Privacy Policy

We collect information that you provide directly to us, information that is generated through your use of the Service, and information obtained from third-party platforms you connect to the Service. The categories of information we collect include:

• Account Credentials & API Keys: When you register for an account or configure integrations, we collect API keys, authentication tokens, and account credentials necessary to connect to third-party platforms such as Snapchat, Fanvue, and Telegram.
• Conversation & Message Data: We collect and process the content of messages exchanged through connected platforms, including text messages, media references, and conversation metadata. This data is essential for our AI to generate contextually appropriate responses on your behalf.
• Fan & Subscriber Data: We collect information about your fans and subscribers as provided by the connected platforms, including usernames, display names, subscriber status, and interaction history.
• Platform Tokens: OAuth tokens, session tokens, and other authentication credentials for Snapchat, Fanvue, and Telegram integrations are collected and securely stored to maintain active connections to these platforms.
• Usage Analytics: We collect data on how you interact with the Service, including feature usage, response rates, conversation volumes, and operational metrics.
• Device & Network Information: We automatically collect your IP address, browser type, operating system, device identifiers, and other technical information when you access the Service.
• Payment Information: When you subscribe to paid plans or purchase credits, payment information is collected and processed by our third-party payment processor, Stripe. We do not store full credit card numbers on our servers.

We use the information we collect for the following purposes:

• Providing the Service: To operate, maintain, and deliver the core functionality of Vybe Bot AI, including managing conversations across connected platforms, processing messages, and facilitating creator-subscriber interactions.
• AI-Powered Responses: To generate contextually appropriate, AI-powered responses to incoming messages on your behalf, using the conversation history and configuration parameters you have set.
• Conversation Management: To manage conversation queues, prioritize messages, detect and skip duplicate messages, and ensure timely responses across all connected platforms.
• Analytics & Insights: To provide you with dashboards, reports, and analytics about your conversation activity, subscriber engagement, and platform performance.
• Service Improvement: To analyze usage patterns, diagnose technical issues, and improve the reliability, performance, and features of the Service.
• Fraud Prevention & Security: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• Communications: To send you service-related notifications, updates, security alerts, and administrative messages.

Our Service relies on artificial intelligence to generate responses in conversations on your behalf. It is important that you understand how your data interacts with our AI systems:

• Message Processing: Incoming messages from your fans and subscribers are transmitted to AI language models for the purpose of generating contextually appropriate responses. This processing occurs in real time and is essential to the core functionality of the Service.
• No Model Training on Your Data: We do not use your conversation data, message content, or any personal information to train, fine-tune, or improve our underlying AI models. Your data is used solely for the purpose of generating responses within your active sessions.
• Prompt Configuration: The AI responses are shaped by system prompts and configuration parameters that you control through the dashboard. These settings determine the tone, style, and behavioral boundaries of the AI’s responses.
• Transient Processing: Conversation context sent to AI models is used only for the immediate response generation. We do not maintain persistent conversation histories within the AI model infrastructure beyond what is necessary for active session continuity.

We integrate with and rely upon the following third-party services to deliver the Service. Each of these services has its own privacy policy governing how it handles data:

• OpenAI / OpenRouter: We use AI model providers including OpenAI and OpenRouter to process messages and generate AI-powered responses. Message content and conversation context are transmitted to these providers for response generation. These providers are contractually obligated not to use your data for model training.
• Stripe: Payment processing is handled by Stripe, Inc. Stripe collects and processes payment card information in accordance with PCI DSS standards. We do not store your full payment card details on our servers.
• Fanvue API: We connect to the Fanvue platform via its official API using OAuth authentication to access and manage conversations, subscriber data, media, and other creator tools on your behalf.
• Telegram Bot API: We use the Telegram Bot API to send and receive messages, manage subscriber interactions, and process payments through Telegram’s bot infrastructure.
• Railway: Our backend services and databases are hosted on Railway’s cloud infrastructure, which provides persistent storage volumes and managed deployment environments.
• Vercel: Our frontend dashboard and web applications are hosted on Vercel’s edge network for fast, reliable content delivery.

We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.

We take the security of your data seriously and implement industry-standard measures to protect it:

• Encryption: All data is encrypted in transit using TLS 1.2 or higher. Sensitive data, including API keys and authentication tokens, is encrypted at rest using AES-256 encryption.
• Database Security: We use SQLite and PostgreSQL databases hosted on secure, access-controlled infrastructure. Database access is restricted to authorized service components only.
• Infrastructure: Our backend infrastructure runs on Railway’s persistent volumes with managed security updates, network isolation, and automated backups.
• Access Controls: We implement role-based access controls, multi-factor authentication for administrative access, and the principle of least privilege across all systems.
• Security Audits: We conduct regular security reviews of our codebase, infrastructure, and access patterns to identify and remediate potential vulnerabilities.
• Incident Response: We maintain incident response procedures and will notify affected users in the event of a data breach in accordance with applicable law.

The data we access varies by platform. Below is a detailed breakdown of the information we collect and process for each connected platform:

Snapchat

Through our browser extension, we access the following data from your Snapchat account:

• Incoming and outgoing message content within conversations
• Friend lists and display names
• Bitmoji avatars and profile information
• Conversation metadata (timestamps, read receipts, message status)
• Subscriber/fan engagement data

Fanvue

Through OAuth-authenticated API access, we collect and process:

• OAuth access tokens and refresh tokens
• Chat messages and conversation histories
• Media and vault content references
• Subscriber data including usernames, subscription status, and spending history
• Post and content metadata
• Creator profile and account information

Telegram

Through the Telegram Bot API, we access:

• Bot messages and conversation content
• Subscriber user IDs, usernames, and display names
• Payment and transaction information processed through Telegram
• Channel and group membership data (where applicable)
• Inline query and callback data

We retain your data for as long as your account is active and as needed to provide the Service. Our specific retention practices are as follows:

• Active Accounts: All account data, conversation histories, and configuration settings are retained for the duration of your active subscription.
• Post-Cancellation: Upon cancellation of your account, we retain your data for a period of thirty (30) days to allow for account reactivation. After this 30-day window, your data will be permanently deleted from our active systems.
• Account Termination: If your account is terminated by us for violation of our Terms of Service, we may retain certain data as necessary to enforce our terms and prevent re-registration.
• Backup Retention: Residual copies of your data may exist in encrypted backup systems for up to ninety (90) days following deletion from active systems, after which they are automatically purged.
• Legal Obligations: We may retain certain information for longer periods if required by applicable law, regulation, or legal process.

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you, including conversation data, account information, and usage records.
• Right to Correction: You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
• Right to Deletion: You have the right to request the deletion of your personal data, subject to certain exceptions such as legal obligations or legitimate business interests. You can initiate account deletion through the dashboard settings or by contacting us directly.
• Right to Data Portability: You have the right to request a copy of your data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider.
• Right to Opt-Out: You may opt out of certain data processing activities, including analytics and non-essential data collection, through your dashboard settings.
• Right to Withdraw Consent: Where we rely on your consent for data processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.

To exercise any of these rights, please contact us at the email address provided in the Contact Information section below. We will respond to all valid requests within thirty (30) days.

Vybe Bot AI is intended for use by individuals who are at least eighteen (18) years of age. The Service is designed for adult content creators and is not directed at children or minors.

We do not knowingly collect, solicit, or maintain personal information from anyone under the age of 18. If we become aware that we have collected personal information from a person under 18, we will take immediate steps to delete that information from our systems.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at the email address provided below so that we can take appropriate action.

Vybe Bot AI operates globally, and your data may be processed in countries other than your country of residence, including the United States. By using the Service, you acknowledge and consent to the transfer of your data to the United States and other jurisdictions where our service providers operate.

Where we transfer personal data from the European Economic Area (EEA), United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of data protection, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms.

We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

Vybe Bot AI uses minimal tracking technologies to provide and improve the Service:

• localStorage: We use browser localStorage to store API keys, session tokens, user preferences, and dashboard configuration settings on your device. This data remains on your device and is not transmitted to third-party tracking services.
• Essential Cookies: We may use essential cookies strictly necessary for authentication, session management, and security purposes.
• No Third-Party Tracking Cookies: We do not use third-party advertising cookies, tracking pixels, or analytics cookies from advertising networks. We do not sell your browsing data to third parties.
• Analytics: Any analytics we collect are first-party only and are used exclusively to improve the performance and reliability of the Service.

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Provide notice through the Vybe Bot AI dashboard.
• For significant changes that materially affect your rights, we will make reasonable efforts to provide advance notice via the email address associated with your account.

Your continued use of the Service following the posting of changes constitutes your acceptance of such changes. We encourage you to review this Privacy Policy periodically for any updates.

To the fullest extent permitted by applicable law, Vybe Bot AI and its officers, directors, employees, agents, and affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of the Service, including but not limited to:

• Platform API Changes: We are not responsible for changes to third-party platform APIs (including Snapchat, Fanvue, or Telegram) that may affect the functionality, availability, or performance of the Service.
• Message Delivery Failures: We do not guarantee the delivery, timing, or receipt of messages sent through the Service. Message delivery is dependent on third-party platform infrastructure over which we have no control.
• Third-Party Service Outages: We are not liable for outages, downtime, or service interruptions caused by third-party providers, including but not limited to AI model providers, hosting platforms, payment processors, or social media platforms.
• AI-Generated Content: While we implement safeguards and content filters, we cannot guarantee that all AI-generated responses will be appropriate, accurate, or free of errors. Users are responsible for reviewing and monitoring AI-generated content.
• Data Loss: We are not liable for data loss resulting from circumstances beyond our reasonable control, including but not limited to hardware failures, natural disasters, or cyberattacks.

Users assume full responsibility for all content sent through the platform, including AI-generated messages sent on their behalf. It is your responsibility to configure the AI appropriately and monitor its output.

You agree to indemnify, defend, and hold harmless Vybe Bot AI, its officers, directors, employees, agents, licensors, and affiliates from and against any and all claims, demands, losses, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to:

• Your use of or inability to use the Service.
• Your violation of this Privacy Policy or any applicable law or regulation.
• Your violation of any third party’s rights, including intellectual property rights, privacy rights, or contractual rights.
• Any content generated by the AI on your behalf that results in claims from third parties.
• Your failure to comply with the terms of service of any connected third-party platform, including Snapchat, Fanvue, or Telegram.
• Any unauthorized or unlawful use of the Service facilitated through your account.

This indemnification obligation shall survive the termination of your account and your use of the Service.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will endeavor to respond to all inquiries within thirty (30) business days.