Privacy Policy

1. Who We Are

Vibrosis operated by 12th House Consulting, LLC (“Company,” “we,” “us,” or “our”). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform at getvibros.com. By using the platform, you agree to the practices described here.

For privacy-related questions or data requests, contact us at: hello@getvibros.com

2. Information We Collect

Information you provide directly:

• Name and email address (account registration)
• Password (stored encrypted — we never see it in plaintext)
• Date of birth (for age verification and birthday rewards)
• Payment information (processed by Stripe — we do not store card numbers)
• Profile information, including photo and bio (advisors)
• W-9 tax information (advisors only — stored securely, used for IRS reporting)
• Government ID for identity verification (advisors only — processed by our verification provider)

Information generated by your use of the platform:

• Booking history and session records
• Chat messages sent through the platform
• Reviews and ratings you submit or receive
• Rewards points and redemption history
• IP address and approximate location (used for geographic access controls)
• Device type and browser (used for security and session management)

3. How We Use Your Information

• To provide and operate the platform and facilitate sessions
• To process payments and manage payouts to advisors
• To send session confirmations, reminders, and post-session follow-ups
• To enforce our Terms of Service, including geographic restrictions and age requirements
• To detect and prevent fraud, abuse, and chargebacks
• To issue IRS Form 1099-NEC to advisors who earn $600 or more in a calendar year
• To improve platform features and user experience

We do not sell your personal information to third parties.

4. Third-Party Service Providers

We share limited data with the following service providers solely to operate the platform. Each is bound by their own privacy and security obligations:

• Stripe — payment processing and advisor payouts. Stripe stores your payment method and processes transactions. We never store card numbers. Stripe Privacy Policy
• Supabase — database and authentication infrastructure. Your account data and session records are stored in Supabase's secure cloud database.
• Daily.co — video session infrastructure. Video calls are routed through Daily.co. We do not record sessions.
• Resend — transactional email delivery (confirmations, reminders, follow-ups).
• Checkr — background check processing for advisor applicants. Checkr is an FCRA-compliant consumer reporting agency.

5. Session Privacy

Session content is private between you and your advisor. We do not record, transcribe, or monitor live video or chat sessions. Advisor session notes are visible only to the advisor. Post-session follow-up emails are sent only to the client. Session records (duration, date, advisor, booking ID) are retained for billing, dispute resolution, and platform integrity purposes.

6. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or tax purposes (for example, IRS-required records are retained for 7 years). Anonymized usage data may be retained indefinitely for platform analytics.

7. Cookies

We use essential cookies only — for authentication, session management, and security. We do not use advertising, tracking, or third-party analytics cookies. You can disable cookies in your browser settings, but doing so will prevent you from logging in.

8. Children's Privacy (COPPA)

This platform is intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, their account will be immediately terminated and their data deleted. If you believe a minor has created an account, contact us at hello@getvibros.com.

9. California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know — you may request a copy of the personal information we hold about you.
• Right to Delete — you may request deletion of your personal information, subject to legal retention requirements.
• Right to Opt Out of Sale — we do not sell personal information. No opt-out is required.
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights.

To exercise these rights, email hello@getvibros.com with the subject line “CCPA Request.” We will respond within 45 days.

10. Data Security

We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect your data. Payment information is handled exclusively by Stripe and is never stored on our servers. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

11. Your Rights and Choices

Regardless of where you are located, you may at any time:

• Request a copy of your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent to email communications (unsubscribe link in every email)

Contact us at hello@getvibros.com for any of the above.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.