Privacy Policy

1. Who is responsible

Vibewright Labs LLC, a Georgia limited liability company based in Atlanta, United States, operates vibewrightlabs.com and is responsible for the personal information described here. Contact hello@vibewrightlabs.com about privacy or to request a mailing contact.

This policy covers this informational website and inquiries sent to the parent studio. Our group includes iHosting LLC, GridCast LLC, Vibetronics LLC and iBar Customs LLC. Their product sites have their own operators, agreements and privacy notices; this policy does not replace them. If an inquiry concerns a group company, we may share the relevant inquiry with that team to answer you. We do not give every group company access to every inquiry.

2. Information we receive

• Inquiries: your optional name, email address, selected topic, message and subsequent correspondence. The form also records the submission time, browser user agent and country provided by our hosting service.
• Site delivery and security: Cloudflare handles network information, including IP address, requested URL, browser details and request/error metadata. Our form uses an IP-based attempt counter to limit abuse. The IP is not included in the stored inquiry record, but appears in the separate short-lived rate-limit key and may be processed in infrastructure logs.
• Optional analytics: only after you allow it, we send PostHog a company-link click with the selected company, or a successful contact-submission event with its selected topic, plus event time and a temporary technical identifier. Our analytics provider also handles connection information needed to receive the request.

Please do not send passwords, payment-card details, sensitive personal records, or information about other people that we do not need to answer your inquiry.

3. Why we use information

We use inquiries to respond, assess a proposed relationship, route product questions to the appropriate team and maintain relevant business correspondence. We use technical information to deliver the site, prevent spam and abuse, diagnose failures and protect the service. Optional analytics helps us understand interest in our companies and inquiry topics. Sending an inquiry does not subscribe you to marketing.

Where EU or UK data-protection law applies, our bases are steps you request before entering a contract, legitimate interests in responding to other inquiries and operating a secure website, consent for optional analytics, and legal obligations where records must be kept or disclosed. You can object to processing based on legitimate interests or withdraw analytics consent.

4. Who receives information

Access is limited to people and providers who need information for the purposes above:

• Cloudflare: hosts and protects the site and stores contact-form records in Workers KV.
• Inquiry delivery: the form sends inquiry content and contact details to our private Discord notification channel for the team to read and respond. Mailbox providers process messages you send directly by email and our replies.
• PostHog: receives the limited optional analytics events through its United States service after permission.
• Relevant group-company staff and professional advisers: receive information needed to answer the inquiry, provide advice or manage a resulting relationship.

We may disclose information where required by law, to protect rights or safety, or as part of a business reorganisation with appropriate protections. We do not sell inquiry information or provide it for cross-context behavioural advertising.

Providers and staff may process information in the United States and other countries. Where applicable transfer restrictions require safeguards, transfers must use an authorised mechanism; contact us for information about the safeguards relevant to your information.

5. How long information stays

• Contact-form database: each successfully stored inquiry is set to expire 180 days after submission.
• Abuse counters: the form's IP-based rate-limit keys expire after 3,660 seconds, approximately 61 minutes.
• Email, Discord and business correspondence: the database expiry does not delete copies delivered to those systems. These copies are kept while needed to resolve the inquiry, maintain an active business relationship, document advice or decisions, resolve a dispute, or meet legal recordkeeping duties. They should be removed when those purposes no longer apply.
• Infrastructure logs and provider copies: these have separate provider retention and backup cycles. Continued retention is limited by troubleshooting, security, recovery and legal needs; a deletion from our live database does not mean every provider backup is erased immediately.
• Optional analytics: records are retained while useful for evaluating company interest and inquiry patterns, subject to project retention settings and deletion requests. They are not linked to a contact record. The temporary browser analytics identifier ends with the page session; your saved analytics choice remains until changed or browser storage is cleared.

A legal hold or legal obligation may require us to preserve particular records. Privacy requests apply across systems we control, with any necessary exceptions explained in our response.

6. Browser storage and analytics choices

Optional analytics is off by default. PostHog is not loaded until you choose to allow it. We disable automatic click/form capture, page-view tracking, session replay, heatmaps and person profiles. Names, email addresses, message content, page query strings and referrers are excluded from our analytics events. We do not use a persistent PostHog identifier across pages or group-company sites.

We save your allow/decline choice in this site's browser local storage so it can be remembered. If storage is unavailable, a choice only lasts on the current page. Global Privacy Control and Do Not Track signals turn optional analytics off, even after an earlier opt-in. If you decline or withdraw, future capture stops; this does not automatically erase events already received by the provider.

Change analytics choice. You can also clear site storage in your browser. Cloudflare may use essential security cookies where needed to deliver and protect the site. These are separate from optional analytics. You can use the contact form without allowing analytics.

7. Your choices and privacy requests

Email hello@vibewrightlabs.com to ask what information we hold, obtain a copy, correct it or request deletion. Where applicable law provides them, you may also have rights to data portability, restriction, objection, consent withdrawal and an appeal or complaint to your local data-protection authority. We do not use this site's information for automated decisions with legal or similarly significant effects.

Use the email associated with the inquiry where possible. We may request proportionate verification before disclosing or changing records, and will respond within the period required by applicable law. We will explain any reason we cannot fulfil a request in full and will not penalise you for exercising a privacy right. Do not send identity documents unless we specifically need them and arrange an appropriate method.

8. Security and children

We use HTTPS, access restrictions and form validation and abuse controls to protect information. No service can guarantee absolute security. Please report a suspected issue to hello@vibewrightlabs.com.

This business-information site is not directed to children under 13. If you believe a child under 13 has sent us personal information, contact us so we can investigate and remove it where appropriate.

9. Changes and contact

We will update the date on this page when this policy changes and provide additional notice for material changes where appropriate or required. A new optional use that requires consent will require a new choice; continued browsing alone does not grant that consent.

Vibewright Labs LLC · Atlanta, Georgia, United States
hello@vibewrightlabs.com

See also our Website Terms.