Legal
Privacy Policy
Effective August 21, 2026. This Privacy Policy describes how ITERFORGE AI LTD., doing business as Ideavibes AI, collects, uses, and discloses personal information in connection with ideavibes.ai, dashboard.ideavibes.ai, and related services.
1. Controller and scope
ITERFORGE AI LTD. ("Ideavibes AI," "we," "us," or "our") is the organization responsible for the personal information described in this Privacy Policy (the "Policy"). We are incorporated in British Columbia, Canada. Our office is 307-12339 Steveston Hwy, Richmond, BC V6W 0B4, Canada.
This Policy applies to personal information we process as operator of the marketing site and the Services. It is intended to be read together with the Terms of Service. Use of Public Work for showcases and proof is governed by Section 5 of the Terms. By accessing or using the Services, you acknowledge this Policy. If you do not agree, you must not use the Services.
For personal information of account holders and visitors to the marketing site, we are the organization responsible for that information (a controller, or equivalent). For personal information of end users of products you deploy using the Services, you are the controller (or equivalent), and we process that information to provide hosting, deployment, and related Services.
We process personal information in accordance with applicable Canadian law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, British Columbia's Personal Information Protection Act. If you are in the European Economic Area, the United Kingdom, Switzerland, or a U.S. state with a consumer-privacy statute, additional rights described below may apply.
2. Personal information we collect
"Personal information" means information about an identifiable individual, including information that reasonably can be linked to a particular person or household.
We collect information you provide, including name, email address, account credentials, billing information processed by our payment provider, prompts, project configuration, and correspondence you send to us.
We automatically collect technical information, including Internet protocol address, browser type, device type, pages viewed, timestamps, and diagnostic logs. If you allow analytics cookies, the marketing site also collects usage measurements through Google Analytics, as described in Section 7.
If you authorize GitHub or another integration, we receive the access reasonably required to operate the Services in the connected account, including to write code and deploy products. We collect only the information necessary for that purpose.
You shall not submit protected health information, government identifiers, payment-card PAN data, or other highly sensitive personal data unless we have agreed in a signed writing that a specified plan is designed for that processing.
3. Legal bases
Where a privacy law requires a legal basis, we rely on:
- performance of a contract, to provide the Services you request under the Terms;
- legitimate interests, to secure the platform, prevent fraud, measure use of the marketing site after you allow analytics cookies, and improve the Services, where those interests are not overridden by your rights;
- consent, for non-essential cookies and for optional marketing email; and
- legal obligation, including tax, accounting, export-control, and responding to lawful requests.
4. How we use information
We use personal information to create and administer accounts, operate the Services, deploy products, process payments, prevent abuse, diagnose errors, communicate with you, and improve the Services. If you allow analytics cookies, we use them to measure use of the marketing site. We may create de-identified or aggregated data and use it for analytics and product improvement. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
We process prompts and related Customer Data to operate the Services, including by transmitting them to third-party artificial-intelligence providers in order to generate Output. We do not use identifiable Customer Data from private projects to train general-purpose models that we make available to other customers. We do not make solely automated decisions that produce legal or similarly significant effects on individuals.
If you deploy a product using the Services, you are responsible for providing any notices and obtaining any consents required for personal information of your end users. We process that information as a processor (or equivalent) on your instructions as described in the Terms, to operate hosting and related Services.
5. Public Work
Public Work, as defined in Section 5 of the Terms of Service, may be used by ITERFORGE AI LTD. for showcases and proof, including screenshots, URLs, and product names, pursuant to the license granted in those Terms. That license is unconditional and does not require a separate consent under this Policy. The license does not authorize us to collect personal data of your end users from Public Work for an unrelated contact or marketing list.
6. Disclosure and processors
We disclose information to service providers that assist us in operating the Services, solely to perform services on our behalf. Those providers currently include:
- Cloudflare, Inc., for hosting and delivery of the marketing site;
- GitHub, Inc., for source-code hosting and related developer tools when you connect a repository;
- Google LLC, for Google Analytics on the marketing site, only if you allow analytics cookies;
- our designated payment processor, for billing;
- email-delivery providers, for transactional messages; and
- artificial-intelligence model providers, to generate Output from prompts you submit.
We may disclose information if required by law, to protect the Services or our rights, or in connection with a merger, acquisition, or other reorganization. If we receive a valid legal process or governmental request for information, we may disclose what is reasonably necessary to comply. Unless legally prohibited, we will notify the affected customer before producing that information. We may also disclose information as reasonably necessary to prevent, investigate, or address fraud, security incidents, or other unlawful activity, or to protect our rights, property, or users. Public Work may be displayed publicly as described in Section 5 of the Terms. If we add or replace a processor that materially changes how personal information is handled, we will update this Policy.
8. International transfers
We are established in Canada. Personal information may be processed in Canada, the United States, and other countries where our providers operate. Those countries may not provide the same legal protections as your home jurisdiction.
The European Commission has recognized that PIPEDA provides adequate protection for personal information processed by organizations subject to that statute. Where a transfer from the EEA, the United Kingdom, or Switzerland is not covered by an adequacy finding, we rely on appropriate safeguards, which may include the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and a Swiss addendum, together with the provider terms that apply to that processing.
9. Retention
We retain account and project information for the duration of your account. After an account is closed, we delete or isolate personal information within thirty (30) days, except where we must keep it for billing, security, dispute resolution, or legal compliance. Backups and diagnostic logs may be retained for up to ninety (90) days. Code stored in your GitHub account remains subject to your GitHub settings. Analytics cookies, if allowed, are retained no longer than thirteen (13) months.
10. Security
We maintain reasonable technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure. Where applicable law requires notice of a breach, we will notify affected individuals and, where required, the relevant authority, without undue delay. Please keep your credentials confidential and tell us if you believe an account has been compromised.
11. Your rights
Depending on the Services you use, we may collect these categories of personal information:
- identifiers, such as name, email address, user ID, and Internet protocol address;
- commercial information, such as plan tier and purchase history (full payment-card numbers are processed by our payment provider and are not stored by us);
- internet or network activity, such as pages viewed, log-in events, diagnostic logs, and, if you allow analytics cookies, visit measurements;
- project information you submit, such as prompts, configuration, and connected-repository data; and
- communications you send to us.
We do not intentionally collect sensitive personal information. You shall not upload it unless a signed writing with us permits that processing.
You may update account information in the dashboard, cancel a plan, or request deletion of an account by contacting support@ideavibes.ai. Depending on where you live, you may have some or all of the following rights, subject to legal limits: access, correction, deletion, portability, withdrawal of consent, and objection to certain processing. You may also opt out of any sale or sharing of personal information; we do not sell or share personal information as those terms are used under U.S. state privacy laws.
We will verify your identity and respond within thirty (30) days, or the period required by your local law. If we need more time, we will tell you. We will not discriminate against you for exercising a privacy right. U.S. residents may appeal a denied request by replying to our decision within sixty (60) days. Residents of the EEA, the United Kingdom, or Switzerland may lodge a complaint with a supervisory authority, including the relevant data-protection authority in their country. Residents of Canada may contact the Office of the Privacy Commissioner of Canada or, in British Columbia, the Office of the Information and Privacy Commissioner for British Columbia.
A subsequent restriction of public access to a project does not require us to delete or cease use of showcase materials obtained while the work was Public Work.
12. Communications
We send transactional messages about your account, security, billing, and the Services. You may opt out of optional marketing email using the unsubscribe link in those messages or by contacting us. Opting out of marketing does not affect transactional messages.
13. Children
The Services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected such information, we will delete it.
14. Changes
We may amend this Policy from time to time. We will post the amended Policy at this URL and update the effective date. For material changes that reduce your rights or expand our processing purposes, we will provide at least thirty (30) days' advance notice by email or through the Services. Your continued use of the Services after the amended Policy takes effect constitutes acceptance.
15. Contact
Privacy questions and requests may be sent to support@ideavibes.ai, or by post to ITERFORGE AI LTD., 307-12339 Steveston Hwy, Richmond, BC V6W 0B4, Canada.