Privacy Policy

1. Who are we?

Vibelabs AS (org. no. 933 595 605) is the data controller for personal data collected through our websites and services, including vibelabs.no, admin.vibelabs.no, and associated applications.

Contact:
Email: hello@vibelabs.no
Address: Oslo, Norway

2. What data do we collect?

We collect the following categories of personal data:

• Account information: Name, email address, and profile picture when you register or sign in via Google.
• Registration information: Name, email, company, and job title when you sign up for courses or events.
• Communications: Content of messages you send us.
• Technical data: IP address, browser type, and information about how you use our services.

3. Why do we process personal data?

We use your personal data to:

• Manage your user account and provide access to our services
• Handle registrations for courses and events
• Send you relevant information about courses you have signed up for
• Improve our services and user experience
• Fulfill legal obligations

Legal basis: Processing is based on contract (to deliver services), consent (for marketing), and legitimate interest (to improve services and for analytics).

Where consent is required, you may withdraw it at any time by contacting us at hello@vibelabs.no. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Sign in with Google

When you sign in with Google, we receive basic profile information from your Google account (name, email address, profile picture). We do not store your password and do not have access to other data in your Google account.

You can revoke access at any time by going to your Google account settings.

5. Sharing of personal data

We never sell your personal data. We may share data with:

• Service providers: Supabase (database and authentication), Vercel (hosting and analytics), Google (Tag Manager for analytics), Resend (email). These process data on our behalf under data processing agreements.
• Authorities: If required by law.

6. Storage and security

Personal data is stored as long as you have an active account or it is necessary for the purpose for which it was collected. Account data is deleted within 12 months of account closure. Event registration data is retained for up to 24 months after the event for follow-up and reporting purposes.

Data is stored on secure servers in the EU/EEA area. Some service providers (such as Vercel and Google) may transfer data to countries outside the EU/EEA under the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

We use industry-standard security measures including encryption, access control, and regular security reviews.

7. Your rights

You have the right to:

• Access the data we hold about you
• Rectify inaccurate data
• Erase data (with certain exceptions)
• Restrict processing
• Object to processing based on legitimate interest
• Data portability - receive your data in a portable format

To exercise your rights, contact us at hello@vibelabs.no.

8. Cookies and analytics

We use the following types of cookies and tracking technologies:

• Necessary cookies: To remember your login session and preferences. These are required for the service to function.
• Analytics: We use Google Tag Manager and Vercel Analytics to understand how our website is used. This may involve cookies that collect anonymized usage data such as pages visited and time on site.

We do not use marketing or advertising cookies. Analytics data is used solely to improve our services and is not shared with third parties for advertising purposes.

9. Changes

We may update this privacy policy. Significant changes will be communicated via email or on the website.

10. Complaints

If you believe we are processing personal data in violation of regulations, you can complain to the Norwegian Data Protection Authority (Datatilsynet).