Privacy Policy

We apply the privacy commitments in this policy to all users. The Australian Privacy Principles and the New Zealand Privacy Act 2020 and Information Privacy Principles are the standards we adopt, including as additional commitments where they are not mandatory. The operator’s location in Georgia does not by itself exclude those laws. Applicable mandatory privacy rights in Australia, New Zealand and other countries are preserved; this policy does not claim a regulatory exemption or certification.

Aera Vibe is operated by Sergei Kovalev, a natural person, at 19 Pirosmani Street, Batumi, Adjara 6000, Georgia. In this policy, “we” means the operator, who is responsible for the service’s handling of personal information.

Contact the operator at contact@aera.rent or +995 585 890 610. The same contact handles privacy requests from every country.

This covers people with accounts, people who visit without one, people who write to support, and people who can be recognised in material somebody submits. It does not make you our agent, and it does not give you permission to upload another person’s information.

The registration form links to this policy. Analysis and import interfaces provide notices relevant to those actions. Optional permissions are managed separately in Privacy settings; accepting this policy does not itself authorise every optional use.

Not all of this applies to everyone. If you have never run an analysis there is nothing under photographs; if you have never written to support there is nothing under support.

• From you: when you register, sign in, turn on two-factor, recover an account, upload or choose photographs, answer questions, change a setting, or write to support.
• From a listing page you asked us to import.
• From your browser and network automatically, the way any website receives a request — the request itself, and what it carries.
• From the providers that run the service for us, named further down this page.
• From another person, only where you or they had the right to give it.

The service also tells you these things at the point they matter.

• Running your account: sign-in, sessions, two-factor, recovery, preferences, and what your plan gives you access to.
• Doing what you asked for: analysing the photographs you chose, building a Vibe Profile, comparing it against a property, and keeping what you saved.
• Importing a listing you pointed us at, and telling you why when it fails.
• Counting the runs you have used on Basic and on the Expert demo, and stopping that count being circumvented.
• Keeping the service standing up and safe: finding faults, noticing abuse, investigating incidents, holding backups.
• Answering you when you write, and telling you about something that affects your account or its security.
• Meeting a legal obligation, or defending a claim.

Permission for external AI analysis and the Vibe Memory option are separate. You can withdraw them in Privacy settings without closing the account. Withdrawal concerns subsequent use; it does not reverse completed processing or automatically delete saved results or existing memory. Use the memory reset or deletion controls, or contact us, to request removal.

We limit use to the purposes described in this policy. A materially different purpose requires an updated notice and a valid legal basis, including renewed consent where required.

The outputs — a style profile, a match score, the explanation beside it — are inferences. A model reads pixels and produces an opinion. It is often useful and sometimes wrong. Treat it as an opinion.

• Vibe does not perform face recognition, identity verification from photographs, emotion detection, or any decision about whether someone qualifies for something.
• We do not sell image data, use it for targeted advertising or use it ourselves to train a general-purpose model. We send selected data to an external provider to perform analysis. We have not independently confirmed all of that provider’s downstream training and retention practices; the provider disclosure below explains this limitation.
• You need the right to submit each photograph. It is worth a second look before you do: documents on a desk, a screen left on, a name on a parcel, a face in a mirror.
• No Vibe profile or score is used by us to decide anything about employment, housing, credit, insurance, health, education, or law enforcement — and it should not be used that way by anyone else.
• Report an inaccurate or harmful output to contact@aera.rent. We review the report and explain the correction, removal or other action available; a model-generated opinion cannot always be amended in place.

The following providers and recipients support the service. An integration receives data only when it is enabled and the relevant feature is used. Providers may use subprocessors under their own terms; this list is not a certification of their entire processing chain.

External analysis is supplied by Abacus.AI under its customer terms. We do not authorise general-purpose model training on your content. We have not obtained independent confirmation of all provider or subprocessor retention and training practices, so we cannot guarantee that processing is transient or excluded from every downstream training use. Do not submit sensitive information that you cannot permit to be processed on this basis. This disclosure does not replace our legal duties to protect your information.

Development and maintenance use coding assistants in an environment with access to production systems. User content is not routinely supplied as development input, but technical access is possible. This policy does not represent those tools as isolated from production data or certify that their access has been independently audited.

If you enable a sharing link for a profile or report, anyone with that link can view its public presentation, including the images and analysis included in it. Disabling the link stops subsequent access through it; it cannot recall copies already downloaded or shared by a recipient.

To avoid analysing the same image repeatedly, Vibe Match caches image-derived room facts using a fingerprint of the prepared image, the model and the analysis format. These facts can be reused across runs and accounts that submit the same image. They do not include the requesting user’s profile, but a fingerprint is not a guarantee of anonymity. The cache is not a public gallery and has its own retention described below.

Nothing is sold or rented, and none of it is used for advertising.

Vibe runs in the United States. Data about you therefore leaves the country you are in, which is worth knowing in advance.

• The application and the database sit in Amazon’s and Neon’s US East (Ohio) region.
• Photographs selected for an analysis are processed in the United States by Abacus.AI. The run does not start until you have been told that and agreed to it.
• The operator accesses the systems from Georgia for administration and support. The development-access disclosure above also applies.
• If a provider, a country, or a purpose changes materially, this page changes, and the notices inside the product change with it.

Retention depends on the data category and the purpose for which it is held. Deleting a saved report is distinct from clearing temporary processing data, shared image facts, provider-held copies or backups.

Background Vibe Match runs have a twenty-four-hour window from the start of the run for retrieving and saving the finished result. We privately keep the complete analysis result, working copies of the reduced, metadata-stripped images rather than your original uploads, and a record of whether the run allowance was reserved, used or returned. This lets you retrieve the result again after a connection failure and prevents duplicate returns of the same allowance. Saving triggers deletion of the working image copies; the saved report keeps its separate lifetime described below. After the window expires, scheduled cleanup removes the temporary result, remaining image copies and settled allowance record. Failed cleanup is retried; an unsettled allowance record is kept until the deduction or return is resolved. These temporary data are also covered by the account deletion process.

Safeguards include password hashing, optional two-factor authentication, session controls, encryption in transit, separation of secrets from source code, image re-encoding to remove original metadata, and checks on imported URLs. No system is risk-free. Cleanup can require retries, and provider copies and backup cycles are separate from deletion of active account records. We do not promise immediate removal of every physical copy.

Most of it you can do yourself without writing to anyone. Privacy settings hold an export of your data and the deletion request; Security settings hold your password, two-factor, and every device currently signed in.

The operator handles requests and may ask for proportionate evidence of identity before disclosing or changing personal information. A New Zealand access or correction request is answered within twenty working days, subject to any lawful extension notified to you. We do not charge for requests under this policy.

The service uses cookies and browser storage for operation and preferences. The application does not load a Google Analytics browser tag or advertising pixel. We do not use information inferred from your photographs for advertising. Operational logging and a provider’s own technical processing are distinct from advertising tracking.

• Session and guest-handoff cookies keep you signed in and carry guest work into an account. Core admission and Pinterest authorisation can use additional cookies when those features are used.
• Browser storage can retain language and theme choices, analysis consent acknowledgements and information needed to resume work. Clearing storage can remove those local preferences and resumable state; it does not delete server-held records.
• Approximate region may be inferred from your network address, by us or by a hosting provider, as it is on any website. Vibe never asks your browser for precise location.
• We may contact you about support, account security or material service changes. Marketing communications require the applicable permission and an opt-out. You can disable optional communications in Privacy settings; this does not stop replies to support requests or necessary security notices.
• Nothing inferred from your photographs is used for marketing.

Age

Vibe is for adults; the minimum age is 18. It is not built for children and carries no parental-consent flow, which is why the age limit is there. If we learn that an account belongs to someone under 18, it is closed and its data deleted.

If something goes wrong

We investigate and contain suspected loss, unauthorised access or disclosure. Where applicable legal notification thresholds are met, we notify affected people and the relevant authority, including the Australian Information Commissioner or New Zealand Privacy Commissioner as applicable. The operator is responsible for incident handling and notification.

Complaints

1. Write to contact@aera.rent with enough detail to identify what happened. Do not send passwords, recovery codes or identity documents by ordinary email; they are not needed.
2. You get an acknowledgement within five working days and an answer within thirty, with the reasoning behind it.
3. If that does not settle it, a reader in Australia can complain to the Office of the Australian Information Commissioner and a reader in New Zealand to the Office of the Privacy Commissioner. Your own local regulator may also take it.

This page changes when the service changes. Anything material is said inside the product before it takes effect.