Privacy Policy

This Privacy Policy explains how Vibe Works Studio LLC ("we", "us") collects, uses and shares information when you use TeamPosts.com and related services (the "Service").

1. Information we collect

Information you give us

• Account data: name, email address, password (stored only as a one-way hash), marketing preference and the date you accepted our Terms.
• Billing data: if you subscribe, Stripe collects and stores your card details and billing address. We never see or store your card number — we keep only your Stripe customer and subscription IDs, the subscription status and the renewal date.
• Website data: website addresses you add, business topic descriptions, keywords, competitor domains, article drafts and settings.
• Integration data: if you connect Google Search Console, we receive search performance data (queries, clicks, impressions, positions) for the properties you authorize.
• Communications: messages you send to support.

Information we collect automatically

• Crawl data: publicly available HTML, headers, titles, links, images and text from websites you ask us to scan and competitor domains you add.
• Connector data: timestamps and version information when your installed connector contacts our API.
• Usage and device data: IP address, browser type, pages viewed, timestamps and error logs, collected through server logs and essential cookies.

2. How we use information

We use information to: provide and operate the Service (scans, scores, fixes, reports); authenticate you and secure accounts; send transactional emails such as password resets and scan reports; send product and SEO-tip emails if you opted in; respond to support requests; detect abuse and enforce our Terms; comply with law; and improve the Service using aggregated or de-identified data.

3. AI processing

When you request a Pro AI feature, we send relevant data — such as page titles, descriptions, headings, text excerpts, keywords and scan results — to our AI provider, Anthropic, PBC, to generate the output. We send only what the feature needs. Under Anthropic's commercial terms, data submitted through its API is not used to train its models by default. We do not use your private data to train AI models.

4. How we share information

We do not sell personal information and do not "share" it for cross-context behavioral advertising as those terms are defined under California law. We disclose information only to:

• Service providers that process data on our behalf under contract: web hosting (Hostinger), payment processing (Stripe), email delivery, AI (Anthropic), search data providers (for example Serper.dev and Google APIs) — limited to what they need.
• Your connected website, when you install a connector and approve fixes.
• Legal and safety recipients when required by law, subpoena or court order, or to protect rights, property or safety.
• Business transfers in connection with a merger, acquisition or sale of assets, subject to this Policy.

5. Security

We use industry-standard safeguards including HTTPS encryption in transit, bcrypt password hashing, AES-256 encryption for stored secrets using Laravel's encrypter, SHA-256 token hashing, HMAC-signed requests with five-minute expiry to connected websites, CSRF protection, rate limiting and access controls. No system is perfectly secure. If a breach affects your personal information we will notify you and regulators as required by applicable law, including Colorado's data breach notification law (C.R.S. § 6-1-716).

6. Retention

We keep account data while your account is active. Scan data is kept so you can compare results over time, and you may delete any website at any time. When you delete your account, we delete your personal information and website data within 30 days, except where we must keep limited records to comply with law, resolve disputes or enforce agreements. Server logs are rotated and typically kept for no more than 90 days.

7. Your choices

• Account: update your name, email or password, or delete your account, on your Account page.
• Email: every marketing email includes a one-click unsubscribe link, as required by the CAN-SPAM Act. You will still receive essential account emails.
• Integrations: remove our service account from Google Search Console or uninstall the connector at any time.

8. U.S. state privacy rights

Depending on where you live — including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island — you may have the right to: know and access the personal information we hold; correct it; delete it; obtain a portable copy; and opt out of the sale of personal information, targeted advertising and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal information, do not engage in targeted advertising and do not use profiling for such decisions.

To exercise a right, email privacy@teamposts.com from your account email. We will verify your request, respond within 45 days (extendable once where permitted), and will not discriminate against you for exercising your rights. You may use an authorized agent where the law allows. If we deny your request, you may appeal by replying to our decision with "Appeal" in the subject line; we will respond within the time required by law, and if you are unsatisfied you may contact your state Attorney General. We honor Global Privacy Control (GPC) signals as an opt-out of sale and targeted advertising where required.

9. Notice for California residents

In the last 12 months we collected these categories of personal information under the CCPA/CPRA: identifiers (name, email, IP address); internet or electronic network activity (usage logs); commercial information (plan status); and inferences limited to your SEO performance. Sources: you, your devices, your websites and integrations you authorize. Purposes: those described in Section 2. We disclose these categories to service providers only for business purposes. We do not sell or share personal information, and we do not use or disclose sensitive personal information other than your account login credentials for authentication. California's "Shine the Light" law: we do not disclose personal information to third parties for their direct marketing.

10. Children's privacy

The Service is for adults. We do not knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If you believe a child has provided us information, contact us and we will delete it.

11. Cookies

We use only essential cookies: a session cookie to keep you logged in, a CSRF security token, and an optional "remember me" cookie. We do not use advertising or cross-site tracking cookies. Because our cookies are strictly necessary, the Service will not work properly without them.

12. International users

The Service is operated from the United States and your information is processed in the United States. If you use the Service from outside the U.S., you understand your information will be transferred to and processed in the United States.

13. Changes and contact

We may update this Policy and will post the new date above; for material changes we will notify you by email or in the Service. Contact: Vibe Works Studio LLC, Erie, Colorado, United States · privacy@teamposts.com.