Legal

Privacy Policy

This explains what Vibeita / Digital collects when you buy a template, why we keep it, and how to have it deleted. We collect as little as we can get away with.

Last updated: July 30, 2026

Who we are

Vibeita / Digital is a division of Vibeita, the controller of the personal data described here. Reach us at hello@vibeita.com.

What we collect

When you buy

  • Your email address, collected by Stripe at checkout so we can send your receipt and re-send your template link if you lose it.
  • Order records — the Stripe checkout session and payment identifiers, the product bought, the amount and currency, payment status and fulfillment status, and the timestamps for each.
  • A Stripe customer identifier, where Stripe creates one.

We never receive or store your card details. Card data goes directly to Stripe, which is PCI-DSS certified. We only ever see identifiers and totals.

When you email us

We keep the message and your address so we can answer and refer back to the conversation if you write again.

When you browse

This site does not use advertising cookies, analytics cookies, or third-party trackers. We do not build a profile of you and we do not run a consent banner because there is nothing to consent to. Our host records standard server logs (IP address, timestamp, requested page) for security and reliability, kept for a short period.

Why we keep it

  • To deliver what you bought — matching your payment to your template access. This is performance of our contract with you.
  • To support you — looking up your order when you write in.
  • To meet tax and accounting duties — transaction records must be retained for a legally defined period.
  • To prevent fraud and duplicate charges — our legitimate interest in running the business safely.

We do not send marketing email, and we do not sell, rent, or trade your data to anyone. Ever.

Who else processes it

  • Stripe — payment processing and receipts. Stripe is an independent controller for payment data under its own privacy policy.
  • MongoDB Atlas — the database holding our order records.
  • Vercel — hosting and server logs for this site.
  • Notion Labs— hosts the template you duplicate. Once the template is in your workspace, whatever you put into it is governed by Notion’s privacy policy and is not visible to us.

Each is bound by its own data-processing terms. We add no others without updating this page.

How long we keep it

  • Order records: for as long as tax and accounting law requires — typically seven years — then deleted.
  • Support email: up to two years after the conversation ends.
  • Server logs: a short retention period set by our host.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and complain to your data protection authority. California residents have equivalent rights under the CCPA, including the right not to be discriminated against for exercising them — and since we do not sell personal information, there is nothing to opt out of.

To exercise any of these, email hello@vibeita.com from the address you used at checkout. We respond within 30 days. Note that we may need to retain order records where tax law requires it, even after a deletion request — in that case we restrict them rather than delete them.

Data you store in your own template

Once you duplicate a template into your Notion workspace, anything you record there — vehicles, customers, bookings — is yours alone. We have no access to it, cannot see it, and cannot recover it. For that data you are the controller, and you are responsible for handling your own customers’ information lawfully.

Security

The site is served over HTTPS. Secret keys and database credentials are held in server-side environment variables and are never exposed to the browser. Access to order records is limited to the people who need it to run the business.

Children

Our products are sold to businesses. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, write to us and we will delete it.

Changes

Material changes are reflected in the “last updated” date above. Continued use after a change means you accept the revised policy.

Contact

Privacy questions and data requests: hello@vibeita.com