Privacy notice

Privacy

Placeholder. This page must be replaced with reviewed legal text before the first paid order (docs/setup.md §10). The headings below list what the notice needs to cover and reflect how the system is actually built.

1. Controller

Satori Global Ltd (trading as Vibent). Contact details. ICO registration if applicable.

2. What we collect and why

• Order: your email address, the address of the app to review, the time you agreed to the terms, and the Stripe payment reference. Basis: contract.
• Payment details: collected and held by Stripe, not by us. See Stripe's privacy notice.
• The review: screenshots and findings about your app, stored privately and linked to your email address. Basis: contract.
• Sign-in: when you open your review, Cloudflare Access verifies your email with a one-time code and records the sign-in. Basis: legitimate interest (security).
• Progress: which improvements you have opened or ticked, stored against the review (not against a device). Basis: contract.
• Messages: anything you send through "Talk to Vibent" or the contact form, including your email. Basis: legitimate interest / consent.

3. Where it is processed

Cloudflare (hosting, storage, authentication), Stripe (payments), and our review tooling. International transfer safeguards where relevant.

4. Retention

• Reviews and their screenshots: deleted 12 months after delivery, automatically.
• Order records: kept for the period required for tax and accounting.
• Sign-in logs: as retained by Cloudflare Access.
• Messages: until dealt with, then deleted within a stated period.

5. Sharing

We do not sell personal data. Processors listed above only. Access to your review is limited to the email addresses on your order.

6. Your rights

Access, rectification, erasure, restriction, portability, objection; how to exercise them (email); right to complain to the ICO.

7. Cookies

The public site sets no tracking cookies. Stripe sets cookies needed for payment. Opening a review sets a Cloudflare Access session cookie (up to 30 days) so you are not asked for a code on every visit.

8. Changes

Date of this version and how changes are communicated.