PRIVACY POLICY

1. DATA CONTROLLER

Simpli GmbH operates the platform AIVibers.io and is responsible for the processing of personal data within the meaning of the GDPR.

2. DATA PROCESSING PRINCIPLES

We only process personal data insofar as this is necessary to provide a functional platform as well as our content and services. Processing takes place on the basis of a legal permission or with the consent of the data subject.

3. LEGAL BASIS

We process your data on the following legal bases:

• Art. 6(1)(a) GDPR (Consent) — When you have given us explicit consent, e.g. for newsletters or optional cookies.
• Art. 6(1)(b) GDPR (Contract performance) — When processing is necessary for the performance of a contract with you.
• Art. 6(1)(c) GDPR (Legal obligation) — When we comply with a legal obligation, e.g. retention obligations.
• Art. 6(1)(f) GDPR (Legitimate interest) — When processing is necessary to protect our legitimate interests.

4. DATA WE COLLECT

4.1 When visiting the website (automatically)

When you access our website, your browser automatically transmits information to the server:

• IP address of the requesting device (anonymized after 7 days)
• Date and time of access
• Name and URL of the accessed file
• Referring website (referrer URL)
• Browser and operating system used
• Browser language settings

Legal basis: Art. 6(1)(f) GDPR.

4.2 When registering as a Client

• First and last name
• Email address
• Company name (optional)
• Password (stored encrypted via bcrypt/argon2)
• Payment information (processed exclusively via our payment service provider)

Legal basis: Art. 6(1)(b) GDPR.

4.3 When applying as a Viber

• First and last name, email address, location
• Selected roles and AI tools
• Links to portfolio projects, GitHub, LinkedIn
• Project descriptions and self-presentation
• Availability, language skills, preferred working model

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

4.4 During project execution

• Project descriptions and briefings
• Communication between Client and Viber
• Payment transactions (amounts, timestamps, escrow status)
• Delivered files and code
• Ratings and feedback

Legal basis: Art. 6(1)(b) GDPR.

4.5 When using the AI chat (Vibe AI)

When you use our AI-powered scoping tool, your inputs are processed to generate project specifications, price estimates, and Viber recommendations. Your inputs may be transmitted to third-party AI services (e.g. Anthropic/Claude, OpenAI), which act as data processors pursuant to Art. 28 GDPR.

Legal basis: Art. 6(1)(b) GDPR.

5. COOKIES & TRACKING

5.1 Strictly necessary cookies

We use strictly necessary cookies that are essential for the operation of the website. These cookies are set without your consent.

Legal basis: Art. 6(1)(f) GDPR, § 25(2) TDDDG.

5.2 No third-party tracking cookies

We do not use third-party tracking cookies such as Google Analytics, Facebook Pixel, or similar services. We do not sell, rent, or share your data with advertisers.

6. HOSTING & INFRASTRUCTURE

Our platform is hosted on servers within the European Union:

• Hosting: Railway / Vercel (edge network with EU regions)
• Database: Supabase Inc. (PostgreSQL, EU region)
• Email delivery: SendGrid — data processing pursuant to Art. 28 GDPR

7. SOCIAL LOGIN (GOOGLE, GITHUB)

You can sign in using your Google or GitHub account. The following data is transmitted by the respective provider:

• Google: Name, email address, profile image URL.
• GitHub: Username, email address, profile image URL.

Legal basis: Art. 6(1)(a) GDPR (consent through active use).

8. USE OF AI SERVICES

AIVibers uses artificial intelligence for automated project scoping, brief generation, and Viber matching. Data may be transmitted to:

• Anthropic (Claude): Data processed under DPAs and SCCs. API data is not used for training.

Legal basis: Art. 6(1)(b) GDPR.

9. PAYMENT PROCESSING & ESCROW

Payments are processed via certified payment service providers. Simpli GmbH does not store complete credit card numbers or CVV codes.

Legal basis: Art. 6(1)(b) and Art. 6(1)(c) GDPR.

10. DATA SHARING WITH THIRD PARTIES

We do not sell your data. We do not share your data with advertisers. We do not engage in profiling for advertising purposes.

11. DATA RETENTION

• Account data: Until deletion of your account.
• Project data: 10 years after project completion.
• Invoice and payment data: 10 years (§ 147(1) AO).
• Communication data: 6 years after project completion.
• Server log files: 7 days.

12. YOUR RIGHTS

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint (Art. 77 GDPR)

To exercise your rights, contact privacy@aivibers.io.

13. DATA SECURITY

We implement security measures pursuant to Art. 32 GDPR:

• TLS/SSL encryption for all data transmissions
• Encrypted password storage
• Regular security updates
• Access restrictions based on the need-to-know principle
• Automated backups with encrypted storage

14. MINORS

Our platform is intended for businesses and professionals. Use by persons under 18 is not permitted.

15. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this privacy policy. Material changes will be communicated by email or notice on the platform.