Last updated: May 25, 2026
1. Who are we?
Vibelabs AS (org. no. 933 595 605) is the data controller for personal data collected through our websites and services, including vibelabs.no, admin.vibelabs.no, and associated applications.
Contact:
Email: hello@vibelabs.no
Address: Oslo, Norway
2. What data do we collect?
We collect the following categories of personal data:
- Account information: Name, email address, and profile picture when you register or sign in via Google.
- Registration information: Name, email, company, and job title when you sign up for courses or events.
- Communications: Content of messages you send us.
- Technical data: IP address, browser type, and information about how you use our services.
3. Why do we process personal data?
We use your personal data to:
- Manage your user account and provide access to our services
- Handle registrations for courses and events
- Send you relevant information about courses you have signed up for
- Improve our services and user experience
- Fulfill legal obligations
Legal basis: Processing is based on contract (to deliver services), consent (for marketing), and legitimate interest (to improve services and for analytics).
Where consent is required, you may withdraw it at any time by contacting us at hello@vibelabs.no. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
4. Sign in with Google
When you sign in with Google, we receive basic profile information from your Google account (name, email address, profile picture). We do not store your password and do not have access to other data in your Google account.
You can revoke access at any time by going to your Google account settings.
5. Sharing of personal data
We never sell your personal data. We may share data with:
- Service providers: Supabase (database and authentication, EU), Vercel (hosting and analytics, US/EU), Google (Tag Manager and GA4 for analytics, US), LinkedIn (Insight Tag for marketing analytics, US — consent only), Meta Platforms (Facebook Pixel and Conversions API for conversion measurement from ads on Facebook and Instagram, US — consent only; hashed email and phone number are sent for matching, never in plain text), Microsoft (Bing UET ad tracking, US — consent only), HubSpot (CRM and contact tracking, US), Resend (email, EU). These process data on our behalf under data processing agreements.
- Authorities: If required by law.
6. Storage and security
Personal data is stored as long as you have an active account or it is necessary for the purpose for which it was collected. Account data is deleted within 12 months of account closure. Event registration data is retained for up to 24 months after the event for follow-up and reporting purposes.
Data is stored on secure servers in the EU/EEA area. Some service providers (such as Vercel and Google) may transfer data to countries outside the EU/EEA under the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.
We use industry-standard security measures including encryption, access control, and regular security reviews.
7. Your rights
You have the right to:
- Access the data we hold about you
- Rectify inaccurate data
- Erase data (with certain exceptions)
- Restrict processing
- Object to processing based on legitimate interest
- Data portability - receive your data in a portable format
To exercise your rights, contact us at hello@vibelabs.no.
8. Cookies and analytics
We use the following types of cookies and tracking technologies:
- Necessary cookies: To remember your login session and preferences. These are required for the service to function.
- Analytics: We use Google Tag Manager, Google Analytics 4, and Vercel Analytics to understand how our website is used. This may involve cookies that collect usage data such as pages visited and time on site.
- Marketing – LinkedIn (consent only): LinkedIn Insight Tag is used to measure ad performance and build audiences for future campaigns. Tags load only after you accept in the cookie banner. LinkedIn is US-based; data transfers under the EU-US Data Privacy Framework. You can opt out via LinkedIn's privacy settings.
- Marketing – Meta (consent only): The Meta Pixel (Facebook and Instagram) is used to measure ad performance and build audiences. Loads only after consent. To improve conversion measurement, we additionally send hashed (SHA-256) email addresses and phone numbers from form submissions to Meta via the Conversions API — Meta never receives plain text, only opaque hashes. Meta is US-based; data transfers under the EU-US Data Privacy Framework. You can opt out via Meta's ad preferences.
- Marketing – Microsoft (consent only): Microsoft Advertising (Bing UET) is used to measure ad performance. Loads only after consent. Microsoft is US-based; data transfers under the EU-US Data Privacy Framework.
- CRM: HubSpot is used to handle form submissions and build contact relationships. HubSpot sets a cookie that lets us follow up on inquiries.
You can withdraw consent at any time by clearing your browser storage for vibelabs.no, or by contacting us at hello@vibelabs.no. We do not share analytics data with third parties for advertising purposes beyond what is described above.
9. Changes
We may update this privacy policy. Significant changes will be communicated via email or on the website.