Privacy Policy

VIBE DEV SPACE LLC, a limited liability company registered in the State of Wyoming (“we”), runs this website, sells It's a Plan Pro, and runs the licence server, the telemetry collector and the template gallery. We are the controller of the personal data this policy describes.

It's a Plan is software you host yourself. We have no access to your instance or the data in it. Whoever runs an instance is the controller of the data in it.

• Pro purchases: Link, a Stripe service, takes your payment details; we never see your card. From Stripe we receive your email address and the state of your subscription. We store your email address, a hash of your licence key, the domain the key is bound to, the dates of your payments and the date of the last licence check.
• Licence checks: once a day a Pro instance sends its key and its domain, and we confirm that the key is valid.
• Customer list: if you let us show your logo after a purchase, we store your company website and the date of your consent with your Stripe subscription. We show your company name and logo on our website and on GitHub. To have them removed, write to [email protected].
• Skill submissions: when you submit a skill, we store the repository link, the name and description of the skill, and your email address. We use the email only to write to you about the submission.
• Template gallery: when you publish a project template from your instance, we store your email address, the author name and the link you give, and the template. We use the email to send you the confirmation code, to tie your templates to you, and to contact you about a template. We never show it. The author name and the link are public on the page of the template. To have them removed, write to [email protected].
• Email: when you write to us, we keep the messages to answer you.
• Telemetry: self-hosted instances send anonymous usage counts once a day, with a random instance ID. They contain no names, email addresses or content. The Telemetry page lists every field and how to turn it off.
• Website: we use Google Analytics to count visits and see which pages people read. It receives your IP address, your browser and device type, the pages you visit and where you came from, and sets cookies to tell visits apart. In the EEA, the UK and Switzerland it runs only after you accept it in the cookie banner. Our hosting provider handles your IP address to deliver the pages.

The licence server and the telemetry collector use the IP address of a request only to limit the request rate. They hold it in memory for one minute and do not store it. The template gallery does the same and holds it in memory for up to one hour.

Where the GDPR or a similar law applies, these are the purposes and the legal bases:

• To sell Pro, send the key and check it: performance of our contract with you (Art. 6(1)(b) GDPR).
• To keep payment records: our legal obligations for accounting and tax (Art. 6(1)(c)).
• To show your company as a customer: your consent (Art. 6(1)(a)). You can take it back at any time.
• To run the template gallery: our legitimate interest in publishing the templates people share and in contacting their publishers about them (Art. 6(1)(f)).
• To answer email and review skill submissions: our legitimate interest in replying to people who contact us (Art. 6(1)(f)).
• To count website visits with Google Analytics: your consent in the EEA, the UK and Switzerland (Art. 6(1)(a)); elsewhere, our legitimate interest in knowing which pages people read.
• To limit request rates and count usage: our legitimate interest in keeping our servers available and knowing which versions and features are in use (Art. 6(1)(f)).

We do not sell your data, use it for advertising, or make automated decisions about you.

We share data only with providers that work for us: Stripe for payments, Resend for the email with your key and the confirmation code of the template gallery, Google for website analytics, Telegram for the notices we send ourselves (for a sale: the plan, the amount and the domain; for the customer list: the company website; for a template: its name, the author name and the email of the publisher), our hosting provider for this website and our servers, and our email provider for the mailboxes you write to. Each one processes the data under contract. As the merchant of record, Stripe also collects payment data itself and handles it under the Stripe Privacy Policy.

Some pages show pictures from GitHub, such as the avatars of the people who starred the repository or contributed to a release. Your browser loads them from GitHub, which receives your IP address and handles it under the GitHub Privacy Statement.

We may disclose data where the law requires it. If It's a Plan Pro passes to another company, the data needed to keep your subscription passes with it.

We are a United States company, and our providers process data in the United States and in other countries. Stripe, Resend and Google are certified under the EU-US Data Privacy Framework and also offer the Standard Contractual Clauses. For other providers, data from the EEA, the UK and Switzerland is transferred under the Standard Contractual Clauses or an equivalent safeguard.

• Licence and payment records: while the subscription is active, then for as long as accounting and tax law requires, usually up to 7 years.
• Skill submissions: until you ask us to delete them.
• Template gallery: a template until you unpublish it or we remove it; your email address until you ask us to delete it. If we block an email address, we keep it to stop it from publishing again.
• Email: as long as we need it to answer you and handle follow-ups.
• Telemetry: kept to show trends over time. It contains no personal data.
• Website analytics: kept in Google Analytics for up to 14 months.

Depending on where you live, you can ask us for a copy of your data, ask us to correct or delete it, ask us to limit how we use it, object to how we use it, or ask for it in a portable form. Write to [email protected] from the address the data is linked to. We answer within 30 days. We may keep payment records that the law requires us to keep.

If you are in the EEA, the UK or Switzerland, you can also complain to your data protection authority.

Google Analytics sets the _ga cookies to tell visits apart. In the EEA, the UK and Switzerland it sets them only after you accept them. You can change your choice at any time with the Cookie settings link at the bottom of every page; your choice is kept in your browser. We set no other cookies and show no ads. The checkout page is run by Stripe and sets its own cookies.

We store licence keys only as hashes, so our database does not give keys away. Data is encrypted in transit with TLS, and access to our servers is limited to the people who run them. If a breach affects your data, we will notify you and the relevant authority as the law requires.

Pro and this website are not directed to children under 16, and we do not knowingly collect their data.

We post changes on this page and change the date at the top.

For any privacy question or request, write to [email protected].

VIBE DEV SPACE LLC
5830 E 2nd St, Ste 7000 #28620, Casper, Wyoming 82609, USA