Privacy Policy

1. Who We Are

VibeGate ("we", "us", "our") operates the VibeGate AI Skill Safety Registry at this domain. We provide automated safety analysis for AI agent skill packages and maintain a public ledger of scan results.

2. Information We Collect

We collect the following categories of information:

• Submitted skill packages: When you submit a skill for analysis, we receive the package file or URL, its SHA-256 hash, the declared developer name, and an optional source URL. This information is stored and made partially visible in the public ledger.
• Contact and payment information: If you purchase a report, your contact details and payment are processed by our payment provider (Stripe). We do not store full payment card details.
• Server log data: Standard web server access logs including IP addresses, request paths, and timestamps. Logs are retained for up to 90 days for security and diagnostic purposes.

3. How We Use Your Information

• To perform automated safety analysis on submitted skill packages.
• To maintain the public ledger of scan results.
• To deliver paid reports and fulfil purchase orders.
• To operate and improve the VibeGate service.
• To detect and prevent abuse or fraudulent submissions.

4. Public Ledger

The VibeGate ledger is public by design. Information you submit — including the skill name, developer name, source URL, SHA-256 hash, scan status, and risk score — will be visible to anyone who accesses the ledger. If you do not wish this information to be publicly visible, do not submit the skill for analysis.

5. Data Sharing

We do not sell personal data. We share data only in the following circumstances:

• Payment processing: With Stripe to process transactions.
• Legal compliance: If required by law, court order, or regulatory obligation.
• Service providers: With infrastructure providers (hosting, CDN) who process data solely on our behalf under data processing agreements.

6. Data Retention

Ledger entries are retained indefinitely as part of the permanent public record. Paid report findings are retained for 12 months after delivery. Server logs are retained for 90 days.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete personal information we hold about you. Note that information included in the public ledger (which is part of the permanent record) may not be removable. To make a request, contact us at privacy@vibegate.io.

8. Cookies

This site does not use tracking cookies or third-party analytics. We use only session-necessary functionality where required.

9. Changes to This Policy

We may update this policy from time to time. The "last updated" date above will reflect any changes. Continued use of the service constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions: privacy@vibegate.io