Privacy Policy

Vibe is built to Australian and New Zealand privacy standards. The Australian Privacy Principles, the New Zealand Privacy Act 2020 and its Information Privacy Principles are the rules this service works to, and they are applied to everyone who uses it, wherever they are. Vibe adopts them as a voluntary standard: the operator is registered in Georgia, so no regulator compels this. They are the rules here because they are written around exactly the kind of inference this service makes, and because a published standard can be checked. Whatever privacy law applies where you live applies as well, and nothing on this page reduces it.

Vibe is run by Sergei Kovalev, one person, at 19 Pirosmani Street, Batumi, Adjara 6000, Georgia. There is no company behind it and no staff. Where this page says “we”, it means him, and he is the person answerable for everything described here.

That is also why this page is unusually specific. A large operator can write “appropriate safeguards” and mean a department. Here every provider that touches your data is named, and the person who chose them is the one you can write to.

This covers people with accounts, people who visit without one, people who write to support, and people who can be recognised in material somebody submits. It does not make you our agent, and it does not give you permission to upload another person’s information.

The decisions are made in the product, at the moment they arise. Before your first analysis, before an import, and when you create an account, the service says what it is about to do and waits for an answer. This page is the long version of those moments.

Not all of this applies to everyone. If you have never run an analysis there is nothing under photographs; if you have never written to support there is nothing under support.

• From you: when you register, sign in, turn on two-factor, recover an account, upload or choose photographs, answer questions, change a setting, or write to support.
• From a listing page you asked us to import.
• From your browser and network automatically, the way any website receives a request — the request itself, and what it carries.
• From the providers that run the service for us, named further down this page.
• From another person, only where you or they had the right to give it.

The service also tells you these things at the point they matter.

• Running your account: sign-in, sessions, two-factor, recovery, preferences, and what your plan gives you access to.
• Doing what you asked for: analysing the photographs you chose, building a Vibe Profile, comparing it against a property, and keeping what you saved.
• Importing a listing you pointed us at, and telling you why when it fails.
• Counting the runs you have used on Basic and on the Expert demo, and stopping that count being circumvented.
• Keeping the service standing up and safe: finding faults, noticing abuse, investigating incidents, holding backups.
• Answering you when you write, and telling you about something that affects your account or its security.
• Meeting a legal obligation, or defending a claim.

Two things are asked for separately, because they go beyond running the service: sending your photographs to be analysed, and building Vibe Memory from what you mark as a favourite. Each is a distinct question with a distinct answer, and either can be withdrawn in Privacy settings without losing the rest.

We do not use what we hold for something unrelated merely because it is technically within reach. If that ever changes, it changes with a new notice, and — where it should be — a new question.

The outputs — a style profile, a match score, the explanation beside it — are inferences. A model reads pixels and produces an opinion. It is often useful and sometimes wrong. Treat it as an opinion.

• Vibe does not perform face recognition, identity verification from photographs, emotion detection, or any decision about whether someone qualifies for something.
• Vibe does not sell image data, does not advertise against what an image implies, and does not hand your images to anyone for training a general-purpose model.
• You need the right to submit each photograph. It is worth a second look before you do: documents on a desk, a screen left on, a name on a parcel, a face in a mirror.
• No Vibe profile or score is used by us to decide anything about employment, housing, credit, insurance, health, education, or law enforcement — and it should not be used that way by anyone else.
• If an output is wrong or harmful, write to contact@aera.rent. A person reads it, and it is corrected or removed.

Every company that touches your data is named below. There is no category of “trusted partners” standing in for a list we would rather not print.

About the analysis provider: Abacus.AI’s customer terms treat submitted content as the customer’s confidential information and require deletion when the agreement ends. They say nothing about whether submitted content may be used to train models, so we will not tell you either way — we do not know, and no such permission has been granted.

One further access, stated plainly because it exists: Vibe is built with coding assistants that run in a development environment holding production credentials. They are not handed user content as a matter of course, but the access is real, and saying so is better than assuming it away.

Nothing is sold or rented, and none of it is used for advertising.

Vibe runs in the United States. Data about you therefore leaves the country you are in, which is worth knowing in advance.

• The application and the database sit in Amazon’s and Neon’s US East (Ohio) region.
• Photographs selected for an analysis are processed in the United States by Abacus.AI. The run does not start until you have been told that and agreed to it.
• The operator can reach those systems. He is one person, so “access is limited to those who need it” means one name.
• If a provider, a country, or a purpose changes materially, this page changes, and the notices inside the product change with it.

The short version: what you saved stays until you delete it, and what the service needed in order to work goes when it stops needing it.

An analysis can run in the background so you can close the tab. While that is happening, and for up to twenty-four hours after it finishes, a working copy of the reduced images is held so that the finished report is still yours to save when you come back. The copy is the same small, metadata-stripped version that goes for analysis, never your original upload. It is stored privately, never published or shared, removed the moment you save the report, and removed by the retention sweep if you never do. Deleting your account removes it too.

What actually protects it: passwords stored as hashes; optional two-factor with recovery codes you hold; sessions you can see and end from Settings; encryption in transit; secrets kept out of the source; images re-encoded on the way in, which removes their original metadata; imports restricted to an allow list and refused when a redirect resolves to a private address; and backups held by the platforms above. No system is absolutely safe, and this one is run by one person, which is why everything above is named.

Most of it you can do yourself without writing to anyone. Privacy settings hold an export of your data and the deletion request; Security settings hold your password, two-factor, and every device currently signed in.

Requests are answered by the operator personally, and identity is confirmed through the address the account was registered with. A New Zealand access or correction request is answered within twenty working days. Nothing is charged for.

There is no analytics product on this site. No Google Analytics, no advertising pixel, no third-party tracker, nothing that follows you anywhere else.

• Two cookies exist. One is your sign-in session. The other carries work you did as a guest into an account you then create. Both are strictly necessary.
• Approximate region may be inferred from your network address, by us or by a hosting provider, as it is on any website. Vibe never asks your browser for precise location.
• Email from us is either about your account and its security, which you cannot switch off while the account exists, or optional, which you can switch off in Privacy settings. Every optional message says how to stop it.
• Nothing inferred from your photographs is used for marketing.

Age

Vibe is for adults; the minimum age is 18. It is not built for children and carries no parental-consent flow, which is why the age limit is there. If we learn that an account belongs to someone under 18, it is closed and its data deleted.

If something goes wrong

If data is lost, reached by someone who should not have reached it, or disclosed by mistake, it is investigated and contained. Where the legal test is met, the people affected are told, along with the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme and the Office of the New Zealand Privacy Commissioner. There is no escalation path here: the operator is the person who notifies.

Complaints

1. Write to contact@aera.rent with enough detail to identify what happened. Do not send passwords, recovery codes or identity documents by ordinary email; they are not needed.
2. You get an acknowledgement within five working days and an answer within thirty, with the reasoning behind it.
3. If that does not settle it, a reader in Australia can complain to the Office of the Australian Information Commissioner and a reader in New Zealand to the Office of the Privacy Commissioner. Your own local regulator may also take it.

This page changes when the service changes. Anything material is said inside the product before it takes effect.