1. Information We Collect
- Account details: name, email address, phone number, and gender. Sign-in is passwordless (a one-time code sent by email, or a passkey), so we do not store passwords.
- Sign-in information from Google or Apple when you choose to continue with them (see section 2).
- Registration and ticket records: events, sessions, ticket types, ticket status, and check-in time.
- Registration-form answers and files an event organizer asks for (for example, a student ID).
- University affiliation (set from your verified university email), club memberships, and membership applications.
- Payment records for paid tickets: amount, status, and a payment reference. Card details go directly to our payment processor and never reach Vibook.
- An optional WhatsApp number if you ask to receive your ticket on WhatsApp.
- Device and usage data needed for security and sign-in (IP address, browser type, session cookies), and site analytics only if you allow them.
- Messages you send to support or to organizers, and text you type into AI features (AI search, help, and translation).
2. Google User Data
When you sign in with Google, we request only the basic scopes (openid, email, and profile). We do not request access to your Gmail, Google Drive, Contacts, Calendar, or any other Google service.
- What we receive: your name, email address, and profile picture URL, and Google's confirmation that your email is verified.
- How we use it: to create your Vibook account and sign you in, to show your name on your tickets and registrations, and to send the ticket confirmations and event updates you asked for. If your email is on a university domain, it also sets your university affiliation.
- What we store: your name and email in your Vibook profile, in our database hosted by Supabase. The profile picture URL stays in your account record with our sign-in provider and is not displayed or shared.
- Sharing: we do not sell Google user data or use it for advertising. We share your name and email only with the organizer of an event you register for, to manage your registration and admission, and with the service providers in section 5 that host and run Vibook on our behalf.
- Limited Use: Vibook's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Deletion: you can delete your account (section 12), which removes the name and email Google provided from our active systems. You can also remove Vibook's access at any time from your Google Account at myaccount.google.com/permissions.
3. How We Use Information
- To create and manage accounts and sign you in securely.
- To process registrations and payments and issue QR tickets and Apple Wallet passes.
- To let organizers manage attendance and validate tickets at the door.
- To send transactional email (ticket confirmations and event updates), and WhatsApp messages only if you ask for them.
- To provide support and answer your questions.
- To protect the platform from fraud and abuse and to improve its reliability and performance.
4. Legal Basis
We process personal data in line with Saudi Arabia's Personal Data Protection Law (PDPL): to provide the services you request, to comply with legal obligations, to protect legitimate interests, and based on your consent where required (for example, analytics and WhatsApp messages).
5. Data Sharing and Service Providers
We do not sell personal data. We share it only as follows:
- Event organizers: for events you register for, the organizer sees your name, email, phone number, ticket, and your answers to their registration form.
- Supabase: database, authentication, and file storage.
- Vercel: website hosting, and site analytics only after you consent.
- Resend and Zoho: delivery of transactional email.
- Moyasar: payment processing for paid tickets.
- Meta (WhatsApp Cloud API): ticket delivery on WhatsApp, only when you ask for it.
- Apple: Apple Wallet passes and Live Activities on your device.
- Anthropic: processing the text you type into AI features, and the event details needed for organizer reports.
- Authorities, when the law requires it.
6. International Transfers
Some of the service providers above process data outside Saudi Arabia. We use only providers that commit to protecting the data they process on our behalf.
7. Data Retention
We keep your account data for as long as your account is active. Registration, ticket, and payment records are kept so organizers can run their events and for accounting. When you delete your account, we remove your personal data from our active systems, except records the law requires us to keep for legal, accounting, or dispute-resolution purposes.
8. Security
Data is encrypted in transit (HTTPS) and encrypted at rest by our database provider, and access is limited by role (for example, an organizer sees only their own events' data). No system is perfectly secure, but we continuously review and improve our controls.
9. Your Rights
Subject to applicable law, you may request information about your data, access it, obtain a copy, correct it, or request its destruction. Signed-in users can download a copy and submit or track requests from the account Privacy Center.
10. Cookies and Analytics
We use essential cookies for sign-in and security. Site analytics remains off until you choose to allow it, and you can change your selection at any time from the Cookie settings link in the site footer.
11. Children's Privacy
Vibook is not intended for children under the legal age required by applicable law without parental or guardian authorization.
12. Account Deletion
You can delete your account at any time from within the app or website via Account > Settings > Delete Account, then confirming the request. If you cannot access your account, email a deletion request from your registered email address to support@vibook.app. On deletion, your personal data (name, email, phone number, and registration and ticket records) is removed from our active systems, except for any records we must retain for legal, accounting, or dispute-resolution purposes as described in the Data Retention section.
13. Updates To This Policy
We may update this policy from time to time. Material updates will be published on this page with a revised effective date.
14. Contact
For privacy requests or questions, contact support@vibook.app.