Privacy Policy

Last updated: June 2026

This policy explains what personal data Vibesell collects, why, and your rights under the EU General Data Protection Regulation (GDPR). It applies to the Vibesell browser extension and website.

1. Who is responsible (data controller)

The controller of your personal data is Atlas Invencível, Lda (NIPC 518707369), registered office at Rua do Convento 137, Portugal. For any privacy matter, contact lm@atlasinvencivel.pt.

2. What we collect and why

• Email address — to sign you in via a one-time code and to send account, billing, and support messages. Legal basis: performance of our contract with you.
• Business settings you enter (product name, one-liner, website, goal, directness, writing-voice samples) — to personalize your drafts. These are stored locally in your browser and, for your saved watchlist, on our server. Legal basis: contract.
• Post/comment text you choose to draft a reply to — sent to our server and our AI provider at the moment you click “Engage”, to generate suggestions. We do not use it to build advertising profiles. Legal basis: contract / your request.
• Usage counts (number of drafts per day) — to enforce plan limits and prevent abuse. Legal basis: contract and our legitimate interest in running a sustainable service.
• Billing data — handled by Stripe. We store only your plan status and a Stripe customer identifier; we never see or store your card number. Legal basis: contract and legal obligation (accounting).
• Discovery data — when you use Discover, we fetch public Reddit posts and store the resulting opportunities for your account. This is public content, not personal data about you.

3. What we do not do

Vibesell does not auto-post, does not read your Reddit private messages or account data, does not sell your data, and does not inject ads. Every reply is your choice — you copy, edit, and post it yourself.

4. Service providers (sub-processors)

We share the minimum data needed with trusted providers who process it on our behalf:

• Anthropic (Claude AI) — generates your draft suggestions from the post text and your business context.
• Stripe — processes payments and subscriptions.
• Supabase — hosts our database (accounts, settings, usage).
• Vercel — hosts and serves the application.
• Brevo — sends transactional emails (sign-in codes, receipts-related notices).
• Google Analytics — measures aggregate, anonymous traffic on our website (page views and CTA clicks) so we can improve it. It is not used in the extension.

Some providers are based outside the EU (e.g. in the United States). Where that is the case, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Direct-mode links

If you enable Pro “direct mode”, a draft may include a link to your own website with UTM tags (e.g. source, campaign) so that your own analytics can attribute visits. These links point to your site, not to Vibesell, and the attribution data goes to your analytics provider — not to us.

6. How long we keep data

We keep account data while your account is active. Sign-in codes expire within minutes. If you delete your account, we remove your personal data within a reasonable period, except where we must retain certain records (e.g. invoices) to meet legal obligations.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise any of these, email us from your sign-in address and we will respond within the legal time limits. You also have the right to lodge a complaint with the Portuguese supervisory authority, the CNPD (cnpd.pt), or your local EU authority.

8. Storage & permissions on your device

Local storage: the extension saves your settings, session token, and usage on your device. Host access: the extension connects to https://vibesell.atlasinvencivel.pt to generate drafts and manage your account, and reads the public Reddit page you are viewing to draft replies. Cookies on our website: we use Google Analytics, which sets first-party cookies to measure aggregate traffic (page views and CTA clicks). We do not use third-party advertising cookies and we do not sell this data.

9. Children

Vibesell is not directed at children and is intended for users aged 18 or over.

10. Changes

We may update this policy; material changes will be notified by email or in-product. The “last updated” date above reflects the current version.

11. Contact

Privacy questions or requests: lm@atlasinvencivel.pt. See also our Terms & Conditions.