Privacy Policy

1. Introduction

VibeComputers ("we," "us," "our," "Company") operates the website vibecomputers.com (the "Site"). This Privacy Policy describes how we collect, use, disclose, retain, and protect your personal information when you visit our Site, create an account, place an order, or otherwise interact with our services.

By accessing or using our Site, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy. If you do not agree, please do not use our Site or services. This Privacy Policy is incorporated into and subject to our Terms of Service.

2. Information We Collect

a. Information You Provide Directly

• Personal information: Full name, email address
• Shipping information: Street address, city, state, ZIP code
• Account information: Email and hashed password (if you create an account)
• Build preferences: Your PC configuration choices, budget, and design preferences
• Communications: Messages, support chat transcripts, and any other content you send to us

b. Information Collected Automatically

When you access our Site, we may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system
• Device type and identifiers
• Pages visited and referring URL
• Date, time, and duration of access

This information is collected through server logs and is used solely for security monitoring, error diagnosis, and service reliability.

c. Information from Third Parties

We may receive limited information from our payment processor, Stripe, confirming that a payment was successful or failed. We do not receive or store your payment card number, CVV, or full card details. Stripe handles all payment card information directly under its own privacy policy and PCI-DSS compliance.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Process and fulfill your custom PC build order
• Communicate with you about your order status, build progress, and delivery
• Send transactional emails (order confirmations, payment receipts, shipping notifications)
• Provide customer support and warranty service
• Detect, prevent, and address fraud, unauthorized access, and other illegal activities
• Comply with applicable laws, regulations, legal processes, and governmental requests
• Enforce our Terms of Service and other agreements
• Maintain, improve, and analyze the performance and security of our Site and services
• Communicate changes to our policies or services

We do not sell, rent, lease, or trade your personal information to any third party for any purpose. We do not send marketing or promotional emails unless you have explicitly opted in to receive them.

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual necessity: Processing necessary to fulfill your order and provide our services under our Terms of Service.
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, service improvement, and the operation of our business, where these interests are not overridden by your data protection rights.
• Legal obligation: Processing necessary to comply with applicable laws, including tax reporting, responding to lawful government requests, and data retention requirements.
• Consent: Where required by applicable law, we rely on your consent for specific processing activities, which you may withdraw at any time.

5. Third-Party Sharing

We share your information only with the following categories of third parties, strictly as necessary to operate our business and fulfill your orders:

We may also disclose your information in the following circumstances:

• Legal requirements: When required to comply with applicable law, regulation, legal process, subpoena, court order, or enforceable governmental request.
• Protection of rights: To enforce our Terms of Service, protect our rights, privacy, safety, or property, and to protect against fraud or other illegal activity.
• Business transfers: In connection with any merger, acquisition, sale of assets, financing, reorganization, bankruptcy, or dissolution of all or a portion of our business, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
• Professional advisors: To our attorneys, accountants, auditors, and other professional advisors as necessary for the operation of our business, subject to confidentiality obligations.
• With your consent: We may share your information for any other purpose with your prior express consent.

We do not sell, rent, or share your personal information with third parties for their own direct marketing purposes.

6. Cookies & Tracking Technologies

We use only essential cookies that are strictly necessary for the functioning of our Site. We do not use advertising cookies, tracking pixels, analytics cookies, social media widgets, or any third-party tracking technologies.

Because we use only essential cookies, no cookie consent banner or opt-out mechanism is required. However, you can disable cookies in your browser settings, though doing so may prevent you from logging in or using certain features of our Site.

7. Do Not Track Signals

Our Site honors Do Not Track ("DNT") signals transmitted by your web browser. Because we do not engage in tracking across third-party websites, do not serve targeted advertising, and do not use analytics tracking, no additional action is taken upon receiving a DNT signal. Our data collection practices remain the same regardless of DNT settings, as we already limit collection to what is strictly necessary for our services.

8. Data Security

We implement reasonable and appropriate administrative, technical, and physical security measures designed to protect your personal information from unauthorized access, use, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS protocols
• Encryption of sensitive data at rest
• Passwords hashed using industry-standard cryptographic algorithms (never stored in plain text)
• Access controls limiting employee and contractor access to personal information on a need-to-know basis
• Payment processing handled entirely by Stripe's PCI-DSS Level 1 certified infrastructure
• Regular review and updates of our security practices

Notwithstanding the foregoing, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. While we strive to use commercially reasonable means to protect your personal information, we do not warrant or guarantee that your information will be completely secure from unauthorized access, hacking, data loss, or other breach. You acknowledge that you provide your personal information at your own risk.

9. Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. Specific retention periods are as follows:

• Order data: 3 years following order completion, to support warranty claims and meet legal and tax obligations
• Account information: Retained until you delete your account
• Support chat logs: 3 years following the last message in the conversation
• Automatically collected data: Up to 1 year for security and diagnostic purposes

You may request deletion of your account and associated personal data at any time through your account settings. Upon deletion, we will remove or de-identify your personal information within 45 days, except where retention is required by law or necessary to complete a pending transaction.

10. Your Rights

Depending on your state of residence, you may have some or all of the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete personal information
• Deletion: Request deletion of your personal information, subject to certain legal exceptions
• Portability: Request a copy of your personal information in a portable, machine-readable format
• Restrict processing: Request that we limit the processing of your personal information under certain circumstances
• Withdraw consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of processing conducted prior to withdrawal
• Non-discrimination: Exercise any of these rights without receiving discriminatory treatment from us

To exercise any of these rights, contact us via the support chat on your order page. Guest users (orders placed without an account) may exercise their rights by providing their order number and the email address associated with their order. We will verify your identity before processing any request and will respond within the timeframe required by applicable law (generally 45 days).

11. State-Specific Privacy Rights

In addition to the general rights listed above, residents of certain states have additional rights under their state's privacy laws. This section provides state-specific disclosures and rights.

11.1 California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), provides you with the following additional rights:

• Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, detecting security incidents, complying with legal obligations).
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: We do not sell or share (as defined by the CCPA/CPRA) your personal information. No opt-out is required.
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information for purposes beyond what is necessary to provide our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To submit a CCPA/CPRA request, contact us via the support chat on your order page. You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity (and your agent's authorization) before processing. We will respond within 45 days of receiving a verifiable request, which may be extended by an additional 45 days where reasonably necessary with notice to you.

California "Shine the Light" (Civil Code § 1798.83): California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

11.2 Virginia (VCDPA)

Virginia residents have the right to: access their personal data; correct inaccuracies; delete their personal data; obtain a portable copy of their data; and opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in the sale of personal data, targeted advertising, or profiling as defined under the VCDPA.

If we decline your request, you may appeal by contacting us within 30 days. We will respond to your appeal within 60 days. If you are not satisfied with the outcome of your appeal, you may contact the Virginia Attorney General.

11.3 Colorado (CPA)

Colorado residents have the right to: access, correct, and delete their personal data; obtain a portable copy; and opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling. We honor universal opt-out mechanisms as required by the Colorado Privacy Act. We do not engage in the sale of personal data, targeted advertising, or profiling as defined under the CPA.

If we decline your request, you may appeal within 45 days. We will respond to your appeal within 45 days.

11.4 Connecticut (CTDPA)

Connecticut residents have the right to: access, correct, and delete their personal data; obtain a portable copy; and opt out of the sale of personal data, targeted advertising, and profiling. We do not engage in these activities. If we decline your request, you may appeal within 45 days, and we will respond within 60 days. If unsatisfied, you may contact the Connecticut Attorney General.

11.5 Utah (UCPA)

Utah residents have the right to: access and delete their personal data; obtain a portable copy; and opt out of the sale of personal data and targeted advertising. We do not sell personal data or engage in targeted advertising. We will respond to requests within 45 days.

11.6 Texas (TDPSA)

Texas residents have the right to: access, correct, and delete their personal data; obtain a portable copy; and opt out of the sale of personal data, targeted advertising, and profiling. We do not engage in these activities. If we decline your request, you may appeal within 45 days, and we will respond within 60 days. If unsatisfied, you may file a complaint with the Texas Attorney General.

11.7 Oregon (OCPA)

Oregon residents have the right to: access, correct, and delete their personal data; obtain a portable copy; opt out of the sale of personal data, targeted advertising, and profiling; and obtain a list of third parties to whom we have disclosed personal data. We do not sell personal data or engage in targeted advertising or profiling. If we decline your request, you may appeal within 45 days, and we will respond within 45 days. If unsatisfied, you may contact the Oregon Attorney General.

11.8 Montana (MCDPA)

Montana residents have the right to: access, correct, and delete their personal data; obtain a portable copy; and opt out of the sale of personal data, targeted advertising, and profiling. We do not engage in these activities. If we decline your request, you may appeal within 45 days, and we will respond within 60 days. If unsatisfied, you may contact the Montana Attorney General.

11.9 Additional States

12. Children's Privacy (COPPA)

Our Site and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as promptly as possible. If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us via the support chat on your order page, and we will take appropriate action.

We also do not knowingly collect personal information from individuals under 18 for any purpose other than fulfilling an order placed by an adult (e.g., a parent purchasing a PC for a minor). If you are under 18, you may not create an account or place an order.

13. International Users

Our services are intended for use only by residents of the United States. We do not ship internationally, and our Site is not directed to individuals outside of the United States. All personal information we collect is stored and processed in the United States. If you access our Site from outside the United States, you do so at your own risk and are responsible for compliance with any applicable local laws. By providing your personal information to us, you consent to the transfer of that information to and storage in the United States.

14. Changes to This Policy

We may update this Privacy Policy from time to time at our sole discretion. Changes will be posted on this page with an updated "Last updated" date. Your continued use of our Site or services following the posting of changes constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact

For privacy-related questions, concerns, or requests to exercise your rights, reach out via the support chat on your order page. Log in to your dashboard to access your order. Guest users may contact us by providing their order number and the email address associated with their order.