Privacy Policy

Who is responsible for your information

VibeBoard by Lede is developed and operated by YanBo Zhou, an independent developer. Contact address: Contact via [email protected]. Privacy contact: [email protected]. This policy covers the desktop app, official website, and purchase and licensing services.

For questions about how YanBo Zhou handles your information, email [email protected]. Purchases use Waffo hosted checkout; VibeBoard does not collect card numbers or security codes.

Data that stays on your Mac

Routine monitoring reads supported tools’ hook events, process information, logs, and local storage on your Mac. The app extracts task titles, short progress summaries, status, project paths, usage, and necessary session identifiers into a local database. These are not sent to VibeBoard sales or licensing servers.

The app does not copy full source sessions to cloud storage or upload source code, full conversations, raw command lines, or environment variables. Each source tool’s own network activity is governed by its policies.

Local data is stored under Library/Application Support/VibeBoard in your user directory. Exports include short task summaries and project paths, which may be sensitive; you decide whether to share them. You can export your data and remove VibeBoard hooks even after the trial expires.

Information used for purchases and licensing

Device identifiers and credentials

The app generates an app-specific device identifier locally to recognize a Mac and its seat usage. Raw hardware serial numbers are not uploaded for marketing. Hashed or app-specific identifiers remain linkable information requiring protection; they are not fully anonymous.

Licenses and authorization credentials are stored in the system Keychain. Background reads are designed to avoid authorization dialogs; when permission is needed, the app prompts you explicitly.

Features that connect to the internet

• Trials, license activation, periodic validation, deactivation, and purchase recovery you initiate connect to VibeBoard licensing services.
• Update checks request version information; package downloads connect to the published download service. Task content is not attached.
• Codex, DeepSeek, and shared subscription quota checks contact the relevant tool’s endpoints using existing local login state or credentials. These credentials are not forwarded to VibeBoard payment services.
• Optional smart naming uses the API or local tool you choose and configure. It sends necessary metadata such as the final project folder name, package name, description, framework, and relative entry points. Providers may process it online. Keep information you do not want to send out of these fields.
• You can turn smart assistance off. A license does not include third-party model quota; third-party charges follow the provider’s terms.

How information is used and shared

Orders, emails, and license records support your software license and support services. Required transaction records meet legal obligations. Limited security records help prevent fraud, repeated trials, and abuse. Optional processing requiring consent will request it separately before activation.

We do not sell task content or use it for advertising profiles. Waffo and actual payment partners process payment information under their policies. Hosting, transactional email, and support providers process only information needed for those services.

Where processing crosses borders, we will explain actual recipients, purposes, and protections under applicable rules. Using a payment platform alone does not establish tax or data compliance in every region.

Website storage and analytics

This website does not load advertising pixels, cross-site trackers, or third-party product analytics scripts by default. Checkout state and short-lived access credentials may be kept in the current tab’s session storage to retrieve payment results or manage purchases. They are not used for advertising.

Customer portal sessions and security credentials are used only for purchase management. Keep one-time links private. Hosting and payment services may use necessary storage under their own policies. If optional analytics or marketing technology is added, we will update this explanation and provide choices where applicable.

Retention and deletion

You manage local task records. Uninstalling the app does not automatically delete source tool files or their settings. Removing integrations removes only VibeBoard’s own entries.

The server retains active license and seat records to provide ongoing authorization, and necessary trial records to prevent repeated trials. Expired access tokens can no longer authenticate; temporary records are cleaned up according to the operator’s retention settings. Transaction, refund, and necessary audit records may be retained for tax, dispute, or other legal obligations.

You may request deletion of information no longer needed. If records must be retained, we will explain why, their scope, and the expected retention period. A deletion request does not waive statutory rights.

Your rights and contact options

Contact [email protected], or use Support, to request access, correction, export, deletion, or restriction of processing. Where applicable, you may object, withdraw consent, or complain to a regulator. We may verify your purchase email or order ownership to protect your purchases.

Do not send full card numbers, verification codes, API keys, or full task logs. If diagnostics are needed, we will explain what to provide and you decide whether to share it. The app is not directed at children. Purchasers must have capacity to contract or permission from a guardian.

Policy updates

This page identifies the current policy date. Material changes to purposes, data categories, or recipients will be communicated before they apply. Changes requiring a new choice will not be treated as accepted through a silent update.