Privacy Policy

1. Scope

This Privacy Policy describes how Vibedia LLC (“we,” “us,” or “FLPIT”) collects, uses, and shares personal information when you use our web-based music analysis tool (the “Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect the minimum amount of data necessary to provide our AI analysis and prompt generation services.

A. Information You Provide

• Account Information: When you register, we collect your email address to create your account and manage your login credentials (such as magic links). We do not request names, physical addresses, or photos for user profiles.
• Inputs (Your “Vault”): We collect the specific music URLs (e.g., Spotify, YouTube links) you submit for analysis and the resulting text prompts generated by the Service.

B. Information Collected Automatically

• Usage Data: We track your interaction with the Service, including the number of generations you perform daily, to enforce usage limits (e.g., the Free Tier daily cap).
• Device and Log Data: We collect technical data such as your IP address, browser type, device identifiers, and timestamps to maintain security and prevent bot abuse.
• Cookies: We use cookies and local storage to maintain your session (keep you logged in) and store your preferences.

C. Payment Information

If you upgrade to Flpit Pro, payment is processed directly by our third-party processor, Stripe. We receive payment metadata (subscription status, billing history, and a customer ID) but we do not store or have access to your full credit card number.

3. How We Use Information

We use your information for the specific business purposes outlined below:

• To Provide the Service: We process your submitted URLs to generate technical summaries and prompts (using AI models) and to save your generation history to your personal "Vault".
• To Manage Accounts: We use your email to authenticate your access and communicate service updates.
• To Enforce Limits: We use usage logs to calculate your daily generation count and gate access to "Pro" features.
• To Improve FLPIT: We analyze aggregated, non-identifiable usage patterns to optimize our AI prompting logic and interface speed.

4. How We Share Information

We do not sell your personal data. We share information only with the specific service providers that power our infrastructure:

• AI Service Providers (Google Gemini): When you submit a URL, the link and public metadata (such as song structure or mood) are sent to our AI provider, Google (Vertex AI / Gemini), to generate the text prompt.
• Hosting and Database (Google Firebase): Your account data, prompt history, and usage logs are stored securely using Google Firebase.
• Payment Processing (Stripe): We share your email and subscription selection with Stripe to process payments.
• Legal Compliance: We may disclose information if required by law, such as to comply with a subpoena or to protect the safety and rights of Vibedia, our users, or the public.

5. URL Sanitization and AI Processing

We implement specific privacy measures regarding the music links you submit:

• URL Cleaning: Before processing, our system attempts to "sanitize" URLs by stripping personal tracking parameters (such as user IDs often attached to Spotify sharing links) to prevent linking your listening habits on other platforms to your FLPIT identity.
• No Private Training: We use your Inputs to generate your specific result. We do not use your personal generation history to train public-facing AI models, though our third-party AI providers (Google) process data according to their own API data governance policies.

6. Data Retention

We retain your personal information (including your prompt history/Vault) for as long as your account is active or as needed to provide you the Service.

• History Log: We retain your last 20–50 prompts (depending on your plan) to enable the "History" feature.
• Deletion: If you delete your account, your personal data and history will be removed from our active databases, subject to reasonable backup retention and legal obligations.

7. Security

We use industry-standard safeguards, including HTTPS encryption and secure authentication (Firebase Auth), to protect your data. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal information. You may request these actions by emailing us at support@flpit.app.

Cookies: You can instruct your browser to refuse all cookies, though some features (like staying logged in) may not function properly.

9. Children

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child has provided us with personal information, we will take steps to delete it.

10. International Users

If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and third-party providers are located.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our technical stack or legal requirements. If we make material changes, we will notify you (e.g., via email or an in-app notification). Continued use of the Service after the effective date implies acceptance of the updated policy.