Privacy Policy

This Privacy Policy applies to information collected through VibeLux's software platform, website, and related services (collectively, the "Services").

By using our Services, you consent to the data practices described in this policy. If you do not agree with our privacy practices, please do not use our Services.

2.1 Information You Provide

• Account Information: Name, email, company name, phone number
• Facility Data: Location, size, room configurations, equipment details
• Cultivation Data: Crop types, growth stages, environmental parameters
• Business Information: License numbers, compliance documentation
• Payment Information: Processed securely through third-party providers

2.2 Automatically Collected Information

• Sensor Data: Temperature, humidity, CO2, light levels, equipment status
• Usage Data: Feature usage, system performance, error logs
• Device Information: IP address, browser type, operating system
• Energy Data: Power consumption, equipment runtime, efficiency metrics

2.3 Third-Party Integrations

When you connect third-party equipment or services (climate computers, IoT devices, METRC), we may receive additional data as authorized by you.

3.1 Service Provision

• Optimize facility operations and energy efficiency
• Calculate and verify revenue sharing amounts
• Provide predictive analytics and recommendations
• Maintain and improve system performance
• Send alerts and notifications about facility conditions

3.2 Analytics & Improvement

• Analyze usage patterns to improve features
• Develop machine learning models for optimization
• Create aggregated industry benchmarks (anonymized)
• Research and development of new features

3.3 Communication

• Service updates and announcements
• Technical support and customer service
• Marketing communications (with consent)
• Legal notices and policy updates

VibeLux uses advanced AI technologies, including Claude by Anthropic, to provide intelligent cultivation assistance and predictive analytics.

4.1 How AI Processes Your Data

• Natural Language Processing: Your questions and commands are processed by Claude AI to understand intent and provide relevant responses
• Pattern Recognition: Environmental and cultivation data is analyzed to identify trends, anomalies, and optimization opportunities
• Predictive Modeling: Historical data is used to predict future outcomes like yields, energy usage, and potential issues
• Research Verification: AI cross-references recommendations with scientific literature from multiple research databases

4.2 AI Training & Improvement

• We do not train AI models on your conversations or facility data
• AI features are powered by third-party models (see 4.3); our AI providers do not use API data to train their models under their commercial terms
• Your specific facility data is never shared with other customers

4.3 Third-Party AI Services

We use the following third-party AI providers:

• Anthropic (Claude): For natural language understanding and generation. View Anthropic's Privacy Policy
• Research APIs: For accessing scientific literature (ResearchGate, arXiv, bioRxiv, PubMed Central)

These providers process data according to their own privacy policies and data retention practices. Data sent to AI providers is encrypted in transit.

4.4 AI Data Retention

• Records of AI requests (token counts and a short excerpt of your request) are retained as billing and abuse-prevention records
• For the facility data Q&A feature, your question and the AI's response are stored with your account until deleted on request
• Prompts and responses are processed by our AI providers as subprocessors and handled under their API data-retention terms
• You can request deletion of your AI interaction history at any time by emailing privacy@vibelux.ai

4.5 AI Privacy Controls

• AI features only run when you invoke them — no AI processing happens on your data in the background
• You can request deletion of your stored AI interactions (see 4.4)
• In-product controls for reviewing and deleting AI history are planned; until they ship, deletion is handled via the request process above

We do not sell, rent, or trade your personal information to third parties.

5.1 We May Share Information With:

• Service Providers: Third parties who help us operate our Services (hosting, analytics, payment processing)
• Equipment Partners: When you authorize integrations with climate control or IoT systems
• Legal Compliance: When required by law, subpoena, or court order
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: With your explicit consent for specific purposes

5.2 Aggregated Data

We may share aggregated, anonymized data that cannot identify you or your facility for industry research, benchmarking, or marketing purposes.

6.1 Compliance & Regulatory

• Track-and-Trace: Data shared with state systems (METRC, BioTrack) as required by law
• Retention Periods: We retain cultivation data as required by state regulations (typically 3-7 years)
• Audit Trails: All data modifications are logged for compliance purposes
• Access Logs: We maintain records of who accesses cultivation data

6.2 Law Enforcement

We may disclose information to law enforcement when:

• Required by valid legal process
• Necessary to protect safety or prevent crime
• Related to violations of our Terms of Service

We will attempt to notify you of law enforcement requests unless prohibited by law or court order.

6.3 Data Location

All cultivation data is stored on servers located within the United States. We do not transfer cannabis-related data internationally.

We implement industry-standard security measures to protect your information:

• Encryption: Data encrypted in transit (TLS) and at rest (AES-256)
• Access Controls: Role-based permissions and multi-factor authentication
• Infrastructure: Secure cloud hosting with SOC 2 certified providers
• Monitoring: 24/7 security monitoring and intrusion detection
• Auditing: Regular security audits and penetration testing
• Incident Response: Established procedures for security incidents

While we strive to protect your information, no method of transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials.

8.1 Access & Correction

You can access and update your account information through the VibeLux dashboard or by contacting support.

8.2 Data Export

You can export your cultivation data at any time through our API or data export tools.

8.3 Deletion

You may request deletion of your account and associated data, subject to:

• Legal retention requirements (compliance records)
• Outstanding contractual obligations
• Legitimate business purposes (fraud prevention)

8.4 Marketing Communications

You can opt-out of marketing emails using the unsubscribe link or through account settings. Service-related communications cannot be opted out of while using our Services.

8.5 California Privacy Rights

California residents have additional rights under CCPA, including:

• Right to know what information we collect
• Right to delete personal information
• Right to opt-out of data sales (we do not sell data)
• Right to non-discrimination

9.1 Children's Privacy

Our Services are not intended for individuals under 21 years of age. We do not knowingly collect information from minors.

9.2 International Users

Our Services are intended for use in jurisdictions where cannabis cultivation is legal. By using our Services from outside the United States, you consent to the transfer and processing of your data in the United States.

9.3 Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Services. Continued use after changes constitutes acceptance of the updated policy.

9.4 Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.