Privacy policy

This policy explains how VibeBox Web Studio (“VibeBox”, “we”, “us”) collects and uses information through the public website, project inquiry process, payments, and protected client services. Contact: support@vibeboxph.com.

Related policies: Terms of service, Payment terms, Refund policy, and Cookie policy.

Who this policy covers

It applies to visitors of the public VibeBox website, people who send a project brief, and signed-in clients using the dashboard when those features are enabled. It does not replace the privacy practices of third-party tools you connect to a client website (for example your own payment or SMS providers).

Information we collect

Project inquiries

When you use the contact form at /contact, we collect the details you submit, which may include name, email, company, current website, project type, budget range, timing, and project message. We also use a honeypot field to reduce spam; that field is not intended for human input.

Client account and project data

When dashboard features are enabled, we may process Google sign-in identity (such as name and email), project records, payment status for deposits and balances, support or inbox messages, domain-setup requests, credit balances, and review submissions.

Payment records

For platform deposits, balances, and credits we store transaction references, amounts, status, and related project identifiers. Payments are processed through Xendit. VibeBox does not store complete card numbers.

Technical and analytics data

We may collect basic technical data such as IP address, user agent, and server logs needed for security, rate limiting, and reliability. When optional analytics are configured and you accept them, we may measure public-site events such as inquiry started or submitted. See the cookie policy.

How information is used

• Review inquiries and communicate about projects
• Prepare proposals and deliver contracted work
• Operate client dashboard, payments, credits, inbox, reviews, and domain-setup workflows
• Process and reconcile platform payments through Xendit
• Protect the website from spam, abuse, and unauthorized access
• Meet accounting, tax, or legal duties
• Improve the public website when analytics consent is given

VibeBox does not sell personal information.

Legal bases and sharing

We process information to respond to your requests, perform a contract (or steps toward one), operate the service, and meet legitimate business and legal needs. We share information with processors only as needed to run VibeBox, or when required by law.

Service providers

Typical processors include:

• Resend — inquiry and admin notification email delivery
• Xendit — platform payment processing
• Vercel — hosting and deployment
• Supabase — authentication and project data when dashboard features are enabled
• Google — sign-in identity when Google authentication is enabled

Each provider processes data under its own terms and privacy practices. Client websites may also use separate providers you supply (maps, payments, SMS, analytics, and similar); those flows are governed by those providers and your own notices to your users.

Client websites we build

For websites VibeBox designs or develops for you, personal data collected on your live site (for example your customers’ form submissions) is generally processed under your instructions and your privacy policy once the site is launched and under your control. During build and staging, limited test or sample content may be used only to deliver the agreed work.

Retention and security

Inquiry and project information is retained only as long as reasonably needed for communication, delivery, support, dispute resolution, accounting, and legal obligations. Payment and invoice records may be kept longer where required for bookkeeping or tax rules.

Reasonable technical and organizational safeguards are used, but no internet service can guarantee absolute security. Keep dashboard credentials secure and tell us promptly if you suspect unauthorized access.

International processing

VibeBox is based in the Philippines. Some processors (for example hosting or email) may store or process data in other countries. By using the service you understand that information may be transferred to those locations subject to the provider’s safeguards.

Your choices

• Ask to access, correct, or delete personal information, subject to records VibeBox must retain for legal or accounting reasons.
• Accept or reject optional analytics through the consent banner when analytics are configured. Clear site data for this domain to reset that preference, or contact us.
• Use browser controls to block or remove cookies; doing so may sign you out of protected features.
• Unsubscribe or reply to stop non-essential marketing messages; project and transactional emails related to an active engagement may still be necessary.

Email support@vibeboxph.com with privacy requests. We will respond within a reasonable time.

Children

The VibeBox website and services are directed at businesses and adult professionals. We do not knowingly collect personal information from children.

Changes

We may update this policy as the product or legal requirements change. The “Last updated” date at the top reflects the current version.