Privacy Policy

1. Who We Are

Vibros is operated by 12th House Consulting, LLC (“Company,” “we,” “us,” or “our”). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our platform at getvibros.com. By using the platform, you agree to the practices described here.

For privacy-related questions or data requests, contact us at: hello@getvibros.com

2. Information We Collect

Information you provide directly:

• Name and email address (account registration)
• Password (stored encrypted — we never see it in plaintext)
• Date of birth (for age verification and birthday rewards)
• Payment information (processed by Stripe — we do not store card numbers)
• Profile information, including photo and bio (advisors)
• W-9 tax information (advisors only — stored securely, used for IRS reporting)
• Government ID for identity verification (advisors only — processed by our verification provider)

Information generated by your use of the platform:

• Booking history and session records
• Chat messages sent through the platform
• Reviews and ratings you submit or receive
• Rewards points and redemption history
• IP address and approximate location (used for geographic access controls)
• Device type and browser (used for security and session management)
• Engagement data — pages you view, links and buttons you click, how far you scroll, and how long you stay on a page, collected through a first-party identifier stored in your browser (see Section 7)

3. How We Use Your Information

• To provide and operate the platform and facilitate sessions
• To process payments and manage payouts to advisors
• To send session confirmations, reminders, and post-session follow-ups
• To enforce our Terms of Service, including geographic restrictions and age requirements
• To detect and prevent fraud, abuse, and chargebacks
• To issue IRS Form 1099-NEC to advisors who earn $600 or more in a calendar year
• To improve platform features and user experience
• To personalize what you see — for example, showing advisors or features first based on what you've viewed or clicked on the platform

We do not sell your personal information to third parties.

4. Third-Party Service Providers

We share limited data with the following service providers solely to operate the platform. Each is bound by their own privacy and security obligations:

• Stripe — payment processing and advisor payouts. Stripe stores your payment method and processes transactions. We never store card numbers. Stripe Privacy Policy
• Supabase — database and authentication infrastructure. Your account data and session records are stored in Supabase's secure cloud database.
• Daily.co — video session infrastructure. Video calls are routed through Daily.co. We do not record sessions.
• Resend — transactional email delivery (confirmations, reminders, follow-ups).
• Checkr — background check processing for advisor applicants. Checkr is an FCRA-compliant consumer reporting agency.

5. Session & Message Privacy

Session and message content is private between you and your advisor, with narrow exceptions we want you to be aware of. Live audio and video calls are never recorded. Written content on the platform — chat session transcripts, direct messages, and written readings — is stored so you and your advisor can revisit it, and may be reviewed by authorized platform staff where needed for safety, moderation, dispute resolution, or investigating reports of abuse. Automated systems may also scan written messages for violations of our Terms of Service (for example, attempts to move payment off-platform). Advisor session notes are visible only to the advisor. Post-session follow-up emails are sent only to the client. Session records (duration, date, advisor, booking ID) are retained for billing, dispute resolution, and platform integrity purposes.

What your advisor sees about you. Advisors identify you by your username. They are not shown your legal name or your email address, anywhere on the platform, including during a live call. This applies to every advisor, including ours. Authorized platform staff can see your full account details, which is what lets us handle billing questions, disputes, and safety reports. Anything you choose to tell an advisor yourself, in a message or during a session, is of course visible to them.

6. Data Retention

We retain your account information for as long as your account is active. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or tax purposes (for example, IRS-required records are retained for 7 years). Anonymized usage data may be retained indefinitely for platform analytics.

One thing we keep after deletion. New accounts receive a one-time free credit, and we keep a scrambled marker made from your email address and the IP address you signed up from so the same person cannot claim it over and over by deleting an account and making a new one. The marker is one-way: it cannot be turned back into your email address or your IP address, it holds no name, and nobody reading it can tell who it came from. We use it for that one check and nothing else. It is never used to build a profile, to track you, or to re-identify you, and it is not shared with anyone.

7. Cookies & Engagement Tracking

We use essential cookies for authentication, session management, and security. We do not use third-party advertising cookies, and we do not sell or share engagement data with advertisers.

We do use a first-party identifier, stored in your browser's local storage, to track your own activity on the platform — which pages you view, what you click, how far you scroll, and when you leave a page. If you're logged in, this activity is linked to your account. This data is used to improve the platform and to personalize what's shown to you first (see Section 3). It is not shared with advertisers or used to track you across other websites.

You can disable cookies and local storage in your browser settings, but doing so will prevent you from logging in. To opt out of personalization specifically while keeping your account active, see Section 11.

8. Children's Privacy (COPPA)

This platform is intended for adults 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, their account will be immediately terminated and their data deleted. If you believe a minor has created an account, contact us at hello@getvibros.com.

9. California Residents — CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know — you may request a copy of the personal information we hold about you.
• Right to Delete — you may request deletion of your personal information, subject to legal retention requirements.
• Right to Opt Out of Sale — we do not sell personal information. No opt-out is required.
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights.

To exercise these rights, email hello@getvibros.com with the subject line “CCPA Request.” We will respond within 45 days.

10. Data Security

We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect your data. Payment information is handled exclusively by Stripe and is never stored on our servers. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

11. Your Rights and Choices

Regardless of where you are located, you may at any time:

• Request a copy of your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent to email communications (unsubscribe link in every email)
• Opt out of personalized content ordering — you'll still see the platform's default experience, and your engagement data will no longer be used to reorder what's shown to you

Contact us at hello@getvibros.com for any of the above.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the platform. Continued use of the platform after changes are posted constitutes your acceptance of the updated policy.