Privacy Policy
1. Who We Are
GAP MINING ("we", "us", "our"), also trading as Digital MINING, is an AI skill platform that provides intelligent automation, skill orchestration, and business intelligence tools. We are a UK-based business and the data controller for the personal data described in this policy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are accessible at vib-pulse.com and related subdomains.
For privacy inquiries: vibpulse@gmail.com. Our geographic business address is available on request.
2. Information We Collect
2.1 Information You Provide
- Account information: Email address, display name, password (hashed — never stored in plain text)
- Billing information: Payment is processed by Stripe. We never see or store your card number — only a Stripe customer ID and subscription status.
- Waitlist submissions: Email address and any optional message you provide
- Support communications: Emails or messages you send to us
2.2 Information Collected Automatically
- Usage data: Which skills you invoke, invocation counts, session duration, feature usage patterns
- Technical data: Browser type, device type, operating system, IP address (anonymized after 90 days), referring URL
- Log data: Server logs, error reports, performance metrics — retained for 30 days
2.3 Cookies & Local Storage (PECR)
Under the Privacy and Electronic Communications Regulations (PECR), we only store non-essential cookies or similar technologies with your consent, which we ask for via the consent card shown when you first visit. What we actually use:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| Supabase auth session | Essential cookie/storage | Keeps you logged in (Supabase Auth) | Session / until logout |
gm_consent | Essential localStorage | Records your cookie choice (allow all / reject all / per-category preferences) so we don't ask again | Until cleared |
gm_lang | Essential localStorage | Remembers your language preference | Until cleared |
gm_content_system | Essential localStorage | Remembers a UI toggle state | Until cleared |
Analytics cookies are only ever set if you choose "Accept all" on the consent card — currently we set none. We do not use third-party advertising cookies or cross-site tracking cookies. You can change your choice at any time by clearing site data in your browser, which makes the consent card reappear.
3. How We Use Your Information
| Purpose | Data Used | Basis |
|---|---|---|
| Provide and operate the service | Account info, usage data | Contract |
| Process payments & manage subscriptions | Stripe customer ID, plan status | Contract |
| Send product updates and feature announcements | Email address | Legitimate interest / consent |
| Improve the platform (aggregate analytics) | Anonymised usage data | Legitimate interest |
| Security, fraud prevention, abuse detection | IP address, log data | Legitimate interest |
| Customer support | Account info, support messages | Contract |
| Legal compliance | As required | Legal obligation |
4. Data Storage & Security
Your data is stored in Supabase (PostgreSQL), hosted in the EU West region. All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Row-Level Security (RLS) policies ensure users can only access their own data.
- Passwords: hashed with bcrypt (Supabase Auth)
- Secrets & API keys: stored in Supabase Vault, never in code
- Backups: automated daily backups, retained 30 days
- Access: only authorised team members can access production data
5. Data Sharing
We never sell your personal data. We share data only with:
- Supabase — database, auth, storage, edge functions (EU West)
- Stripe — payment processing (PCI-DSS compliant)
- Resend — transactional email delivery
- Law enforcement — only when legally required and with valid legal process
All sub-processors are bound by data processing agreements that meet GDPR requirements.
6. Your Rights (UK GDPR, EU GDPR & CCPA)
Depending on your location, you have the right to:
- Access — request a copy of all data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your account and all associated data
- Portability — receive your data in a machine-readable format (JSON)
- Restriction — limit how we process your data
- Object — opt out of processing based on legitimate interest
- Withdraw consent — unsubscribe from marketing at any time
To exercise any right: email vibpulse@gmail.com with subject "Privacy Request". We respond within one calendar month, as required by UK GDPR.
Right to complain: if you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint, helpline 0303 123 1113. We would appreciate the chance to resolve your concern first, but you may contact the ICO at any time.
7. Data Retention
- Active account data: retained while your account is active
- Deleted accounts: purged within 30 days of deletion request
- Billing records: retained 7 years (legal requirement)
- Server logs: 30 days
- Anonymised analytics: indefinitely (no personal identifiers)
8. Children's Privacy
GAP MINING is not directed at children under 16. We do not knowingly collect data from children. If you believe we have inadvertently collected data from a child, contact us immediately.
9. International Transfers
Your data is stored in the EU (Supabase EU West), which the UK Government recognises as providing adequate protection. Where personal data is transferred outside the UK or EU (for example to US-based sub-processors such as Stripe or Resend), we rely on UK International Data Transfer Agreements (IDTAs), the UK Addendum to the EU Standard Contractual Clauses, or UK adequacy regulations to ensure equivalent protection.
10. Changes to This Policy
We may update this Privacy Policy as the platform evolves. Material changes will be notified by email (if you have an account) or by a prominent banner on the site. Continued use after 30 days of notification constitutes acceptance.
11. Contact
Privacy questions, data requests, or concerns:
- Email: vibpulse@gmail.com
- Subject line: "Privacy Request"
- Response time: within 30 days