Privacy Policy

1. Introduction

Doved Studio ("we", "us", "our") operates vibecodeyour.app (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal data when you use our Service, in compliance with the General Data Protection Regulation (GDPR) and applicable French data protection laws.

2. Data Controller

The data controller responsible for your personal data is Doved Studio. For any privacy-related inquiries, contact us at support@vibecodeyour.app.

3. Data We Collect

We may collect the following categories of personal data:

• Account information: email address and authentication data when you create an account or sign in.
• Usage data: pages visited, time spent, course progress, and interaction patterns to improve the Service.
• Payment data: if you purchase access, payment processing is handled by third-party providers (e.g., Stripe). We do not store your full payment card details.
• Technical data: IP address, browser type, device information, and cookies (see Section 6).

4. Legal Basis for Processing

We process your personal data based on:

• Contract performance: to provide the Service you signed up for.
• Legitimate interest: to improve our Service, prevent fraud, and ensure security.
• Consent: for optional cookies and marketing communications, which you can withdraw at any time.

5. How We Use Your Data

• To provide, maintain, and improve the Service.
• To process transactions and send related information.
• To track your course progress and personalize your experience.
• To communicate with you about updates, security alerts, and support.
• To detect and prevent fraudulent or unauthorized activity.

6. Cookies

We use cookies and similar technologies for:

• Essential cookies: required for the Service to function (authentication, session management).
• Analytics cookies: to understand how visitors interact with the Service and improve it.

You can manage your cookie preferences through the cookie consent banner or your browser settings.

7. Third-Party Services

We may share data with the following third-party services:

• Authentication providers for sign-in functionality.
• Payment processors (e.g., Stripe) for handling transactions.
• Analytics services for usage insights.

Each third-party provider operates under their own privacy policy and GDPR obligations.

8. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. When you delete your account, we will erase your personal data within 30 days, except where retention is required for legal obligations.

9. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate or incomplete data.
• Eraseyour personal data ("right to be forgotten").
• Restrict processing of your data.
• Data portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time for consent-based processing.

To exercise any of these rights, contact us at support@vibecodeyour.app. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure.

11. International Transfers

Your data may be processed outside the European Economic Area (EEA). When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact & Supervisory Authority

For any questions regarding this Privacy Policy or to exercise your rights, contact us at support@vibecodeyour.app.

You also have the right to lodge a complaint with your local data protection authority. In France, the supervisory authority is the CNIL (Commission Nationale de l'Informatique et des Libertés) .