V2P Privacy Policy
Service: V2P Certification Program
Operated by: BNENDS, LLC d/b/a Vibe to
Production, a Florida limited liability company (“we,” “us,”
“our”)
Effective Date: July 7, 2026
Last Updated: July 7, 2026
This Privacy Policy explains how we collect, use, disclose, and safeguard information, including the source code you submit for certification, when you use V2P.
By using the Service, you consent to the practices described here. If you do not agree, do not use the Service.
1. Information We Collect
1.1 Account & Billing
Name, email, company name, password, billing address, and transaction history.
Passwords are encrypted. Payment processing is handled by Stripe. We do not store your complete card number.
1.2 Submitted Code and Related Materials
When you request a certification, you provide us with source code, dependency manifests, configuration files, and, where relevant to a Production or Continuous Cert, limited access needed to run the disclosed runtime probes.
We refer to these materials as Submission Data.
Submission Data may incidentally contain personal information if it appears in your code, comments, test fixtures, or seed data, such as a hardcoded test email address.
You are responsible for not including personal data or secrets in your submission beyond what is necessary and appropriate. We treat everything you submit as confidential regardless.
1.3 Usage & Device Data
Pages viewed, actions taken, IP address, browser/device information, and general location, such as city or region inferred from IP address.
1.4 Cookies
See Section 8.
2. How We Use Information
| Purpose | What We Use |
|---|---|
| Perform the certification, including analysis, scoring, and report generation | Submission Data |
| Issue and host your certificate and Seal | Account data and certification results |
| Billing and account management | Account and billing data |
| Improve the grading engine and build the certification corpus, in de-identified or aggregated form only | Submission Data, de-identified |
| Security, fraud prevention, and legal compliance | All categories as needed |
| Customer support | Account data and communications |
Legal basis for EEA/UK users: contract performance, legitimate interests, and legal obligation.
This includes contract performance for certification delivery and billing, legitimate interests for security and product improvement using de-identified data, and legal obligation for compliance.
3. How We Share Information
We do not sell your personal information.
We share information only with the categories listed below.
3.1 Service Providers and Subprocessors
| Category | Provider | Purpose |
|---|---|---|
| AI-assisted code analysis | Anthropic Claude API | Performs the automated portion of the code assessment |
| Orchestration | LangChain-based multi-agent pipeline | Coordinates the multi-step audit |
| Hosting | Cloud infrastructure provider | Infrastructure and storage |
| Payment processing | Stripe | Billing |
A current subprocessor list is available on request at privacy@vibetoproduction.io.
Submission Data sent to Anthropic’s Claude API for analysis is subject to Anthropic’s API data-handling terms, under which API inputs are not used to train Anthropic’s models absent separate agreement.
3.2 Legal Requirements, Business Transfers, and Aggregated Data
We may share information as required by law, in connection with a merger, financing, or asset sale with notice to you, or in aggregated/de-identified form that cannot reasonably identify you or your codebase.
4. Data Retention
| Data Type | Retention |
|---|---|
| Account information | Duration of account, plus 1 year after deletion |
| Submission Data, including submitted code and scan artifacts | 30 days following completion of the certification run, to support re-scans, appeals, and dispute resolution, then deleted from active systems unless a Continuous Certification subscription requires ongoing retention for the re-scan cadence you selected |
| Billing and transaction records | 7 years, as legally required |
| Support communications | 3 years |
5. Data Security
We maintain administrative, technical, and physical safeguards, including encryption in transit using TLS 1.2+, encryption at rest, access controls, and monitoring.
No system is completely secure, and we cannot guarantee absolute security.
We will notify affected clients of a breach involving their Submission Data or account information as required by applicable law.
6. Your Rights and Choices
You may access, correct, or delete account information through account settings or by emailing privacy@vibetoproduction.io.
You may request deletion of Submission Data after a certification run concludes, subject to the retention needs described in Section 4, such as an active Continuous Certification subscription.
7. International Data Transfers
Information may be processed in the United States and other countries where our subprocessors operate, including in connection with the Claude API.
For EEA/UK users, we rely on Standard Contractual Clauses or other approved transfer mechanisms where required.
8. Cookies
Essential cookies: authentication, session management, and security. These are required for the Service to function.
Analytics cookies: aggregate usage statistics.
Preference cookies: language and display settings.
You can manage cookies through your browser settings or our cookie consent tool. EEA/UK visitors will see an opt-in banner on first visit.
9. Children’s Privacy
The Service is a B2B/professional tool and is not directed at or intended for use by children under 18.
We do not knowingly collect personal information from children.
10. California Privacy Rights
California residents may request to know, delete, or correct their personal information, and may designate an authorized agent.
We do not sell or share personal information for cross-context behavioral advertising.
Submit requests to privacy@vibetoproduction.io. We will respond within 45 days, extendable by another 45 days with notice.
11. European Privacy Rights
Data Controller: BNENDS, LLC d/b/a Vibe to
Production
Address: 129 W. Flagler St, Miami, FL
33130
Contact: privacy@vibetoproduction.io
You have the rights of access, rectification, erasure, restriction, portability, and objection.
You also have the right to withdraw consent and to lodge a complaint with your local supervisory authority.
Submit requests to privacy@vibetoproduction.io. We respond within 30 days.
Enterprise clients may request a Data Processing Addendum.
12. Israel
For users in Israel, we comply with the Privacy Protection Law, 5741-1981.
You may access, correct, or request deletion of your personal data by contacting privacy@vibetoproduction.io.
13. Changes to This Policy
We will post updates here.
For material changes, we will notify you by email or prominent notice at least 30 days before they take effect.
14. Contact
BNENDS, LLC d/b/a Vibe to Production
129 W. Flagler St, Miami, FL 33130
Privacy inquiries:
privacy@vibetoproduction.io
General inquiries:
support@vibetoproduction.io
Document History
| Version | Date | Changes |
|---|---|---|
| 1.0 | July 7, 2026 | Initial version |