1. Overview

Goodvibe (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Goodvibe, you agree to the practices described here.

2. Information We Collect

Account information: When you register, we collect your name and email address. Your password is stored as a secure hash and is never readable by us.

Profile information: If you choose to add a bio or profile photo, that information is stored and displayed publicly on your profile and product listings.

Product content: Product names, descriptions, screenshots, and links that you submit are stored and displayed publicly on the platform.

Usage data: We collect anonymous analytics data such as page views and interaction patterns via Vercel Analytics to understand how the platform is used.

3. How We Use Your Information

• To operate and improve the Goodvibe platform
• To display your profile and product listings to other users
• To send password reset emails when requested
• To detect and prevent fraud or abuse
• To analyse usage patterns and improve user experience

We do not sell your personal data to third parties.

4. Authentication & Cookies

We use an HTTP-only session cookie (gv_token) to keep you logged in. This cookie cannot be accessed by JavaScript and expires after 30 days. We do not use advertising or tracking cookies.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Vercel — hosting and serverless infrastructure
• Vercel Blob — image storage for uploaded files
• MongoDB Atlas — database
• Mailgun — transactional email (password resets only)
• Vercel Analytics — anonymous usage analytics

Each service has its own privacy policy and data processing terms.

6. Data Retention

Your account and associated content are retained for as long as your account is active. You may request deletion of your account and data by contacting us. Uploaded images stored in Vercel Blob may persist for a short period after deletion due to CDN caching.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate information via your profile settings
• Request deletion of your account and personal data
• Withdraw consent for data processing at any time

To exercise these rights, contact us at the email below.

8. Children's Privacy

Goodvibe is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the date at the top of this page. Continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related questions or requests, contact us at hello@goodvibe.hk.