Privacy Policy

Last updated: February 17, 2026

VibeReskin ("Service") is operated by Oleksandr Sitnikov ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

1. Data We Collect

2. Legal Basis for Processing (GDPR)

• Contract: Processing necessary to provide the Service you requested (Art. 6(1)(b))
• Legitimate interest: Analytics, security, fraud prevention (Art. 6(1)(f))
• Consent: Marketing communications, waitlist (Art. 6(1)(a))

3. Third-Party Data Processors

To provide the Service, your uploaded images are processed by the following third-party AI providers:

These providers process your data under their respective privacy policies and data processing agreements. Data transferred outside the EU is protected by Standard Contractual Clauses (SCCs) or equivalent safeguards.

4. Data Storage & Security

Your data is stored on servers located in Helsinki, Finland (EU), operated by Hetzner Online GmbH. We implement appropriate technical and organizational measures including:

• SSL/TLS encryption for all data in transit
• Access controls and authentication
• Regular security audits
• Firewall and intrusion prevention

5. Data Retention

• Account data: Retained while your account is active, deleted within 30 days of account deletion
• Uploaded assets: Retained while your account is active, deleted within 30 days of account deletion
• Generated outputs: Retained while your account is active, deleted within 30 days of account deletion
• Waitlist data: Retained until you request removal or the waitlist is closed
• Usage logs: Retained for 12 months for billing and analytics, then anonymized

6. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Data portability — Receive your data in a machine-readable format
• Restriction — Restrict processing of your data
• Objection — Object to processing based on legitimate interest
• Withdraw consent — At any time, without affecting prior processing

To exercise any of these rights, email us at alexan.sitnikov@gmail.com. We will respond within 30 days.

7. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking cookies or third-party analytics cookies. No cookie consent banner is required for essential-only cookies under GDPR.

8. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from minors. If we learn that we have collected data from a user under 18, we will delete it promptly.

9. International Transfers

Your data may be transferred to and processed in the United States by our AI providers (see Section 3). Such transfers are protected by Standard Contractual Clauses approved by the European Commission.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service. The "Last updated" date at the top indicates the most recent revision.

11. Contact & Data Protection

For any privacy-related questions or to exercise your rights:

Oleksandr Sitnikov
Email: alexan.sitnikov@gmail.com
Location: Kyiv region, Ukraine

If you are unsatisfied with our response, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence.