Privacy Policy

1. Who we are

VibeCut is operated by Ofek Levy, a sole proprietor based in Israel, who is the controller of the personal data described here (“we”, “us”). You can reach us about privacy at ofeklevy.social@gmail.com.

This policy explains what personal data we process when you visit this website, create an account, buy a subscription and use the VibeCut software, why we process it, and your rights.

2. In short

• Your audio, video and thumbnails stay on your computer. They are never uploaded to us or to an AI provider.
• When you approve an AI request, only the text VibeCut shows you first — your instruction and the transcript excerpts it needs — is sent, through our service, to our AI provider.
• We do not keep the content of your requests or their results on our servers.
• This website sets no cookies and loads no analytics or trackers. The software collects no usage analytics.
• We do not sell your personal data, and we do not use it for advertising.

3. This website

This website is a set of static pages. It sets no cookies, runs no scripts of ours, and loads no analytics, advertising or tracking code and no resources from other companies. It has no forms.

The site is hosted by Cloudflare. Like any web host, Cloudflare processes the technical data your browser sends with each request — your IP address, browser type, the page requested and the time — to deliver the page and protect the site from attacks. We use this request data only for security, to prevent abuse and to see overall traffic.

4. Your account

You sign in through our sign-in provider, Auth0 (a service of Okta), using a supported method such as Google, Apple or a one-time code sent to your email. We do not receive or store a password. From sign-in we receive your email address, an account identifier and, depending on the method you choose, basic profile details the method shares, such as your name.

We keep records needed to run your account: sign-in and session records, your subscription status, and the editing machines your account uses.

5. Payments

Purchases are handled by Paddle, our merchant of record. Paddle collects the details needed for the purchase — such as your name, email address, billing country and address, payment details and any tax ID — and processes them as an independent controller under Paddle’s privacy policy. We never see your full card number. Paddle tells us what we need to provide the subscription: your plan and its status, your country, order and customer identifiers, and the amounts charged.

6. The VibeCut software

• Media stays local. VibeCut opens and analyses your audio and video on your computer. Media, thumbnails, file names and file paths are not sent to us or to an AI provider.
• Transcription is local. Speech is transcribed on your computer.
• AI requests send only approved text. When you approve an AI request, VibeCut sends the text it showed you — your instruction and the transcript excerpts the request needs, with their approximate spoken lengths — through our service to Anthropic, our AI provider, to produce the plan. If you type personal information into an instruction, it is sent with it. Our service processes the request in memory to deliver the response and does not store its content or its result: they are not written to our databases or our logs. Anthropic processes the text as our service provider under its commercial terms, which govern how long it keeps it; we do not claim that it keeps nothing.
• Usage and billing records. For each paid request we keep accounting records — when it was made, the model and thinking level, the allowance reserved and used, and its status — but not its content. We use them to enforce your allowance, show you your usage and resolve billing questions.
• Machine records. Each installation creates a random installation ID, which we use to count the editing machines on your account. We do not collect hardware identifiers or a device fingerprint.
• Credentials. Your sign-in credential is kept in your computer’s secure system keychain, never in logs or in chat history.
• Logs on your computer. The software keeps technical logs on your computer for troubleshooting. They stay there unless you choose to send them to us, after reviewing what they contain.
• No analytics. The software does not collect usage analytics.
• Local-only mode makes no network requests at all.

The Privacy and data page shows, operation by operation, what leaves your computer.

7. Why we process your data

• To provide VibeCut under our contract with you: your account, your subscription, AI requests you approve, allowances and machines.
• For our legitimate interests: keeping the website and service secure, preventing fraud and abuse (including trial abuse), and understanding overall website traffic.
• To meet legal obligations, such as accounting and tax records, and responding to lawful requests from authorities.
• With your consent, where we ask for it; you can withdraw it at any time.

8. Who we share it with

We share personal data only with the providers that run VibeCut for us, and only what each needs:

• Cloudflare — hosting of this website and of our service;
• Auth0 (Okta) — sign-in, using its EU region;
• Paddle — payments, tax and invoicing, as merchant of record;
• Anthropic — the AI models that process the text of requests you approve.

We may also disclose data where the law requires it, or to a successor if the VibeCut business is transferred, in which case this policy continues to protect it.

9. International transfers

We are based in Israel, and our providers may process data in other countries, including the United States. Israel is recognised by the European Commission as providing adequate protection. Where data about people in the EU, EEA or UK is transferred to a country without such recognition, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and their UK equivalent, offered by our providers.

10. How long we keep it

• Account records: while your account is open. When it is closed, we delete or anonymise them within a reasonable time, except what we must keep.
• Usage, billing and machine records: as long as needed to provide the subscription, resolve billing questions and meet accounting and tax obligations.
• The content of AI requests and their results: not kept by us at all.
• Website request logs: kept by our host for a limited period for security.

11. Your rights

Depending on where you live, you have rights over your personal data. Under the EU and UK General Data Protection Regulation (GDPR) you can ask for access to it, correction, deletion, restriction of processing and a portable copy, and you can object to processing based on legitimate interests or withdraw consent. Under Israel’s Protection of Privacy Law, 5741-1981, you can ask to review the data held about you, and to have it corrected or deleted if it is inaccurate, incomplete, unclear or out of date.

To use any of these rights, email ofeklevy.social@gmail.com. We will answer within one month, and may need to confirm your identity first. You may also complain to your data protection authority — in the EU your national authority, in the UK the Information Commissioner’s Office, in Israel the Privacy Protection Authority. We would appreciate the chance to resolve your concern first.

12. Security

Connections to our service are encrypted. Sign-in credentials are kept in your system keychain, keys to our providers stay on our servers, and access to records is limited to what running VibeCut requires. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

13. Children

VibeCut is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child under 16 has given us personal data, contact us and we will delete it.

14. Changes to this policy

We will publish any update on this page with a new “Last updated” date, and tell account holders in advance about material changes.

15. Contact

Ofek Levy, sole proprietor, Israel. Email ofeklevy.social@gmail.com, or see the Contact page. See also our Terms and Conditions and Refund Policy.