Privacy Policy

Last Updated: December 6, 2025

1. Introduction

Welcome to Vibal. This Privacy Policy explains how Vibal, Inc. ("Vibal," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our platform, website, and related services (collectively, the "Platform").

Vibal is an online marketplace platform that connects brands, creators, venues, and vendors to plan, contract, activate, and measure in-person event marketing experiences. By using our Platform, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

We collect information you provide directly, information generated through your use of the Platform, and information from third-party sources.

Account & Profile Information

• Email address, name, and password for account registration
• Company name, role, and business information
• Profile details specific to your role (creator, brand, venue, or vendor)
• Profile photos, logos, and brand assets
• Public social media handles (Instagram, TikTok, etc.)

Event & Transaction Data

• Event details, bookings, and activation information
• Activation workspace communications and agreement details
• Deliverables, scope agreements, and performance metrics
• RSVP data, check-in records, and attendance information

Payment Information

• Payment method details (processed securely by trusted third-party payment providers)
• Billing address and invoicing information
• Payment recipient details for creators, venues, and vendors

Automatically Collected Information

• Device information, browser type, and operating system
• IP address and approximate location (when permitted)
• Usage patterns, pages visited, and features used
• Cookies and similar tracking technologies

3. How We Use Your Data

We use the information we collect to provide, improve, and personalize our Platform:

• Platform Operations: identity verification, account access, activation workspace participation, agreement coordination, and payment status visibility.
• Matching & Recommendations: AI-assisted audience fit scoring, creator-brand matching, and personalized activation recommendations.
• Communications: facilitating messages between brands, creators, venues, and vendors. Sending transactional notifications and, with consent, marketing communications.
• Security & Compliance: fraud detection, security monitoring, dispute resolution, and legal compliance.
• Analytics & Improvement: understanding how users interact with the Platform to improve features, performance, and user experience.

4. Data Sharing & Disclosure

We share your information only as necessary to provide the Platform and as described below. We do not sell your personal information.

Between Platform Participants

During deal execution, relevant information is shared between creators, brands, venues, and vendors participating in the same activation. This includes profile information, event details, and communications necessary for collaboration.

Service Providers

We work with trusted third-party service providers for payment processing, email delivery, cloud hosting, analytics, and customer support. These providers access data only as needed to perform their services.

Legal Requirements

We may disclose information when required by law, legal process, or government request, or when necessary to protect the rights, property, or safety of Vibal, our users, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. User-Generated Content

When you upload content to Vibal-including photos, videos, event descriptions, and promotional materials-you grant us a license to display, distribute, and use that content in connection with the Platform and our marketing efforts.

Content shared in public areas of the Platform (such as public event pages) may be visible to other users and the general public. You are responsible for the content you share and should not upload content you do not have the right to share.

For details on content ownership and usage rights during activations, please refer to the specific terms in your activation agreements and our Terms of Service.

6. Data Retention & Security

Retention

We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Transaction records may be retained for up to seven years for financial and legal compliance.

Security Measures

We implement industry-standard security measures to protect your data, including:

• Encryption of sensitive data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Employee training on data protection practices

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access & Portability: request a copy of the personal information we hold about you in a portable format.
• Correction: request correction of inaccurate or incomplete personal information.
• Deletion: request deletion of your personal information, subject to legal retention requirements.
• Opt-Out: opt out of marketing communications and certain data processing activities.

For California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information.

For EU/UK Residents (GDPR)

If you are in the European Union or United Kingdom, you have rights under GDPR including access, rectification, erasure, restriction of processing, data portability, and the right to object. You may also lodge a complaint with your local data protection authority.

8. Third-Party Integrations

Vibal integrates with various third-party services to enhance Platform functionality. When you connect these services, you may be sharing data with those providers:

• Facebook & Instagram: Event import, audience insights, and social sharing
• TikTok: Creator profile linking and commerce features
• Klaviyo: Marketing automation and attendee sync for brands
• Shopify: Commerce attribution and discount code tracking
• Payment processor: Processes payments between participants (e.g. PayPal)
• Google Analytics: Website usage and performance analytics

Each integration uses OAuth or secure API connections. Your use of these integrations is also subject to the respective provider's terms of service and privacy policy. You can disconnect integrations at any time through your account settings.

9. Cookies & Tracking

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver personalized content.

• Essential: Required for Platform functionality and security
• Analytics: Help us understand how users interact with the Platform
• Preferences: Remember your settings and preferences
• Marketing: Used to deliver relevant ads and track campaign effectiveness

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect Platform functionality.

10. Children's Data

Vibal is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us at privacy@getvibal.io.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, through email or Platform notifications. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about how we handle your information, please contact us: