdictions outside your home country, where privacy laws may differ.

VibeSing is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child under 16 has provided personal information to us, contact us and we will investigate and take appropriate action.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing.

• You can manage parts of your account profile and sign-in settings through the Clerk user profile controls available in the app.
• You can delete private artifacts from your library using the current user-center controls where deletion is available.
• You can cancel paid subscriptions through the Stripe billing portal when enabled for your account.
• You may ask us to review access, deletion, or removal requests by emailing vibesing@1nano.tech.

We may need to verify your identity and may keep certain records when required for legal, security, fraud-prevention, or billing reasons.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above and may provide additional notice if the changes are material.

Questions, privacy requests, account-deletion requests, or concerns about public shares can be sent to vibesing@1nano.tech.