Overview
This policy describes the information VibrArte collects when you use the platform as a client or an artist, the third-party services that process that information on VibrArte's behalf, and the choices available to you, including deleting your account.
Information We Collect
Account and profile data: your name, email address, phone number, preferred language, and role (client or artist), along with any profile details an artist chooses to publish (bio, services, pricing, location, social links).
Artist media: photos and videos an artist uploads to their public profile and gallery.
Booking and request data: the event details a client submits (event type, date, venue, guest count, and similar information), quotes an artist sends in response, and messages exchanged between a client and an artist about a booking.
Contracts: the booking contract generated once a quote is accepted, including a snapshot of the agreed terms, pricing, and either party's signature, where applicable.
Subscription and payment metadata: which membership plan an artist is subscribed to, subscription and billing status, and Stripe identifiers (such as customer, subscription, and payment ids) needed to process payments and payouts. VibrArte does not receive or store full card numbers; card details are handled directly by Stripe.
Third-Party Services That Process Your Information
VibrArte relies on the following third-party service providers to operate the platform. Each provider only receives the information necessary to perform its function.
Supabase: hosts the platform's database, handles authentication (sign-in/sign-up), and stores artist media files.
Stripe: processes payments, artist subscriptions, and payouts to artists. VibrArte does not store full payment card details.
Resend: sends transactional emails, such as booking notifications, quote updates, and contract confirmations.
Vercel: hosts and serves the VibrArte application.
Authentication and Account Management
Signing in and creating an account is handled through Supabase Auth. Your session is maintained using a secure session cookie; a separate, short-lived cookie is used only during the password-reset flow. VibrArte does not use these cookies for advertising or tracking.
Your dashboard (client, artist, or admin) is determined by your account role, and access to each dashboard is enforced on the server, not just in the interface.
Account Deletion
You can permanently delete your own client or artist account from your account settings. This is a self-service action that removes your profile and account data from the platform.
Some records, such as those related to completed payments, payouts, or signed contracts, may be retained after account deletion where VibrArte is required to keep them for legal, tax, or accounting purposes.
Security Practices
Access to your data is controlled through database-level access rules, so your information is only reachable by the account it belongs to or by an authorized administrator. Sensitive account actions (such as sign-in, password reset, and password changes) are rate-limited to reduce the risk of automated abuse. Administrator-level access to platform data is further restricted beyond a standard account role.
Payment confirmations are only ever accepted from Stripe through a cryptographically signed notification; the platform never trusts a payment status reported directly by a browser.
Data Retention
VibrArte retains your account and activity data for as long as your account remains active. If you delete your account, your profile and account data are removed as described above, though certain payment, payout, or contract records may be retained where required for legal, tax, or accounting purposes.
International Users
VibrArte is available in English, Spanish, Portuguese, French, Italian, and German, and is used by clients and artists in different countries. Because VibrArte relies on third-party service providers described above, your information may be processed in countries other than your own, consistent with each provider's own practices.
Contact
Questions about this Privacy Policy or requests about your information can be directed to VibrArte directly.