Privacy Policy

Last updated: April 2, 2026

1. Information We Collect

BSVibe collects the following information to provide its services:

• Account information: email address (collected via Supabase Auth)
• Usage records: API call logs, usage statistics
• Device information: browser type, IP address (for security)

2. Purpose of Use

• Service delivery and account management
• Usage-based billing and cost tracking
• Product improvement and bug fixes
• Security threat detection and response

3. Retention and Deletion

Personal information is retained while the service is used, and deleted within 30 days of an account deletion request. Where laws require longer retention, we retain only for that period.

4. Third-Party Sharing

BSVibe does not share personal information with third parties without user consent, except:

• When required by law
• To essential third-party integrations needed to provide the service (Supabase Auth)

5. Security Measures

• All traffic is encrypted via TLS/HTTPS
• API keys are encrypted at rest with AES-256-GCM
• JWT authentication (ES256-signed)
• Principle of least privilege for access

6. Contact

Privacy questions: contact@bsvibe.dev