This Privacy Policy explains how AGILAYER ("we", "us") collects, uses, and protects information when you use VibeSnapper (the "Service"). We designed VibeSnapper so that you stay in control of your screenshots, notes, and knowledge base.
1. Information We Collect
- Account data. Email address and authentication metadata managed by Supabase Auth.
- Content you submit. Screenshots (stored as data URIs), optional notes, project names, and Knowledge Base entries (Studio plan only).
- Usage data. Reviews you generate, retrieved knowledge chunks, and timestamps used to enforce monthly quotas.
- Billing data. Stripe customer ID, subscription status, plan, period dates, and the brand and last four digits of your payment method. Full card numbers are handled by Stripe and never reach our servers.
- Operational logs. Standard request logs (timestamps, IP, user agent, response codes) used for security and debugging.
2. How We Use Information
- To provide, secure, and improve the Service.
- To run AI analysis: your screenshots and notes are sent to our AI model provider(s) for the duration of a single review and are not used to train foundation models.
- To enforce plan limits and bill you correctly through Stripe.
- To respond to support requests and detect abuse.
- To comply with legal obligations.
3. Sub-Processors
- Supabase — database, authentication, edge functions, row-level security.
- Stripe — payments and subscription billing.
- AI model providers — used to generate review output on your behalf. Content is sent only at the time of a review and retained only as long as the provider's API requires.
4. Data Retention and Deletion
- Reviews, screenshots, and Knowledge Base entries are stored until you delete them or your subscription ends.
- When a paid subscription is cancelled or expires, your review history, screenshots, and custom Knowledge Base are automatically deleted from our database. Projects are retained.
- You can request full account deletion at any time by emailing support@agilayer.com. We will delete your account and associated data within 30 days, except where retention is required by law.
- Backups containing your data may persist for a limited period before being overwritten.
5. Your Rights
Depending on your jurisdiction (including the EU/EEA, UK, and California), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email support@agilayer.com. We do not sell personal information and we do not engage in cross-context behavioural advertising.
6. Security
We use TLS for data in transit and encryption at rest. Access to production systems is restricted and audited. Our database enforces row-level security so that one customer cannot read another's screenshots, reviews, or Knowledge Base.
7. International Transfers
Our infrastructure providers may process data in regions outside your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
8. Children
VibeSnapper is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.
9. Cookies and Local Storage
We use first-party local storage to keep you signed in and to remember your active project. We do not use third-party advertising cookies.
10. Changes
We will post material changes to this policy at this URL and notify active customers by email when changes are significant.
11. Contact
Questions, requests, or complaints? Email support@agilayer.com.