Privacy Policy
Last updated: October 2026
1. Information We Collect
Vibe Interview processes the data required for transcription, answer generation, Vision, diagnostics, enabled archive features, and access management. For billing and referrals, we retain the plan, amount, payment state, safe card mask, subscription dates, applied campaign, and earned rewards or commissions. Vibe never receives the full card number or security code. Default session telemetry contains technical events, versions, provider state, and Auto decision reasons without conversation text. Diagnostic bundles may include transcript text and audio tracks.
2. API Keys
Managed mode does not require a personal API key, and Vibe's provider keys remain on the server. In the current locally signed build, optional keys for alternative providers are stored in the app-private settings store with restrictive filesystem permissions; they are not uploaded as Vibe-managed keys.
3. Analytics
With consent, the website records explicit page, acquisition, and conversion events in Vibe's own infrastructure. Random visitor and session identifiers are HMAC-hashed on the server; raw identifiers and IP addresses are not stored. After authentication, selected conversion events may be linked to the internal account UUID so aggregated acquisition reports can include first interview, first visible answer, and payment stages; email and profile fields are not copied into analytics. Google Analytics 4, PostHog, and Yandex Metrica may be enabled as additional channels under the same consent and collection limits. Automatic page views, advertising signals, autocapture, session replay, Webvisor, and form-content collection remain disabled. Website analytics never includes email, name, resume, transcript, question, answer, screenshot, or audio content. The desktop app separately sends bounded technical reliability telemetry as described above.
4. Third-Party Services
Vibe uses specialized services for speech recognition, text answers, and image analysis. T‑Bank processes payments and stores payment methods, while a separate transactional email service delivers required subscription notices. Only data needed for the selected feature or transaction is transmitted, over encrypted connections.
5. Optional Google Calendar connections
Vibe Interview uses Google Calendar only when you choose to connect it in a version or account where the integration is available. The web Career calendar requests your Google account identifier and email (openid and email), read-only access to your calendar list (calendar.calendarlist.readonly), and read-only access to events (calendar.events.readonly). This lets you select calendars, view meetings, identify possible interviews, and explicitly import an interview into Career. Google may return event titles, times, links, organizer and attendee email addresses; organizer and attendee addresses are used to identify interview candidates. Vibe stores the connected account, selected calendar metadata, event identifiers, titles, times, timezone and Google links in its access-controlled infrastructure. Refresh tokens are encrypted with AES-256-GCM and bound to your Vibe account. This web connection cannot create, edit or delete events in Google Calendar. A separate desktop Calendar connection is in development and is not yet part of the public release. Its requested scopes are calendar.events, openid and email: it reads the primary calendar to show your schedule and creates events only when you submit the add-event form. That desktop path calls Google directly and stores account-specific access and refresh tokens in the operating system credential store; it does not send calendar content to the Vibe server. Connecting either path is optional and does not grant access to Gmail, Drive or Google Contacts.
6. Google data: use, sharing and control
Google Calendar data is used only for the calendar and interview-planning features you enable. It is not sold, used for advertising, or sent to answer-generation or transcription providers, and is not used to develop, improve or train generalized or non-personalized AI or machine-learning models. The web path processes data in Vibe’s private hosting and database infrastructure to provide these features; the desktop path described above processes it on your device. Vibe Interview’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Connections and synchronized records are retained while needed for your enabled calendar features. Disconnecting the web integration removes its stored connection credentials and invokes calendar cleanup; interviews you explicitly imported into Career remain until you delete them or request deletion. Disconnecting the desktop integration deletes its local connection credentials. You may revoke authorization separately at myaccount.google.com/permissions; this stops future authorized access but does not itself delete previously imported Career records. For deletion of account-linked records, contact us using the contact below. Connections use HTTPS; server access is restricted and desktop credentials use the system credential store.
7. HeadHunter: desktop connection in development
The HeadHunter (hh.ru) connection is in development and is not yet part of the public release. In the desktop flow under development, sign-in and vacancy search are enabled by the user. Authorization-code exchange and token refresh go through Vibe’s server, which holds the HeadHunter application secret; the server does not store tokens or write them to logs. Issued tokens are stored on the device in the operating system credential store, separately for each Vibe account. Vacancy searches go directly from the device. Sending applications and messages to employers is not available in the interface yet. Disconnecting deletes local tokens; access can also be revoked in the hh.ru application settings.
8. Data Retention
First-party website analytics events are retained for up to 180 days. Server telemetry and diagnostic bundles are stored in Vibe's private access-controlled infrastructure. You can request deletion of account-linked data through the privacy contact.
9. Contact
For privacy questions, reach us at @VibeInterviewBot