Who we are
Vibier is a Slack-native AI marketing assistant for B2B marketing teams. It connects to a team's existing tools, learns their brand voice, and drafts and plans marketing work inside Slack.
This policy explains what data we collect, how we use and protect it, who we share it with, and your rights over it.
Operated by: Vibier Ltd. · Tel Aviv, Israel · Registered in Israel · Contact: leon@vibier.io
What we collect
- Account & identity data — your name, work email, company, and Slack workspace and user identifiers.
- Billing data — your name, company, billing contact, and a payment method, processed by our payment processor (Stripe). We do not store full card details ourselves; Stripe handles payment data.
- Conversation content — the messages you send the assistant, the instructions you give it, files you upload (briefs, decks, spreadsheets, images), content the assistant generates for you, and material it reads from channels or connected tools when you ask it to act on them.
- Connected-service data — data Vibier accesses in the third-party tools you connect, within the scopes you approve (see Third-Party Connections).
- Usage data — how you interact with Vibier, collected automatically to operate and improve the service.
- Marketing-site data — standard analytics on our website via Google Analytics 4, subject to cookie consent where required.
Conversation content
When you use Vibier inside Slack, we process the content of your interactions with the assistant. This is content data, and we treat it accordingly — we process it to operate the assistant: to understand your request, draft and plan your marketing work, maintain context across a conversation, and improve the assistant's responses to you over time.
We retain conversation content for the life of your account and delete it on account closure or on request, as described under Data Deletion.
How we use data to improve Vibier
We review how Vibier is used in order to improve it. This includes aggregate usage patterns across all customers, and — during our current early-access and design-partner stage — review of actual conversations with the assistant, so we can understand how teams use Vibier and make it better.
We exclude data sourced from your connected Google services (Gmail, Drive, Calendar, Sheets, Docs) from any human product-improvement review. Where the assistant has pulled content from your Google services into a conversation, that content is not read by our team for product improvement.
We do not sell your data, and we do not use it to train third-party AI models.
Third-party connections you authorize
Vibier connects to third-party services on your instruction — including Google (Drive, Gmail, Calendar, Sheets, Docs), HubSpot, Notion, LinkedIn, and X — through each provider's standard OAuth authorization flow. You initiate each connection and approve the specific permissions ("scopes") on the provider's own consent screen.
Once connected, Vibier accesses data in those services only within the scopes you approved, and only to provide the service to you. We request the narrowest scope each integration needs. You can revoke any connection at any time from the provider's own settings, which immediately ends Vibier's access.
These are user-directed integrations: data flows because you connected the service and asked Vibier to act on it. The services you connect are governed by their own privacy policies.
Google API Services — Limited Use
Vibier's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Vibier uses Google user data only to provide and improve the features you use, does not transfer or sell it for advertising or unrelated purposes, and does not allow humans to read your Google data except where you explicitly request it, where required for security or to comply with law, or where the data has been aggregated and anonymized.
Who we share data with (subprocessors)
We use the following third parties to operate Vibier. They process data on our behalf under their own security and privacy commitments (SOC 2 reports and DPAs available from each on request):
| Anthropic | AI processing, and managed agent state including conversation memory and securely vaulted connector credentials. |
| Supabase | Application database (hosted Postgres) — customer records, connector status, session metadata, and encrypted credentials. |
| Railway | Application hosting and compute. |
| Slack | The platform Vibier operates within. |
| Stripe | Payment processing and billing data. |
| Email provider | Transactional and product email. |
The third-party services you choose to connect (Google, HubSpot, Notion, LinkedIn, X) are user-directed integrations rather than subprocessors we engage — data flows to them because you connected them, and they operate under their own terms.
AI and model training
Vibier is built on Anthropic's commercial API. Anthropic does not train its models on data submitted through the commercial API. We do not use your data to train third-party AI models, and we do not sell your data.
Community
Vibier offers an optional community Slack workspace where customers can learn from other marketers. Participation is optional. If you join, your profile and posts are visible to other members, and the community is hosted on Slack under Slack's terms.
Where your data is stored
Vibier stores data on infrastructure located in the United States. If you are located outside this region, your data will be transferred to and processed there.
Data retention and deletion
You can request deletion of your data at any time by emailing leon@vibier.io. On deletion, we remove your customer records, the associated AI agent and its memory stores, and your vaulted connector credentials, within 30 days.
We may retain a minimal append-only audit record (that an action occurred and by which actor type) for security and operational purposes after account deletion. This does not include your conversation content or connected-tool data.
Your rights
Wherever you are located, you can request to access, correct, export, or delete your personal data, and object to or restrict certain processing. To exercise any of these, email leon@vibier.io. We extend these rights to all users regardless of region.
If you are in the EU/UK (GDPR) or California (CCPA/CPRA), you have specific statutory rights; we honor them for all users as a baseline.
Children
Vibier is a business product not intended for individuals under 18, and we do not knowingly collect data from them.
Governing law & changes
This policy is governed by the laws of Israel, where Vibier is registered. We comply with the Israeli Privacy Protection Law, and apply GDPR-level data protection standards to all users as our baseline, including CCPA/CPRA rights for California residents.
We may update this policy as the product evolves. Material changes will be reflected here with an updated date, and communicated where appropriate.