Privacy Policy
1. Data we collect
To create and run an account on Vybridge, we collect:
- Your name and email address, used for login, account communication, and transactional email.
- Your account country, used as profile information (for example to complete your account). It is not used as a tax engine.
- Payment information needed to charge or pay you — handled entirely by Stripe (see Section 2).
- Content you submit yourself: site domains, ad slot details, and uploaded creatives.
- Technical logs needed to operate and secure the service (for example request metadata).
2. Payment data & Stripe
Advertiser charges and publisher payouts are processed by Stripe. When referral payout onboarding is used, Stripe-hosted onboarding collects identity and payout information; Vybridge does not collect bank credentials or identity-document images. Stripe stores that data on its own PCI-compliant infrastructure and only shares limited information back to us (such as a Stripe account id, configuration/readiness flags, and connected-account country). Referral payout availability depends on Stripe verification and supported country. Tracked referral rewards are not the same as paid rewards, and referral payout execution is not yet enabled. Stripe does not handle all taxes on a user's behalf.
For details on how Stripe itself handles your data, see Stripe's Privacy Policy.
3. Cookies
Vybridge uses an essential authentication cookie named vybridge_session to keep you signed in. It is not merely a browser-session cookie: its lifetime is up to 7 days. The cookie is HttpOnly and SameSite=Lax, and it is marked Secure in production. We do not use advertising cookies, third-party tracking pixels, or any cross-site behavioral tracking.
4. We don't sell your data
We do not sell, rent, or trade your personal data to third parties, for advertising or any other purpose. Your information is used only to operate the marketplace: matching advertisers with website publishers, processing payments, serving eligible bookings, and communicating with you about your own bookings and deals.
5. Cloudinary (creative storage)
Ad creative images you upload for a website slot booking are stored using Cloudinary, a third-party media storage provider. Cloudinary hosts and serves these files on our behalf; it does not have access to your account, payment, or contact information.
6. Geographic advertising eligibility
For eligible serving, security, and measurement, Vybridge may derive a visitor country from the network IP address using IP-based geolocation (including GeoLite Data created by MaxMind, available from https://www.maxmind.com). That lookup is approximate. The IP used for this GEO resolution is held in memory for the request and is not persisted by the GEO resolution process.
For booked website ad placements, Vybridge may persist a minimal measurement ledger containing booking/serving attribution, event type (impression or click), timestamp, and resolved country when available. This supports serving accountability only. It does not measure unique persons, demographics, reach, or audience size, and Vybridge does not persist raw visitor IPs, advertising cookies, or cross-site behavioral profiles in this Booking measurement ledger.
A legacy Deal click record may still store the visitor IP address and user agent for historical Deal click accounting. That legacy processing is separate from Booking serving measurement and is not used to build advertising profiles.
7. Email and hosting
Transactional email (for example password reset) is sent using Resend when that service is configured. The Vybridge application is operated on a cloud hosting provider. These providers process data only to deliver those services.
8. Your rights (GDPR)
If you are located in the European Economic Area, you have the right to access, correct, or delete your personal data. You can delete your account and all associated data at any time from your account profile page, provided you have no active bookings or deals in progress. For any other data request, contact us at the email below.
9. Data retention
We keep your account data for as long as your account is active. If you delete your account, your profile, site, and slot data is removed immediately; records of completed financial transactions may be retained separately for as long as required by tax and accounting law, independent of your account's existence.
10. Contact
Questions about this Privacy Policy or a request regarding your personal data can be sent to privacy@vybridge.com.