Legal
Last updated October 14, 2026
This policy explains what personal information LockedVibe collects, why, who we share it with, and the choices you have. It applies to lockedvibe.com and to the audit services we sell through it.
LockedVibe is operated by LockedVibe, 9200 NW 39th Ave, Ste 130-3177, Gainesville, FL 32606, USA. For the purposes of the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal data described here. Contact us about anything in this policy at support@lockedvibe.com.
| Where | What we collect |
|---|---|
| Audit intake form (/intake) | Your name, email, Stripe receipt email or order number, the tier you bought, app URL, repo URL (optional), the tool you built with, your stack, how you plan to give us access, any notes you add, and your written authorization for the audit. |
| Lockdown Pack and newsletter signup | Your email address. Kit, our email provider, may also record the signup time and your IP address, and whether you open or click our emails. |
| Purchases | Stripe processes payment on its own checkout pages. We receive your name, email, what you bought, the amount, and billing country. We never see or store your full card number. |
| Audit work | The code, configuration and live app you give us access to. This can include personal data your app holds about its own users, if we come across it while reviewing your app. See Security for how we handle it. |
| Email you send us | Your email address and whatever you include in the message. |
| Visiting the site | Cloudflare, our host, processes standard request data such as IP address, browser type, the page requested and the time, to serve the site and protect it from abuse. |
We do not use analytics, advertising pixels, session recording, or social media trackers on lockedvibe.com. We do not knowingly collect information from children under 16.
| Purpose | Legal basis (GDPR) |
|---|---|
| Delivering the audit you bought: reviewing your app, writing reports, opening fix pull requests, and talking with you about the work | Performance of a contract |
| Processing payments, keeping invoices and tax records | Legal obligation, and performance of a contract |
| Sending the Lockdown Pack and our security emails | Consent, which you can withdraw at any time using the unsubscribe link in every email |
| Answering your emails | Legitimate interests (responding to people who contact us) |
| Keeping the site secure and preventing spam and abuse | Legitimate interests (protecting our service and visitors) |
| Recording that you authorized the audit | Legitimate interests and legal obligation (showing we had permission to test) |
We share personal data only with the service providers we need to run LockedVibe. They process it on our behalf and under their own data protection terms:
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of the business. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We are based in the United States, and our providers process data in the United States and other countries. When we transfer personal data from the EU, EEA, UK or Switzerland, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant), which are built into our providers' data processing terms, or on the EU-U.S. Data Privacy Framework where a provider is certified under it.
You have the right to access your personal data, correct it, delete it, restrict or object to how we use it, and receive a portable copy. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to the data protection supervisory authority where you live or work, or where you think a problem happened. We would appreciate the chance to fix it first, so please email us.
You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined, and we have not done so in the past 12 months. We also do not use sensitive personal information for anything beyond providing the service. We will not treat you differently for using any of these rights. You can use an authorized agent to make a request; we may ask for proof that they are acting for you.
The categories of personal information we collected in the past 12 months are listed in section 2: identifiers (name, email, IP address), commercial information (purchases), internet activity (server request data), and any personal data contained in the code or app you give us access to. Sources, purposes and recipients are in sections 2 to 4.
We honor Global Privacy Control (GPC). If your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information. Since we do neither, the signal requires no further change, but we will respect it if that ever changes.
Email support@lockedvibe.com from the address you used with us. We will confirm we received it, may ask for information to verify who you are, and will answer within 30 days (GDPR) or 45 days (CCPA). Residents of other US states with privacy laws can make the same requests and may appeal a decision by replying to our answer.
LockedVibe does not set any cookies of its own and does not use analytics or advertising cookies, so there is no cookie banner. A few things to know:
__cf_bm) to tell people apart from bots. It does not track you across sites.Our pages load fonts from your own device and do not request fonts from Google or other third parties.
We take reasonable technical and organizational measures to protect your data. Read our Security page for how we handle repo access and secrets.
If we change this policy, we will post the new version here and update the date above. If a change is significant, we will tell customers and subscribers by email.
LockedVibe, 9200 NW 39th Ave, Ste 130-3177, Gainesville, FL 32606, USA. Email: support@lockedvibe.com.