01Who we are
VibeSafe Builder is a vibe-coding app operated by SG Digital Ventures LLC, a limited liability company registered in the State of Wyoming, USA (Entity ID: 2026-002034713, Wyoming Secretary of State). VibeSafe Builder is one product in SG Digital Ventures LLC's multi-SaaS portfolio, alongside its sibling product VibeSafe (code security scanning). Our contact email is contact@vibesafebuilder.com.
References to "VibeSafe Builder", "we", "us", or "our" below mean SG Digital Ventures LLC doing business as VibeSafe Builder. By using vibesafebuilder.com or the builder at /app, you agree to this Privacy Policy and the Terms of Service below.
02What data we collect
Information you provide directly
- Your Anthropic API key — only if you use Bring Your Own Key mode. See §3.
- Email address — only if you sign up for the Managed plan (via Stripe Checkout and Supabase magic-link sign-in).
- Prompts and app code — what you type in chat and the app it generates, sent to Anthropic's API to produce a response.
- Messages — if you use the on-site chat assistant or email us directly.
Information collected automatically
- Usage data — for Managed-plan customers only: build count and dollars spent per billing period, used solely to enforce the monthly budget.
- Standard server logs — request timestamps and IP address, used for security and abuse prevention, retained briefly by our hosting provider (Vercel).
We do not run third-party analytics or advertising trackers on vibesafebuilder.com.
03Bring Your Own Key mode
This is the default mode and requires no account. Here's exactly what happens to your data:
- Your Anthropic API key is stored only in your browser's
localStorage. It is sent to our server with each generation request (over HTTPS, as anx-anthropic-keyheader), used once to call the Anthropic API on your behalf, and is never written to a database or log by us. - Your chat history, generated code, and version history live only in your browser's
localStorage. We do not have a database of BYOK projects — if you clear your browser data or switch devices, that project is gone unless you downloaded it first. - Your prompts and current app code are sent to Anthropic's API (the model provider) to generate a response, subject to Anthropic's privacy policy. Anthropic bills you directly at their standard rates; we never see or process your Anthropic invoice.
04Managed plan mode
If you subscribe to the $15/month Managed plan, we handle the Anthropic costs on our own key so you don't need one. This requires:
- An email address, used to create a Supabase-authenticated account and sign you in via a magic link (no password to store or leak).
- A Stripe subscription, so we know your subscription is active. We never see or store your card number — Stripe handles that entirely (see §6).
- Usage tracking — we record the dollar cost and count of your generations per billing period, solely to enforce the $10/month usage budget included in the plan. We do not store the resulting app code server-side beyond generating the response; your project's version history still lives in your browser's localStorage, same as BYOK mode.
05Publishing your app
The Publish button is opt-in and per-app. If you click it:
- The app's full HTML/CSS/JS is uploaded to our database and served publicly at a link like
vibesafebuilder.com/p/xxxxxx— anyone with the link can view and use it. - We run a server-side security scan before accepting the publish (hardcoded keys/secrets,
eval()) and refuse to publish if it fails, regardless of what the client-side scan showed. - Republishing the same app overwrites the content at that link. There is currently no self-service "unpublish" button — email contact@vibesafebuilder.com and we'll take a published app down.
- Don't publish an app containing anyone else's personal data, or data you weren't authorized to share — publishing makes it public on the internet.
06Payments
Managed-plan payments are processed by Stripe, Inc. We receive a webhook confirming your subscription is active and your billing email — never your card number, CVC, or full payment details. See Stripe's Privacy Policy for how they handle payment data. BYOK mode has no platform fee, so no payment information passes through us at all — you pay Anthropic directly for token usage.
08Terms of Service
The service
VibeSafe Builder lets you generate single-file web apps by describing them in chat, using either your own Anthropic API key or our Managed plan. The service is provided "as is" — generated code is created by an AI model and may contain bugs or be incomplete; review it before relying on it for anything important.
Acceptable use
- Don't use the service to generate malware, phishing pages, or anything designed to harm or deceive people.
- Don't attempt to bypass the security scan, spend cap, or publish gate.
- Don't publish apps containing other people's personal data without their consent.
- BYOK usage is subject to Anthropic's own usage policies, since you're calling their API directly with your key.
Ownership
You own the apps you generate. We claim no rights over your code — it's a portable HTML file you can download and take anywhere, by design.
Managed plan billing
The Managed plan is $15/month via Stripe subscription, covering up to $10/month of Anthropic usage at our cost. Usage beyond that pauses generation until your next billing cycle, or you can switch to your own API key at any time in Settings. Cancel anytime through the Stripe customer portal link included in your subscription confirmation email.
Termination
We may suspend access for abuse (attempts to bypass security gates, generate harmful content, or abuse the Managed plan's shared budget). You may stop using the service at any time; BYOK mode has nothing to cancel since there's no account.
Limitation of liability
SG Digital Ventures LLC is not liable for losses arising from code generated by the service, including bugs, security issues the scanner didn't catch, or Anthropic API costs incurred under your own key. The security scan is a best-effort first line of defense, not a substitute for a professional security review.
09Your rights
- Access & deletion (BYOK): your data is already local to your device — clear your browser's localStorage for vibesafebuilder.com to delete it entirely.
- Access & deletion (Managed): email contact@vibesafebuilder.com to request a copy of or delete your account data (email, subscription record, usage totals). We'll respond within 30 days.
- Published apps: email us with the link to have it taken down.
- Opt out of emails: Managed-plan account emails are transactional (billing, sign-in); we don't send marketing email at this time.
10Children's privacy (COPPA)
VibeSafe Builder is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we'll delete it.
11California & US state privacy rights
If you're a California resident, the CCPA/CPRA gives you the right to know, delete, and opt out of the "sale" of personal information. We don't sell personal information. Other US states with comparable privacy laws (Virginia, Colorado, Connecticut, Utah, and others) have similar rights — the same contact process in §9 applies regardless of state.
12Changes to this policy
We'll update the "Last updated" date at the top of this page when we make material changes, and for Managed-plan customers, notify by email if a change materially affects how we handle your data.
13Contact us
Questions about this policy, a data request, or a takedown request for a published app: contact@vibesafebuilder.com. For legal correspondence, contact SG Digital Ventures LLC via its Wyoming registered agent, or the same email address.