Legal
Privacy Policy
VibeLink collects the minimum data needed to operate checkout, licensing, downloads, support, and consented product email.
Data we collect
Checkout records include email, provider order identifiers, amount, currency, status, and consent time. License records include an encrypted key, device identifier, device name, app version, activation status, and validation timestamps. We also process newsletter status, delivery events, fraud-resistant rate-limit keys, and limited hosting logs.
Storage and security
Operational order, license, and device data is stored in Neon. Sensitive email, license, and PayApp payment lookup values are encrypted with AES-256-GCM or represented by purpose-specific HMAC hashes. Plain license keys and email addresses are not shown in the Admin browser interface.
Providers
Lemon Squeezy processes international USD sales as Merchant of Record. PayApp processes Korean KRW payments. Neon hosts encrypted operational records. Resend sends transactional mail and marketing mail only after explicit consent or double opt-in. Vercel hosts the site and may process request and function logs.
Retention
Abandoned checkout sessions and unconfirmed newsletter requests are removed after 30 days. Processed provider payloads are retained for up to 90 days for reconciliation. Rate-limit buckets are removed after 48 hours. Unsubscribe removes marketing eligibility immediately; bounce and complaint suppression hashes are retained to prevent further mail.
Your choices
You can unsubscribe from marketing mail at any time and remove licensed devices from VibeLink. For access, correction, deletion, purchase, or license questions, contact the support address shown on your receipt.
We do not sell personal data.
Last updated: July 11, 2026.