This policy covers the VibeManager desktop app, the VibeManager servers it talks to, and this website. "We" and "us" mean VibeManager. For anything in it, write to [email protected] and a person will reply.
The short version
- Your projects stay on your computer. The app sends our servers what an AI model needs to answer: your prompts, the code and files your agents read, and the agents' steps.
- We record each model call and agent step for 30 days, on our own servers in the EU, to run the service and fix problems. Then we delete it.
- "Help improve VibeManager" is your choice, free, in Settings → Privacy. It starts off in the EU and EEA, the UK and Switzerland.
- We don't sell your data and we don't show ads.
- Delete your account and we delete your traces.
What we collect
Your account. Your email address, and your name if your sign-in provider shares it (Google, GitHub or an emailed code, through WorkOS). The country your computer is set to, read once when you first sign in, to set the improve setting's default. Whether you were invited, and your waitlist entry if you joined it.
Prompts, code and agent activity ("Content"). When you use VibeManager, the app sends your prompts, the code excerpts and files your agents read, the AI model's replies and the agents' tool calls (their arguments and results) through our servers to the AI model providers that answer them.
Records of each call and step. For every model call: which model and provider answered, tokens, cost, timing, whether it succeeded, the app version, and ids that tie it to your session, agent, project and run. For agent steps: when a session, turn, tool call or security-audit stage started and ended, and how it went.
This website. Pages visited, the referring page, browser and device type, and errors, through PostHog analytics. The site's host keeps standard request logs.
We don't collect payment details: there are no paid plans yet.
Why we use it
- To run VibeManager: sign you in, send your agents' calls to the AI providers and return the answers. This is necessary to provide the service you asked for.
- To find and fix failures, prevent abuse and work out costs. We record each model call and agent step, including Content, so we can see what went wrong and what each call cost. This is necessary to provide the service, and our legitimate interest in a secure, working service.
- To improve VibeManager, if "Help improve VibeManager" is on. We may then also use Content to make VibeManager better. This is our legitimate interest, or your consent where the law requires it. You can turn it off at any time in Settings → Privacy, free of charge; turning it off stops future use.
- To email you about your invite or waitlist place, and to reply when you write to us.
- To understand how the website is used, in aggregate.
Where it goes
Content and the records of each call are kept on our own servers in the EU. We use these providers to run VibeManager:
- AI model providers, which receive Content to answer each call: OpenRouter, which passes each call to the company that makes the model you use; Anthropic when a stage uses a Claude model; and Fireworks AI for models served there. Each processes Content under its own API terms.
- WorkOS for sign-in.
- Hostinger for our email.
- Cloudflare, which carries traffic to our servers and app updates.
- PostHog for website analytics, and our website host.
- Contabo and Hetzner, whose data centres in the EU host our servers.
Some of these providers are in the United States, so using VibeManager means some of your data, including Content sent to an AI model, is processed there.
We don't sell Content or any other personal data, and we share it only as this policy describes, or when the law requires it.
How long we keep it
- Content and the records of each model call and agent step: 30 days, then deleted. A daily job deletes them from our tracing system and clears the Content of the agent records we keep.
- Usage records (model, tokens, cost, timing and outcome of each call, with no Content): kept for accounting. If you delete your account, we keep them without the link to you.
- Your account: until you delete it.
- Emails you send us: as long as we need them to help you.
Keep only metadata
Some accounts have "Keep only metadata". For them we record timing, cost and error records but not prompts, code or agent output. Content still goes to the AI provider to answer the call.
Deleting your account
Write to [email protected] from the email address you sign in with. We delete your account, your sign-ins and the agent records sent from your app, and we delete your traces from our tracing system. Usage records stay, as above, without the link to you.
Your rights
Depending on where you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time. Write to [email protected]; we'll answer within a month. You can also complain to the data protection authority where you live.
Your projects and your computer
Your projects, files and git history stay on your computer. A security audit runs the code it checks inside a sandbox on your Mac. The app keeps its own settings and history on your computer; uninstalling it and deleting its data folder removes them.
Children
VibeManager is not meant for anyone under 16, and we don't knowingly collect their data.
Changes
When we change this policy we update the date at the top. If a change affects how we use your data, we'll tell you before it applies.