Privacy Policy

• Email address and password — when you register with email. Passwords are stored securely as a one-way cryptographic hash and are never readable after creation.
• Third-party account info — name and email address, when you choose to sign in using a social login provider.
• Project content — business descriptions, keywords, preferred styles, and generated names that you create.
• Session tokens — stored in your browser's local storage (not cookies) to identify your session.

We do not collect payment information, location data, or device identifiers.

• To provide and operate the VibeNames service.
• To send you transactional emails (email verification, password reset).
• To generate business names using AI based on your project content.
• To personalise name suggestions — your swipe history (liked, disliked, and starred names) is analysed to improve results in subsequent generation rounds within the same project.

We do not sell your data to third parties. We do not use your data for advertising.

To operate the service we share certain data with the following categories of third-party processors. All processors are contractually bound to handle your data only as instructed and in accordance with applicable law.

• AI name generation — your project content (description, keywords, styles) is sent to an external AI service solely to produce name suggestions. This data is not retained or used for model training by that provider.
• Transactional email — your email address is shared with an email delivery provider solely to send verification and password-reset messages.
• Social login — if you choose to sign in using Google, your authentication is handled by Google. See Google's Privacy Policy.
• Hosting infrastructure — your data is stored on servers located in the United States.

• Registered accounts: your data is kept until you delete your account.
• Anonymous sessions: session data expires automatically after 3 days.
• Email verification tokens: expire after 24 hours.
• Password reset tokens: expire after 1 hour.

• Access — request a copy of the data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — ask us to delete your account and all associated data.
• Portability — request your data in a machine-readable format.
• Objection — object to processing of your data.