Privacy Policy

Last updated: April 2026

This Privacy Policy describes how Viboo ("the Platform", "we", "us", "our") collects, uses, and protects your information when you use viboo.fun.

1. Information We Collect

1.1 Account Information

• Authentication data: Email address, phone number, or social login identifier, processed through Privy for secure authentication
• Profile data: Username, display name, bio, avatar image, banner image, location
• Wallet address: Your Solana wallet public key (automatically created via Privy or manually connected)

1.2 Content

• Images, videos, and audio files you upload
• Captions, links, and metadata associated with your posts
• Direct messages sent through the Platform

1.3 Transaction Data

• Content unlock history and payment amounts
• On-chain transaction signatures
• Tips, referral earnings, and promo code usage

1.4 Usage Data

• Pages visited and features used
• Device type, browser, and operating system
• IP address (for rate limiting and abuse prevention)
• Push notification subscription endpoints

2. How We Use Your Information

• Authentication: To verify your identity and manage your account
• Payment processing: To facilitate USDC transactions between creators and fans on the Solana blockchain
• Content delivery: To store, process, and serve your content (including generating blurred previews and watermarks)
• Notifications: To send push notifications about unlocks, tips, mentions, and other account activity
• Platform operation: To display profiles, feeds, search results, and analytics
• Safety and moderation: To enforce our Terms of Service, prevent abuse, and respond to reports
• Rate limiting: To prevent spam and abuse of platform features

3. Third-Party Services

We share data with the following third-party services, strictly as necessary to operate the Platform:

• Privy: Authentication provider. Receives your login credentials and manages embedded wallet creation. See Privy's Privacy Policy.
• Cloudflare R2: Media storage and delivery. Stores uploaded images, videos, and generated previews.
• Solana blockchain: All payment transactions are recorded publicly on the Solana blockchain. Transaction signatures, wallet addresses, and amounts are publicly visible and permanent.
• Vercel: Application hosting and serverless function execution. Processes HTTP requests and may log request metadata.

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

4. Data Retention

• Account data: Retained as long as your account is active. Permanently deleted upon account deletion.
• Content: Retained until you delete it or your account. Flash posts are automatically and permanently deleted after their expiration period.
• Transaction records: Retained for the lifetime of your account. On-chain transaction data exists permanently on the Solana blockchain and cannot be deleted.
• DM messages: Retained until deleted by the user, or automatically deleted according to the creator's auto-delete settings. Unsent messages are soft-deleted and may be permanently purged.
• Usage logs: Retained for up to 90 days for debugging and abuse prevention, then automatically purged.

5. Your Rights

You have the following rights regarding your data:

• Access: View your profile information, transaction history, and content at any time through the Platform
• Update: Modify your profile information through the Settings page
• Delete content: Remove any post and its associated media at any time
• Delete account: Permanently delete your account and all associated data through the Settings page. This action is irreversible.
• Export wallet: Export your embedded wallet private key through Privy to maintain access to your on-chain funds independently
• Withdraw funds: Withdraw any USDC balance from your wallet before deleting your account

6. Cookies and Local Storage

Viboo uses the following client-side storage mechanisms:

• Authentication cookies: Session tokens managed by Privy for secure login persistence. These are essential cookies required for the Platform to function.
• Local storage: Used to cache UI preferences and notification subscription state

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

7. Security

We take reasonable measures to protect your data, including:

• Encryption in transit (HTTPS/TLS) for all API communications
• Encryption at rest for stored data
• Rate limiting and abuse prevention on all endpoints
• Signed URLs for media access with expiration

However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

8. Children's Privacy

Viboo is strictly intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a user is under 18, we will immediately terminate their account and delete all associated data.

9. International Users

Viboo is operated from the United States. If you access the Platform from outside the United States, your data may be transferred to and processed in the United States. By using the Platform, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be communicated via the Platform. Continued use of Viboo after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, data requests, or concerns, contact us at privacy@viboo.fun.