Privacy Policy

Introduction

VibeSell (“we,” “our,” or “us”) provides an AI powered meeting companion that helps sales professionals prepare before meetings, receive real time coaching during meetings, and review insights afterward. Our Service is delivered through our web platform and Chrome extension, which work together to improve sales performance.

This Privacy Policy explains how we collect, use, store, and protect personal data when you use VibeSell.

Information we collect

Legal basis for processing (GDPR)

Under the EU General Data Protection Regulation (GDPR), we process personal data on the following legal bases (Article 6(1)):

• Contract performance (Art. 6(1)(b)) — Processing necessary to provide the VibeSell Service you have subscribed to, including AI powered meeting preparation, real time coaching, and post meeting insights.
• Legitimate interest (Art. 6(1)(f)) — Improving VibeSell's guidance engine and coaching quality using aggregated, anonymized conversation data; maintaining platform security; and analyzing usage to improve product reliability. We balance these interests against your rights and only process data in ways you would reasonably expect.
• Consent (Art. 6(1)(a)) — Where you explicitly opt in to optional features or integrations (e.g., connecting your Google Calendar). You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legal obligation (Art. 6(1)(c)) — Where we are required to retain or disclose data to comply with applicable laws.

How we use your information

We use the collected data to:

• Provide real time insights and assistance during meetings
• Enable pre meeting preparation and post meeting summaries
• Improve coaching quality and personalization
• Authenticate users and maintain secure access
• Improve product reliability and performance
• Improve our guidance engine and coaching quality using aggregated, anonymized conversation data — with all names, companies, and identifying details removed (never used for advertising or unrelated purposes)

AI data processing

• Meeting transcripts are processed by AI to provide real time coaching and insights within VibeSell
• We may record calls to analyze conversation patterns and continuously improve VibeSell's real-time coaching. Recordings are processed automatically and never reviewed by humans.
• No humans review your meeting content or listen to recordings
• Anonymized, aggregated conversation data is used to improve our guidance engine and develop sales training insights. This data cannot be traced back to any individual, company, or specific meeting.
• We do not use your data (including Google user data) to build advertising profiles, for marketing purposes, or for any purpose unrelated to providing and improving VibeSell.

Interactive demo (landing page)

Our website offers an interactive demo that lets you experience VibeSell's real-time guidance through simulated, AI-generated sales conversations. The personas, voices, and supporting research shown in the demo are fictitious illustrations created solely for demonstration. They are not real people and are not affiliated with, endorsed by, or intended to represent any actual individual; any resemblance to a real person is purely illustrative.

This section explains how we handle the information you provide while using the demo. Anything you enter (such as your messages, a company website, or an email address you choose to share) is processed by AI solely to generate the demo experience and is handled in accordance with this Privacy Policy. We do not use it to build advertising profiles, and we do not sell it to third parties.

The rules that govern how you may use the demo, including acceptable-use and content restrictions, are set out in our Terms and Conditions.

Data sharing & disclosure

We do not sell your personal information. We only share data in the following limited circumstances:

• Trusted service providers — We use third party service providers (such as cloud hosting, database services, and AI processing) to help us operate VibeSell. These providers process data solely on our behalf under strict contractual obligations and are prohibited from using your data for their own independent purposes.
• Compliance with legal obligations — When required by law, court order, or government regulation
• Business transactions — In connection with mergers, acquisitions, or asset sales (with continued privacy protections)
• With your explicit consent — For specific integrations or features you enable

We never share your data with third parties for their own marketing, advertising, or independent business purposes.

Data security

We use industry standard controls including:

• Encryption of data in transit and at rest
• Strict access controls
• Continuous security monitoring
• Regular reviews of internal systems

Data retention

• Transcript and meeting derived data are stored while your account is active
• Summaries and meeting history remain available to your account
• Upon account deletion request, data is removed within 30 days
• Legal obligations may require longer retention in some cases

Your rights under GDPR

Under the General Data Protection Regulation (GDPR), if you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights regarding your personal data:

• Right of access (Art. 15) — Obtain confirmation of whether we process your personal data and request a copy
• Right to rectification (Art. 16) — Request correction of inaccurate or incomplete personal data
• Right to erasure (Art. 17) — Request deletion of your personal data, subject to legal retention obligations
• Right to restrict processing (Art. 18) — Request that we limit how we use your data in certain circumstances
• Right to data portability (Art. 20) — Receive your personal data in a structured, commonly used, machine readable format
• Right to object (Art. 21) — Object to processing based on legitimate interest; we will cease processing unless we demonstrate compelling legitimate grounds
• Right to withdraw consent (Art. 7(3)) — Withdraw consent at any time for processing based on consent, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at the details below. We will respond within 30 days as required by GDPR. You also have the right to lodge a complaint with your local data protection supervisory authority.

Google Meet integration & permissions

The VibeSell Chrome extension:

• Only accesses meeting data when active during a Google Meet session
• Displays contextual UI inside Google Meet to deliver insights
• Uses Google APIs only with your explicit consent during OAuth sign in
• Does not monitor or record content outside Meet

We comply with all Google API Services User Data Policies, including the Limited Use Requirements.

Use of Google user data

When you connect your Google Account to VibeSell, we access your Google Calendar and basic profile information (name and email address) only to provide VibeSell's features. Specifically, we use this data to:

• Display your upcoming meetings and calendar events within VibeSell
• Create or update calendar events when you request them
• Attach meeting notes, insights, and summaries to your calendar events
• Authenticate your identity and maintain your account
• Maintain and improve VibeSell's functionality and performance

We do not:

• Use Google user data for targeted advertising or marketing
• Sell Google user data to third parties
• Share Google user data with third parties for their own independent purposes
• Use Google user data to build advertising profiles
• Use Google user data for any purpose unrelated to providing and improving VibeSell

Third party service providers

Any third party service providers we use (such as cloud hosting providers, database services, or AI processing services) may process Google user data solely on our behalf and under strict confidentiality obligations. These providers are contractually prohibited from using your Google data for their own purposes.

AI model improvement

We use aggregated and anonymized conversation data to improve VibeSell's guidance engine and coaching quality. All names, companies, and identifying details are removed before any data is used for improvement purposes. This work is strictly limited to enhancing VibeSell's functionality. We do not use Google user data to build advertising profiles or for any purpose unrelated to providing and improving VibeSell.

Sub-processors and third party services

We engage the following sub-processors to deliver the Service. Each processes data solely on our behalf under strict contractual obligations and is prohibited from using your data for their own independent purposes.

We regularly review our sub-processors and their data protection practices. If we add new sub-processors that materially change how personal data is processed, we will update this list and notify affected users.

Children's privacy

VibeSell is not intended for children under 13. We do not knowingly collect data from children under 13.

Data residency

AI inference is configured to run on European data centers (Google Cloud europe-west4, Netherlands) wherever technically feasible. Database and authentication services are hosted within the EU on AWS infrastructure via Supabase. Where cross-border processing is necessary, we rely on the legal transfer mechanisms described below.

International transfers

Some of our sub-processors are based in the United States. We rely on the following legal mechanisms to ensure an adequate level of data protection for transfers of personal data outside the European Economic Area (EEA) and Switzerland:

• EU-US Data Privacy Framework (DPF) — Recognized by the European Commission as providing adequate protection (Adequacy Decision of 10 July 2023). Our key US-based sub-processors (Google, Anthropic) are DPF-certified.
• Standard Contractual Clauses (SCCs) — Where DPF certification is not available, we use the European Commission's Standard Contractual Clauses as approved in June 2021, supplemented by additional safeguards where appropriate.

You may request a copy of the safeguards we rely on by contacting us at the address below.

Changes to this policy

We may update this Privacy Policy periodically. We will notify you of any material changes by email, within the platform, or by updating this page.

Data Processing Agreement

Enterprise and business customers who require a Data Processing Agreement (DPA) in accordance with GDPR Article 28 may request one by contacting us at the address below. Our DPA covers the scope of processing, sub-processor obligations, data breach notification procedures, and audit rights.

Contact us

If you have any questions or concerns about this policy or your data: