Privacy without the fine print.

Vibe Articles is a subscription platform that produces and publishes articles with artificial intelligence: you set the vibe (brief, files, sources) and the platform researches, writes, illustrates and publishes on your blog, with the Vibe on or waiting for your approval.

This notice explains how we handle personal data on three fronts:

• This site (vibearticles.com), including the contact form and the demo request.
• The platform dashboard, where you configure blogs, upload files, approve articles and follow results.
• The blogs published with the platform, on a vibearticles.com subdomain or on your own domain.

It follows Brazil's General Data Protection Law (LGPD, Law 13.709/2018) and uses its terms: personal data, data subject, controller, processor and legal basis.

We handle only what is needed to run the service. The table below summarises each category, the purpose, the legal basis and the retention period.

We do not store card numbers. Payment is processed by a specialised provider that receives the data directly and returns only the payment confirmation to us.

• Create, maintain and protect your account and the blogs linked to it.
• Run the editorial cycle: research signals, propose stories, write, illustrate and publish.
• Charge the subscription, issue tax documents and track plan limits.
• Provide support, answer requests and resolve incidents.
• Notify you about publications, failures, service changes and relevant news.
• Measure aggregate platform usage to fix problems and prioritise improvements.
• Comply with legal obligations and defend our rights when necessary.

We do not make automated decisions that affect your interests in a legal or significant way. The story selection made by the AI concerns the blog's content, not people.

Each processing activity relies on one of the grounds in art. 7 of the LGPD:

• Performance of a contract (item V) for everything needed to deliver the subscribed service.
• Pre-contractual steps (item V) for demo requests, quotes and commercial contact.
• Compliance with a legal obligation (item II) for tax retention and access logs.
• Legitimate interest (item IX) for security, fraud prevention, support and product improvement, always with an assessment of the impact on your rights.
• Consent (item I) for anything optional, such as subscribing to a newsletter. You can withdraw consent at any time, without affecting what was done before.

On this site

This site is static and uses no tracking cookies, ad pixels or third-party analytics. Fonts are served from our own domain, so no request goes out to external networks while you browse here.

In the dashboard

The dashboard uses a strictly necessary session cookie to keep you signed in. Without it you cannot log in. We do not use that cookie for advertising.

On published blogs

Each blog generates reading statistics in aggregate form. If you connect Google Analytics 4 to your blog, Google starts handling reader data under its own policies, under your responsibility as controller. Enabling it is optional and lives in your dashboard.

We do not sell personal data and do not hand it over for third-party advertising. We share it only with whoever is necessary for the service to work, always under contract and with a limited purpose:

• Infrastructure and hosting: application servers, database and storage for files and images.
• AI model providers: text and image generation from your blog's brief, files and sources.
• Search and signal APIs: web research used as raw material for the stories.
• Email delivery: transactional messages, daily digest and alerts.
• Payment processor: subscription billing and receipts.
• Google Analytics 4: only if you enable it on your blog.
• Authorities: when there is a court order or legal obligation, to the extent required.

The named, up-to-date list of subprocessors is available on request through the contact form. We notify active customers before relevant changes.

Part of our infrastructure and some AI model providers operate outside Brazil. In those cases the transfer takes place under art. 33 of the LGPD, supported by contractual clauses that impose on the supplier a level of protection compatible with Brazilian law, including confidentiality, security and purpose limitation.

The content you upload (brief, files, sources, story ideas) is used to produce your blog's articles and nothing else.

• We do not use customer content to train models of our own.
• We contract model providers through their APIs and give preference to suppliers whose terms do not use content sent that way for training.
• Nobody on the team reads your content out of curiosity. Access happens only when you ask for support or when an incident has to be investigated, and it is logged.
• Internal quality and cost metrics are calculated in aggregate, without exposing any customer's content.

The periods are in the table in section 02. In short: account data and content while the subscription exists, access logs for 6 months, tax documents for 5 years.

After cancellation we keep the data for 30 days so you can export everything or reactivate the account. After that we delete or anonymise whatever is not subject to mandatory retention. Backups run on their own cycle and are overwritten within 30 days.

• Traffic always over HTTPS, with a certificate issued and renewed automatically, including on custom domains.
• Passwords stored with a salted hash. Nobody, not even us, can read your password.
• Infrastructure access by key, restricted to whoever needs it, with administrative actions logged.
• Isolation per blog: every query is filtered by the authenticated user's blog.
• Periodic backups of the database and of the published files.

No system is immune to incidents. If an episode with relevant risk to data subjects happens, we notify those affected and the Brazilian data protection authority within a reasonable period, with what is known, what was done and what we recommend.

Art. 18 of the LGPD guarantees you the right to:

• Confirm whether we process your data and access that data.
• Correct incomplete, inaccurate or outdated data.
• Request anonymisation, blocking or deletion of unnecessary or excessive data.
• Request portability of your data to another supplier.
• Delete data processed on the basis of consent.
• Know which entities we share your data with.
• Withdraw consent and object to processing based on legitimate interest.

Much of this you can handle yourself in the dashboard: edit your details, export articles in Markdown or JSON and delete content. For the rest, use the contact form with the subject “Privacy”. We reply within 15 days, free of charge, and may ask for extra information to confirm your identity before releasing data.

If the answer does not resolve it, you can file a complaint with the Brazilian National Data Protection Authority (gov.br/anpd).

When you publish a blog with Vibe Articles, your readers' data (reading statistics, newsletter emails, form messages) is processed by us at your request and under your instructions. In that relationship you are the controller and we are the processor.

That means it is up to you to:

• Publish your blog's privacy policy and inform your readers.
• Define the legal basis for what you collect, including newsletter consent.
• Answer your readers' requests. We help with the data and the tools needed.
• Decide whether to enable Google Analytics and tell your readers about it.

The platform is intended for people over 18, in a professional context. We do not knowingly collect data from children and teenagers. If we identify an account in that situation, we close it and delete the data. If you know of a case, tell us through the contact form.

The official channel for privacy matters, exercising rights and communicating with the person in charge of personal data processing is the contact form, with the subject “Privacy”. Requests are received by the data protection officer and answered within 15 days.

This notice may change as the service evolves or the law requires. The version and effective date are at the top of the page. For relevant changes we notify active customers by email and in the dashboard at least 30 days in advance, and the previous version remains available on request.