Privacy Policy

Last updated: 4 March 2026

1. Introduction

VibeKeeper Ltd ("we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our services and website (the "Service"). We are a company incorporated in Singapore and this policy is governed by English law.

2. Data Controller

The data controller responsible for your personal data is VibeKeeper Ltd. For questions about this Privacy Policy or our data practices, please contact us at: privacy@vibekeeper.com

3. Information We Collect

We may collect the following types of information:

• Account information: name, email address, and GitHub or other OAuth provider identifiers when you sign in or register.
• Repository metadata: repository names, branch names, and structural information required to perform security scans. We do not store the full content of your code unless necessary to provide the Service.
• Usage data: scan results, timestamps, and other technical data relating to your use of the Service.
• Technical data: IP address, browser type, device information, and cookies in accordance with your preferences.

4. How We Use Your Information

We use your information to:

• Provide, maintain and improve the VibeKeeper Service.
• Perform security scans and identify prompt injections and vulnerabilities in your repositories.
• Process payments and manage subscriptions.
• Send service-related notifications and support communications.
• Comply with legal obligations and protect our rights.
• Analyse and improve our products and user experience in an aggregated, non-personally identifiable manner.

5. Legal Basis for Processing

Under applicable data protection law (including English law principles), we process your personal data on the following bases:

• Contract: to perform our contract with you (providing the Service).
• Legitimate interests: to improve our Service, prevent fraud, and ensure security.
• Consent: where you have given clear consent for a specific purpose (e.g. marketing emails).
• Legal obligation: where we are required by law to process your data.

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service providers: payment processors (e.g. Stripe), hosting providers, and analytics providers who assist in operating our Service, subject to appropriate data processing agreements.
• GitHub: to the extent necessary to connect your repositories and perform scans, in accordance with GitHub's terms and applicable permissions.
• Legal authorities: where required by law or to protect our rights, safety or property.

7. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service. We may retain certain data for longer where required by law or for legitimate business purposes (e.g. audit, dispute resolution). You may request deletion of your data by contacting us.

8. Your Rights

You have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data ("right to be forgotten") in certain circumstances.
• Restrict processing in certain circumstances.
• Data portability.
• Object to processing based on legitimate interests.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the relevant data protection authority (e.g. PDPC in Singapore: pdpc.gov.sg, ICO in the UK: ico.org.uk)

To exercise these rights, contact us at privacy@vibekeeper.com.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. This includes encryption, access controls, and secure development practices.

10. International Transfers

Your data may be processed in countries outside Singapore. Where this occurs, we ensure appropriate safeguards are in place, such as adequacy decisions, Standard Contractual Clauses, or equivalent mechanisms under applicable law.

11. Cookies

We use cookies and similar technologies to operate our Service and improve your experience. You can manage cookie preferences through your browser settings.

12. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

13. Contact

VibeKeeper Ltd
Email: privacy@vibekeeper.com
For general enquiries: support@vibekeeper.com