Privacy Notice
Last updated: October 2026
1. Who we are
VibeCheck.ai is operated by CQH ("CQH", "we", "us"). CQH is the data controller for the personal data described in this notice.
2. Data we collect
- Account data: name, email address, and login credentials when you sign up or sign in.
- Usage data: pages visited, features used, scans run, and similar telemetry.
- Device data: IP address, browser type, and device identifiers.
- Support data: messages you send us.
Payment information is collected and processed by Paddle (our Merchant of Record), not by CQH.
3. Why we use it and our legal basis
- Creating and managing your account — contract performance.
- Providing and improving the service — contract performance and legitimate interests.
- Security and fraud prevention — legitimate interests and legal obligation.
- Customer support — contract performance.
- Product analytics and improvement — legitimate interests.
4. Who we share data with
- Service providers and subprocessors (hosting, analytics, support tooling).
- Paddle, our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance, and invoicing.
- Professional advisers (legal, accounting) where needed.
- Authorities where required by law.
5. Retention
We keep personal data only as long as needed for the purposes above, after which it is deleted or anonymised. Account data is kept while your account is active; support and usage records are kept for a limited period consistent with those purposes.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent. To exercise any of these rights, contact us through the support channel listed on the site. If you are in the UK or EEA, you also have the right to complain to your supervisory authority; we respond to requests within one month.
7. International transfers
Some of our service providers process data outside the UK/EEA. Where this happens, we use appropriate safeguards such as standard contractual clauses or adequacy decisions.
8. Security
We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect your personal data.
9. Cookies
We use essential cookies required for sign-in and security. Where analytics cookies are used, you can manage your preferences through your browser settings.