Privacy Policy
Last updated: September 1, 2026. This policy describes how we collect, use, and protect your information when you use the VIPvybz website and app. It is not a substitute for legal advice. Counsel should review this page before you rely on it for a specific compliance obligation.
1. Introduction
VIPvybz ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy applies to the VIPvybz website (including any contact or other forms you submit), the online pro portal, and the VIPvybz mobile application. It explains what data we collect, why we collect it, how we use and share it, and how you can exercise your rights. Operational security details and a dated list of subprocessors are on our Security page.
2. Data we collect
We may collect the following categories of information:
- Account and profile data: When you register (for example using an invite code), we may collect name, email address, phone number, username, and any other information you or your host provide in connection with your account or profile. If you opt in to VIPvybz SMS booking alerts, we store that consent with your phone number so we can send the transactional texts you requested.
- Session and booking data: Information related to sessions you book or manage, including dates, times, services, locations, and notes or messages between you and your host.
- VIP circle and Discover data: Invite codes, circle membership, and—if a professional turns Discover on—the public profile fields they choose to show (such as display name, specialty, city, and photos) to signed-in users who browse search or Near Me.
- Website contact data: If you use the contact form on this website, we collect the information you submit (name, email, subject, message, and any optional feature request) to respond to your inquiry and improve the product.
- Usage and device data: We may collect information about how you use the website and app (for example pages visited, features used, device type, and approximate location when you use Near Me or similar location features) to operate, secure, and improve the service.
- Subscription and purchase-related data: When you subscribe or purchase in the mobile app, we do not receive your full payment card number—that is processed by Apple or Google. We and our service providers may receive subscription status, product or plan identifiers, renewal or expiration dates, transaction or receipt references, and your app user identifier so we can verify entitlements and operate paywalled features.
- Card payments (Stripe Connect): If a professional enables Stripe Connect, Stripe processes card charges (deposits, Profile Pay, POS, gift cards, and similar). VIPvybz does not store full payment card numbers. We may receive payment status, amounts, and identifiers needed to show a booking as paid and to apply the platform application fee described in our Terms.
3. How we use your data
We use the data we collect to:
- Provide and maintain the VIPvybz service (invite codes, VIP circles, sessions, public booking links, and optional Discover listing).
- Respond to inquiries submitted through the website contact form, including optional feature requests.
- Send service-related communications (confirmations, reminders, or account-related notices), including SMS if you opt in.
- Improve the website and app, including by analyzing first-party usage and fixing errors.
- Verify and enforce subscription entitlements (for example Pro and optional add-ons), prevent fraud or abuse related to purchases, and operate features that depend on an active subscription.
- Process optional card payments through Stripe Connect when a professional enables them.
- Comply with legal obligations, enforce our terms, and protect the rights and safety of our users and the public.
We do not use advertising pixels, Google Analytics, Mixpanel, or similar third-party marketing analytics on vipvybz.com. The online pro portal at online.vipvybz.com loads Google tag AW-18395983341 so we can measure professional sign-up from ads; that tag may set advertising cookies (for example _gcl_aw) and send page and conversion events to Google. We do not sell personal data. We do not train machine-learning models on your messages, bookings, or voice, and we do not send voice recordings to model providers.
4. Legal basis for processing (if applicable)
Where required by law (e.g. in the European Economic Area), we process your data based on: (a) your consent, where you have given it; (b) performance of a contract (e.g. to provide the service you requested); (c) our legitimate interests (e.g. to improve and secure the service); or (d) compliance with legal obligations.
5. Sharing of data
We do not sell your personal data. Under U.S. state privacy laws that use that term (including the California Consumer Privacy Act), we also do not “sell” or “share” personal information for cross-context behavioral advertising. We may share your data in the following circumstances:
- With your host: When you join a VIP circle or book sessions, relevant profile and booking information may be shared with the host who invited you or with whom you book, so they can provide the service.
- Discover: Discover is a directory visible only to signed-in users. Professionals are not listed unless they turn Discover on. Listing ends if Pro access lapses. A public booking link is a separate control; sharing a link does not list you in Discover.
- Service providers: We share data with processors who help us operate the service. The current dated list (AWS, Stripe, Apple, Google, RevenueCat, Firebase, Sentry, Cloudflare Turnstile, email, optional SMS, and user-connected calendar, video, CRM, or automation tools) is on our Security page. Those providers are required to protect your data and use it only for the purposes we specify, except where they act as independent controllers (for example Apple, Google, or Stripe when they process a payment under their own terms).
- SMS opt-in: Mobile numbers and SMS consent records collected for VIPvybz booking alerts are used only to deliver those VIPvybz transactional messages. We do not sell that information and we do not share mobile opt-in data with third parties or affiliates for their own messaging or marketing programs. AWS (End User Messaging / SNS) may process the number solely to deliver the message you requested.
- In-app purchases and subscriptions: Apple and/or Google process in-app payments. We use RevenueCat to validate purchases and sync subscription status. Our servers store entitlement information tied to your account.
- Legal and safety: We may disclose data if required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
6. Cookies and first-party tracking
On vipvybz.com we use first-party session cookies needed to run the site (for example a signed-in staff session). We also record first-party page visits and outbound button clicks: the page path, campaign parameters on the link, a session key, and a truncated browser type. Click-through links use the /r/ path on this site and then redirect you to the destination (for example the trial or app store). We do not use advertising cookies or third-party analytics scripts on vipvybz.com.
On online.vipvybz.com (the booking and pro portal) we load Google tag AW-18395983341 to measure ad-attributed professional sign-up. Google may set cookies such as _gcl_aw and receive the page URL and conversion events. That tag is not loaded on vipvybz.com.
| Type | What it does |
|---|---|
| Session cookie | Keeps a signed-in session on staff or other authenticated pages. Marked Secure in production. |
| First-touch campaign parameters | Stores UTM or similar campaign values in the first-party session so we can see which public links led to a visit or click. |
| First-party visit and click log | Path, referrer, truncated user-agent, and campaign parameters. Used on our internal marketing dashboard. Not sold and not sent to advertising networks. vipvybz.com only. |
| Google Ads conversion tag | On online.vipvybz.com only. Measures professional sign-up from ads. Cookies and events are sent to Google (tag AW-18395983341). |
7. Data retention
We retain account, profile, circle, and booking data while your account is active and as needed to provide the service. When you delete your account, we delete the user record and cascaded profile and related application data on our systems, except records we must keep for legal, tax, accounting, dispute, or security purposes.
Subscription and payment records may remain with Apple, Google, Stripe, or RevenueCat under those providers’ retention rules. First-party marketing visit logs on vipvybz.com are not tied to your app account and are kept for internal measurement; we do not currently run an automated purge window on those logs.
8. Account deletion
You can delete your account from Profile in the mobile app or the online account settings. That action calls our account-deletion API, signs you out, and deletes your user record. Deletion is permanent. Processors such as Stripe, Apple, Google, and RevenueCat may retain their own payment or subscription records.
You may also request deletion, access, or correction through the contact form. We aim to respond within 30 days, or sooner if applicable law requires it.
9. Security
We implement technical and organizational measures to protect personal data, including HTTPS, access controls, and secure storage. No method of transmission or storage is completely secure. Use a strong password and keep your credentials confidential. More detail—including hosting region and subprocessors—is on our Security page.
10. Security incidents
If we become aware of a breach of personal data that we hold, we will notify affected users and, where the law requires it, the relevant authorities. We are not claiming ISO 27001 or SOC 2 certification.
11. Your rights
Depending on your location, you may have rights to:
- Access the personal data we hold about you.
- Correct or update inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing.
- Data portability (receive a copy of your data in a structured format). We do not currently offer a self-serve full-account export; contact us and we will help where we can.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a supervisory authority.
To exercise these rights, use the Contact section below. We will respond in accordance with applicable law, targeting 30 days.
12. Children
The VIPvybz service is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will take steps to delete such information.
13. International transfers
Your data may be processed in countries other than your country of residence. Application hosting and the primary database are in AWS us-east-1 (United States). Subscription, payment, messaging, and error-reporting partners may process data in the United States or other jurisdictions. We take steps so that such transfers use appropriate safeguards (for example standard contractual clauses or other mechanisms recognized by applicable law) where required.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. Material changes may also be communicated via the app or by email. We encourage you to review this policy periodically. Your continued use of the service after the effective date of any changes constitutes your acceptance of the updated policy.
15. Contact
For privacy-related questions, requests, or to exercise your rights, please contact us via the contact form on this website or at the email or address provided in the VIPvybz app. We will respond as required by applicable law, targeting 30 days.