Privacy Policy

OnlyGoodVibes is operated by onlygoodvibes.dev, a Byldd company. For the purposes of applicable data-protection law, we act as the controller of the personal data described here, except where we process Customer Materials on your behalf, in which case we act as your processor under the Terms.

We collect the following categories of information:

• (a) Account and contact information — such as your name, email address, and any details you provide when you sign in, submit a project, or contact us.
• (b) Payment information — payments are processed by our payment processor (currently Stripe). We do not store full card numbers on our systems; we receive limited transaction and billing data (such as confirmation of payment, the last four digits, and billing country) from the processor.
• (c) Customer Materials — the source code, repositories, uploaded archives, project URLs, access tokens or credentials you provide, and related materials you submit so that we can perform an Audit or Fix Services. These are handled as described in Section 4.
• (d) Usage and technical data — such as IP address, device and browser type, pages viewed, referring URLs, and interactions with the Service, collected through standard logging and cookies (see Section 9).
• (e) Communications — the contents of messages, support requests, and feedback you send us.

Please do not submit personal data of third parties, regulated data, or secrets within your Customer Materials unless necessary and lawful; where possible, remove production credentials and live secrets before submitting.

We use information to:

• (a) provide, operate, and deliver the Service, including performing your Audit and any Fix Services and delivering your Report;
• (b) process payments, prevent fraud, and enforce our Terms;
• (c) communicate with you, including sending Report-ready notifications, receipts, and service updates;
• (d) provide customer support and respond to your requests;
• (e) maintain the security, integrity, and reliability of the Service;
• (f) comply with legal obligations and enforce our rights; and
• (g) operate, analyze, and improve the Service using aggregated, anonymized, and de-identified data that does not identify you.

Where required by law, our lawful bases for processing are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (where requested), and compliance with legal obligations.

We treat your Customer Materials as confidential and process them only to provide the Service. Specifically:

• Access is limited. Your Customer Materials are accessed only by the OnlyGoodVibes engineer(s) assigned to your review and personnel who support the Service, each under confidentiality obligations.
• Not used to train models. We do not use your Customer Materials to train, fine-tune, or develop machine-learning models.
• Not sold or shared for others' purposes. We do not sell your Customer Materials and do not share them with third parties for those third parties' own purposes. We use a limited set of infrastructure and tooling providers (see Section 5) strictly as our processors to perform the Service, under contractual confidentiality and data-protection terms and, where applicable, on a no-retention / no-training basis.
• Engineering tools. Our engineers may use professional engineering and AI-assisted tooling to review code efficiently, under human oversight. Where such tooling is used, it is configured to act as our processor and not to retain your Customer Materials for its own purposes or use them for model training.
• Limited retention. We retain your Customer Materials only as long as needed to perform and support your engagement, and we delete or anonymize them within a commercially reasonable period afterward, unless a longer period is required by law or to resolve a dispute or enforce our Terms.
• Deletion on request. You may request deletion of your Customer Materials at any time by emailing ayush@byldd.com, and we will comply except where retention is required by law or for the limited purposes above.

We share information only in these limited circumstances:

• (a) Service providers / processors — with vendors who process data on our behalf and under our instructions to operate the Service, such as cloud hosting and infrastructure, our payment processor (Stripe), code hosting integrations you connect (such as GitHub or GitLab), engineering and AI-assisted tooling, email and analytics providers. They are bound by confidentiality and data-protection obligations and may use the data only to provide services to us.
• (b) Within the Byldd group — with our affiliates for the limited purposes described in this Policy, under equivalent protections.
• (c) Legal and safety — where we believe disclosure is reasonably necessary to comply with law, legal process, or a government request; to enforce our Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of OnlyGoodVibes, our users, or others.
• (d) Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business or assets, in which case information may be transferred subject to this Policy.
• (e) With your direction or consent — where you ask us to share, or otherwise consent.

We do not sell personal information for money, and we do not "share" it for cross-context behavioral advertising as those terms are defined under applicable US state privacy laws.

We retain personal data for as long as needed to provide the Service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Customer Materials are retained as described in Section 4. When data is no longer needed, we delete or anonymize it.

We use reasonable technical and organizational measures designed to protect information, including access controls, encryption in transit, and confidentiality obligations on personnel and processors. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You provide information at your own risk and are responsible for protecting your own credentials and removing live secrets from materials before submission.

We and our service providers may process information in countries other than where you reside, including countries that may not provide the same level of data protection as your home jurisdiction. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers. By using the Service, you understand your information may be transferred and processed internationally.

We use cookies and similar technologies to operate the Service, remember your preferences, maintain sessions, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where required by law, we request consent for non-essential cookies through a banner, defaulting to the more privacy-protective option.

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal data, and to withdraw consent. Where applicable:

• EU/UK (GDPR/UK GDPR): rights of access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with your supervisory authority.
• California (CCPA/CPRA):rights to know, delete, correct, and opt out of "sale"/"sharing," and not to be discriminated against for exercising rights. As noted, we do not sell or share personal information as defined by that law.
• Other jurisdictions: equivalent rights as provided by your local law.

To exercise any right, email ayush@byldd.com. We will verify your request and respond within the time required by applicable law. You may use an authorized agent where the law permits.

The Service is not directed to, and not intended for, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

The Service may link to or integrate with third-party sites and services (such as GitHub, GitLab, Stripe, and YouTube). Their privacy practices are governed by their own policies, and we are not responsible for them. Review their policies before providing information.

We may update this Policy at any time by posting the revised version with a new "Last updated" date. Material changes take effect when posted (or on any later date we state). Your continued use of the Service after changes take effect constitutes acceptance.

OnlyGoodVibes — a Byldd company

onlygoodvibes.dev, 32 Saint Marks Place, New York City, NY, United States, 10003

Privacy: ayush@byldd.com · General: ayush@byldd.com