Legal

Privacy Policy

Last updated 14 August 2026

1. Controller

Vibra (“we”, “us”), based in Amsterdam, the Netherlands, is the controller of personal data collected on this site. Contact: privacy@vibra-pulse.com.

This policy covers the coming-soon website and waitlist. It is written for visitors in the EEA/UK (GDPR) and Brazil (LGPD — Lei nº 13.709/2018).

2. What we collect

• Waitlist: email address, time of signup, and that you opted in to marketing emails (launch + post-launch promotions). The Privacy Policy is linked next to that opt-in.
• Technical: IP address and basic request logs on our host (Vercel) and database (Supabase), for security and abuse prevention.
• Cookies: a consent cookie, plus analytics/marketing cookies only if you allow them. See the Cookie Policy.

We do not ask for your name, phone, or payment details on this page.

3. Why we use it (purposes and legal bases)

• Waitlist and launch emails — to tell you when Vibra opens. GDPR: consent (Art. 6(1)(a)). LGPD: consent (Art. 7, I).
• Promotional emails after launch — parties, perks, Pulse, and related offers. GDPR: consent (Art. 6(1)(a)). LGPD: consent (Art. 7, I). You can withdraw at any time.
• Running the site and keeping it secure — GDPR: legitimate interests (Art. 6(1)(f)). LGPD: legitimate interest (Art. 7, IX) and/or compliance with a legal obligation.
• Measurement (Google Tag Manager / Analytics) — only with cookie consent. GDPR: consent (Art. 6(1)(a) and ePrivacy). LGPD: consent.

The marketing checkbox is not pre-ticked. Joining the list means you want both launch news and later promotions. That is the purpose of the list. The Privacy Policy and Terms of Service are linked so you can read them before you opt in.

4. Who we share with

We do not sell your email. We use processors that help us operate:

• Supabase (database) — stores waitlist records.
• Vercel (hosting) — serves the site and API.
• Google (Tag Manager / Analytics) — only if you accept analytics or marketing cookies.
• An email provider, when we start sending waitlist messages.

Some processors are outside the EEA and Brazil (for example the United States). Where required we rely on Standard Contractual Clauses or an equivalent transfer tool, plus the consent you gave for cookies/email.

5. How long we keep it

Waitlist emails are kept until you ask us to delete them, until you unsubscribe and we no longer need the address to honour that opt-out, or until we close the waitlist after launch and migrate remaining contacts into the product under a new notice — whichever comes first. Consent records are kept as long as needed to show we had a valid opt-in. Server logs are kept for a short security window.

6. Your rights

GDPR (EEA/UK): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may complain to the Dutch AP (autoriteitpersoonsgegevens.nl) or your local DPA.

LGPD (Brazil): confirmation of processing, access, correction, anonymisation, blocking or deletion of unnecessary or excess data, portability, information about sharing, information about the possibility of refusing consent and consequences, and revocation of consent (Art. 18). You may complain to the ANPD (gov.br/anpd).

To exercise rights, email privacy@vibra-pulse.com. We will respond within the legal time limits. Withdrawing consent does not affect processing that already happened.

7. Children

This site is for adults (18+). We do not knowingly collect data from children.

8. Security

Access to waitlist data is restricted to operators who need it. The public form talks to our server; it does not write to the database from the browser. No method of transmission is 100% secure.

9. Changes

We will update this page when our practices change. For material changes to marketing or new purposes, we will ask for consent again where the law requires it.