Our privacy principle: we collect information needed to provide, secure, support, and improve Vibrance. We do not sell personal information, and we do not use a Print Vendor’s name or customer work in public marketing without permission.
1. Introduction
This Privacy Policy explains how Velora Studios, LLC (“Vibrance,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit www.vibrance.co, use the Vibrance application, communicate with us, or access a Vibrance-powered experience offered by a Print Vendor.
This Policy should be read with our Terms of Service and any privacy notice provided by the Print Vendor through which you access the Service.
2. Our privacy roles
Vibrance can handle personal information in different roles:
- When we manage our Site, direct accounts, partner relationships, billing, security, and support, Velora Studios generally determines why and how information is processed.
- When a Print Vendor provides Vibrance to its customers and controls the customer relationship, project purpose, product options, and fulfillment, the Print Vendor may be the business or controller and Velora Studios may process information on its behalf as a service provider or processor.
If your request concerns data in a Print Vendor’s workspace, we may direct you to that Print Vendor or assist it in responding. Print Vendors are independently responsible for their privacy notices, lawful processing, and customer instructions.
3. Information we collect
Account and identity information
We may collect your name, email address, password or authentication identifiers, organization, role, profile details, account memberships, invitation information, and communication preferences.
Business and partner information
For Print Vendors and prospective partners, we may collect company name, website, contact details, brand preferences, product catalog information, workflow requirements, support communications, agreement details, and billing information.
Customer Content and project information
We collect information submitted to create and manage designs, such as names, job titles, company names, phone numbers, email addresses, website addresses, social handles, design prompts, product selections, logos, images, background files, QR content, project comments, internal notes, proof decisions, and approvals.
Design and production information
We process structured scene data, element positions and styles, card sides, templates, themes, version history, AI inputs and results, preflight warnings, finish assignments, quote information, proof files, export jobs, production files, and project status.
Payment information
If you purchase services directly from us, we and our payment provider may collect billing contact information, transaction details, payment status, and limited payment method details. Full card numbers are generally handled by the payment processor rather than stored by us.
Device, usage, and log information
We may collect IP address, browser and device type, operating system, referring page, pages or features used, timestamps, session information, approximate location derived from IP, error logs, performance data, and security events.
Communications
We collect the content of support requests, partner inquiries, emails, feedback, and other communications with us.
4. Sources of information
We collect information:
- directly from you when you create an account, submit a project, upload content, request a demo, or contact us;
- from the Print Vendor, organization, or account administrator that invites you or provides the branded experience;
- automatically from your browser or device when you use the Site or Service;
- from connected services you authorize, such as storefront, authentication, payment, or storage providers; and
- from service providers that help us detect fraud, protect accounts, deliver communications, or operate the Service.
5. How we use information
We use personal information to:
- provide, personalize, maintain, and improve the Site and Service;
- create accounts, manage memberships and invitations, and authenticate Users;
- create, save, version, proof, approve, and export design projects;
- provide AI-assisted generation, parsing, planning, and editing features;
- apply product specifications, evaluate preflight conditions, route quotes, and produce output;
- support white-label experiences and Print Vendor workspaces;
- process transactions and administer agreements;
- respond to questions, provide support, and send service communications;
- send marketing communications where permitted and honor opt-out choices;
- monitor performance, debug errors, prevent abuse, and secure the Service;
- comply with law, enforce agreements, and protect rights and safety; and
- evaluate or complete a merger, acquisition, financing, reorganization, or sale of assets.
Where required by law, we rely on one or more legal bases such as performing a contract, legitimate interests, legal obligations, or consent.
6. AI-assisted features and design data
When you use AI-assisted features, we may send relevant prompts, contact information, product selections, template context, project instructions, and other necessary content to AI and workflow service providers. This processing helps parse information, plan structured designs, generate scene data, repair results, or apply requested edits.
Do not include sensitive personal information, confidential information, or third-party content in a prompt unless it is necessary and you have authority to provide it. AI inputs and results may be stored with the project to support continuity, troubleshooting, audit history, and the requested feature.
We do not use a Print Vendor’s private Customer Content in public marketing without permission. Our use of information to improve AI-related features is subject to applicable agreements, law, and provider controls.
8. How we disclose information
We may disclose personal information to:
- Print Vendors and workspace organizations that provide the customer experience, manage the project, review work, quote, print, fulfill, or support the order;
- service providers that perform hosting, content delivery, authentication, database, storage, AI, workflow, email, analytics, error monitoring, payment, and support functions;
- connected services when you or an authorized administrator directs an integration;
- professional advisers such as lawyers, accountants, auditors, and insurers;
- authorities or other parties where reasonably necessary to comply with law, legal process, or enforceable requests; protect rights, security, and safety; or investigate fraud and abuse; and
- transaction participants in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.
We may also disclose information with your direction or consent. We may use and disclose aggregated or de-identified information where it cannot reasonably identify you.
9. Service providers and subprocessors
Providers supporting Vibrance may include Cloudflare for content delivery and Site hosting; Vercel for application delivery; Supabase for authentication, database, and storage; Microsoft Azure and OpenAI-compatible services for AI processing; Trigger.dev for background workflows; and providers for email, support, monitoring, analytics, and payments.
Providers and functions may change as the Service develops. We use contractual and technical measures appropriate to the services they provide. Print Vendors that require a subprocessor list or data processing agreement may contact privacy@vibrance.co.
10. Data retention
We retain information for as long as needed to provide the Service, maintain the account or partner relationship, fulfill the purposes described in this Policy, resolve disputes, enforce agreements, meet legal and accounting obligations, and protect security.
Retention depends on the information and context. Active project and account data may be kept while the account is active. Logs and backups may follow shorter or rolling schedules. Transaction and legal records may be retained for legally required periods. When information is deleted, residual copies may remain temporarily in backups or where retention is required by law.
Where we process information for a Print Vendor, deletion may be governed by that Print Vendor’s instructions and agreement with us.
11. Security
We use administrative, technical, and organizational safeguards intended to protect personal information, such as access controls, encryption in transit, tenant-aware authorization, backups, monitoring, and restricted provider access. We review and improve safeguards as the Service changes.
No online service can guarantee absolute security. You are responsible for using a strong, unique password, protecting credentials, limiting access appropriately, and notifying us promptly about suspected unauthorized activity. Security concerns may be reported to security@vibrance.co.
12. International transfers
Velora Studios is based in the United States, and we and our providers may process information in the United States and other countries where privacy laws may differ from those in your location. Where required, we use appropriate transfer mechanisms, such as data processing agreements, Standard Contractual Clauses, and applicable addenda.
13. Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided information in violation of this Policy, contact privacy@vibrance.co. We may request information needed to verify and address the report.
14. Your privacy rights and choices
Depending on your location and subject to legal exceptions, you may have rights to:
- know whether and how we process your personal information;
- access or receive a copy of your personal information;
- correct inaccurate or incomplete information;
- delete personal information;
- restrict or object to certain processing;
- receive portable information you provided to us;
- withdraw consent where processing is based on consent; and
- complain to a data protection authority.
You may update some information in the App. You can opt out of marketing email using the unsubscribe link, although we may still send transactional or service messages. To submit a privacy request, email privacy@vibrance.co. We may verify your identity and authority before acting.
If Vibrance processes your information for a Print Vendor, please contact the Print Vendor first. We will support its response as required by law and our agreement.
15. California privacy information
California residents may have rights to know the categories and specific pieces of personal information collected; know the sources, purposes, and categories of recipients; correct inaccurate information; delete information; and receive equal service and pricing when exercising privacy rights.
The categories described in Section 3 may include identifiers, customer records, commercial information, internet or electronic activity, approximate geolocation, professional information, and inferences drawn from activity or preferences. We use and disclose these categories for the business purposes described in Sections 5 and 8.
We do not sell personal information for money. We do not knowingly sell or share the personal information of consumers under 16. If we engage in activity defined as “sharing” for cross-context behavioral advertising, we will provide any notice and opt-out method required by law.
You or an authorized agent may submit a request at privacy@vibrance.co. We may verify identity, residency, and the agent’s authority. You may appeal a denied request by replying to our decision.
16. Other U.S. state and regional rights
Residents of other jurisdictions may have similar access, correction, deletion, portability, opt-out, restriction, objection, and appeal rights. We will honor applicable rights based on your location and our role. If you are in the European Economic Area, United Kingdom, or Switzerland, you may also contact your local supervisory authority.
17. Third-party sites and Print Vendor services
The Site and Service may link to third-party sites, storefronts, payment pages, shipping services, or Print Vendor resources. Their privacy practices are governed by their own notices. We are not responsible for third-party practices outside our control.
A Print Vendor may collect additional information before or after the Vibrance design experience, including order, payment, tax, shipping, and fulfillment details. Review the Print Vendor’s privacy notice for that processing.
18. Changes to this Policy
We may update this Policy as our practices, Service, or legal obligations change. We will post the updated Policy and revise the “Last modified” date. If changes are material, we may provide additional notice through the Service, by email, or as required by law.
19. Contact us
Questions or requests about this Policy may be sent to privacy@vibrance.co.
Attn: Privacy, Velora Studios, LLC
16192 Coastal Highway
Lewes, Delaware 19958
United States
If you have an account through a Print Vendor, you may also contact that Print Vendor about project data and the customer relationship it manages.