Privacy Policy

1. Who we are

This website, vibeinharmony.com ("VIBE", "we", "us"), is operated by MVM S.r.l., the data controller responsible for the personal data described in this policy. Registered office: Viale Marx 171/2, 00137 Roma (RM), Italy · VAT 16352381004 · REA RM-1651555.

For privacy requests, contact hello@vibeinharmony.com.

2. What data we collect

Depending on how you use VIBE, we may process:

• •Account and profile data: email address, authentication account identifier and profile fields you choose to provide in your VIBE ID.
• •Garment and ownership data: physical garment identifier, model, variant, serial, activation status, current ownership association, Digital Twin reference and essential activation or lifecycle events.
• •Order and fulfilment data: name, email address, shipping and billing details, phone number if provided, order reference and purchased items.
• •Withdrawal, return and consumer-rights data: your name, order or contract reference, acknowledgement email, withdrawal statement, goods concerned, receipt date if provided, transmission time and related support communications.
• •Payment-related data: payments are processed by Stripe. VIBE does not store your full payment card number.
• •Technical data: device and browser information, IP address, pages viewed and site interactions. Non-essential analytics or marketing measurement is subject to your cookie preferences.
• •Communications: messages and support requests you send to us.
• •Newsletter data: email address, consent version, consent source and dates associated with subscription, confirmation or unsubscribe actions.

3. How we use your data

• •To create and secure your VIBE ID and provide account access, password recovery and profile functions.
• •To verify a VIBE garment credential, associate an eligible garment with your account, prevent duplicate or unauthorized claims and show your private My Gear and Digital Twin records.
• •To process, fulfil and ship orders and provide related service communications.
• •To receive and administer withdrawal or return requests, send the required acknowledgement of an online withdrawal and handle related consumer-law obligations.
• •To provide support, investigate activation issues and protect the integrity of garment credentials and ownership records.
• •To send newsletter or product updates when you have completed the required subscription consent process.
• •To measure and improve the website and marketing only when the relevant non-essential cookie preference has been granted.
• •To maintain security, prevent abuse and comply with applicable legal, tax, accounting and consumer-protection obligations.

4. Legal bases under the GDPR

The legal basis depends on the specific processing activity. It may include:

• •Performance of a contract or steps requested before a contract, including account, order, fulfilment, returns and core garment activation functions where applicable.
• •Consent for optional analytics, advertising measurement and marketing communications where consent is required. Consent can be withdrawn for future processing.
• •Compliance with a legal obligation, including applicable tax, accounting and consumer-law duties such as receiving and acknowledging a statutory withdrawal where required.
• •Legitimate interests, where applicable and balanced against your rights, including service security, fraud prevention and protection of the product activation system.

5. VIBE ID, My Gear and Digital Twin

The customer ecosystem links your authenticated VIBE ID to eligible physical garments that you activate. The backend validates the garment credential and records the current ownership association. A second account is not allowed to claim a garment that already has an active owner unless a separate authorized ownership process applies.

Digital Twins are private by default. Public activation credentials do not provide direct access to private owner data. Operational administrators may inspect non-secret garment state for support and security, and may block or restore an activation credential without deleting the ownership record.

The VIBE ID customer MVP is intended for adults aged 18 or over. A minors-specific ecosystem is not part of this release.

6. Cookies and tracking preferences

Essential technologies support security, authentication, cart, checkout and core site functions and cannot be switched off through the VIBE preference panel. Optional technologies are separated into Analytics and Marketing categories and remain disabled unless you select the relevant preference.

• •Analytics: Google Analytics 4 and Microsoft Clarity, used to understand site usage and improve the experience when Analytics is enabled.
• •Marketing: Meta Pixel, used for advertising measurement and related marketing interactions when Marketing is enabled.

You can reject non-essential technologies, accept all, or choose categories separately. After making a choice, use the Cookie settings control on the site to change or withdraw optional consent at any time.

7. Service providers and recipients

We use providers that help operate the website, customer ecosystem, payments, communications and fulfilment. Depending on the service, they may act as processors or independent controllers.

• •Supabase for the VIBE account, Digital Spine, garment activation and related database services. The current VIBE Supabase project is hosted in the EU region.
• •Vercel for website and application hosting.
• •Stripe for payment processing.
• •Resend for transactional email delivery, online-withdrawal acknowledgements and newsletter-related email operations.
• •Shipping and logistics providers where required to fulfil an order or process an authorised return.
• •Google and Microsoft for optional analytics when Analytics consent is enabled.
• •Meta for optional advertising measurement when Marketing consent is enabled.

We do not sell your personal data.

8. International processing

Some service providers may process personal data outside the European Economic Area. Where international transfers require safeguards under applicable data protection law, the relevant transfer mechanism and safeguards depend on the provider, destination and processing arrangement in use.

9. Retention and account closure

We retain personal data only for as long as necessary for the purpose for which it is processed and for any additional period required by applicable legal, tax, accounting, security, consumer-protection or dispute-resolution obligations. Retention periods therefore vary by data category and purpose.

Active account and garment ownership information may be retained while needed to provide the VIBE customer service and maintain the integrity of product ownership records. Withdrawal, return and related correspondence may be retained as necessary to administer the request and demonstrate compliance with consumer-law obligations. Newsletter data is retained while the subscription is active, with limited evidence retained where necessary to honour an unsubscribe request or demonstrate the consent history.

For this MVP, VIBE ID/community account closure or deactivation is support-managed rather than self-service. You may request closure or deactivation through VIBE support. Personal data that can lawfully be erased will be handled under the applicable data-protection rules, while records that must be retained for ownership integrity, transactions, security, fraud prevention, tax/accounting or legal claims may remain for the required period.

10. Your data protection rights

Depending on the circumstances and applicable law, you may have rights including access, rectification, erasure, restriction, objection and data portability. Where processing relies on consent, you may withdraw that consent for future processing. You may also lodge a complaint with a competent data protection supervisory authority.

To exercise a right or ask a privacy question, email hello@vibeinharmony.com. Some requests may be subject to legal exceptions or retention requirements.

11. Security and activation support

Do not send VIBE your password, password recovery link or garment activation credential. For an activation issue, use the physical serial or order reference where available. We use access controls, private-by-default Digital Twins and backend ownership validation as part of the current customer ecosystem security model.

12. Changes to this policy

We may update this policy as VIBE services, providers or legal requirements change. The date at the top identifies the current published version.

13. Contact

MVM S.r.l. · Viale Marx 171/2, 00137 Roma (RM), Italy · VAT 16352381004 · REA RM-1651555 · hello@vibeinharmony.com