Privacy Policy

1. Introduction

Vida Together LLC (“Vida Together,” “we,” “us,” or “our”) operates the following websites and services:

• www.vidatogether.com — our main company website
• store.vidatogether.com (Vida Prompt Vault) — digital product storefront
• studio.vidatogether.com (Vida Content Studio) — AI-powered content creation SaaS platform

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have regarding your data. We believe in radical transparency — you deserve to know exactly what happens with your information.

By using any of our websites or services, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use our services.

2. AI Disclosure

Vida Together is an AI-founded and AI-operated business. Our products are created and managed by an AI system (Vida), with human oversight provided by our co-founder, Corey Hathaway. This transparency is core to who we are. This disclosure is relevant to our privacy practices because:

• Our AI systems process your data solely to deliver the services you have requested.
• We use third-party AI APIs (specifically OpenAI) to power our content generation tools. Your data is processed through these APIs strictly to provide service functionality.
• No human or AI at Vida Together reviews your individual content unless you specifically request support assistance.

3. Information We Collect

3.1 Information You Provide Directly

Account and Contact Information

• Email address (collected during purchases via Stripe, newsletter signups via ConvertKit, or account creation)
• Name (if provided during purchase or signup)

Content and Usage Data (Vida Content Studio)

• Brand voice profiles you create (brand name, tone descriptors, target audience, sample content)
• Content you generate using our AI tools (input prompts, generated outputs, edited versions)
• Feedback and ratings you provide on generated content
• Content preferences and customization settings

Purchase Information

• Products purchased and transaction history
• Download activity (when and whether you accessed purchased files)

Communications

• Emails you send to us at hello@vidatogether.com
• Support requests and feedback you submit

3.2 Information Collected Automatically

Technical and Usage Data

• Browser type and version, operating system, device type
• IP address (anonymized for analytics)
• Pages visited, time spent on pages, navigation paths
• Referral source and session duration

Local Storage Data (Vida Content Studio)

We use browser localStorage to store your brand voice profiles, content history, and application preferences on your device. This data is stored locally on your browser and is not transmitted to our servers unless you are using our cloud-synced features via Supabase.

3.3 Information We Do NOT Collect

We do not collect sensitive personal information such as Social Security numbers, government IDs, financial account numbers, health information, biometric data, or precise geolocation. We do not track you across other websites or build advertising profiles.

4. How We Use Your Information

Service Delivery

• Processing and fulfilling your purchases (digital product delivery, subscription access)
• Generating AI-powered content based on your inputs and brand voice profiles
• Personalizing your experience within our tools
• Providing customer support and responding to inquiries

Service Improvement

• Understanding how our products are used so we can improve them
• Analyzing aggregate usage patterns to identify bugs and optimize performance
• Developing new features based on usage trends

Communication

• Sending purchase receipts and order confirmations
• Delivering your digital products and download links
• Sending email newsletters and product updates (only if you opted in via ConvertKit)
• Notifying you of important changes to our services or policies

Security and Compliance

• Preventing fraud and unauthorized access
• Complying with legal obligations
• Enforcing our Terms of Service

5. How We Share Your Information

We share limited information with the following third-party services, strictly as necessary to operate our business:

Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental regulation, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect our rights, prevent fraud, or protect the safety of users or the public.

6. Your Content and AI Training

7. Cookies and Local Storage

We primarily use browser localStorage rather than traditional cookies. localStorage keeps data on your device.

Vida Content Studio uses localStorage to store:

• Your brand voice profiles
• Content generation history
• Application preferences and settings
• Session state information

Our websites may use cookies for essential functionality (session management, security tokens) and analytics (anonymized usage data). We do not use third-party advertising cookies, cross-site tracking cookies, social media tracking pixels, or retargeting networks.

You can clear localStorage data at any time through your browser settings. Note that clearing localStorage for Vida Content Studio will remove your locally-stored brand voice profiles and content history.

8. Data Retention

• Purchase records: Retained for as long as necessary to fulfill legal and tax obligations (typically 7 years for financial records).
• Email addresses (ConvertKit): Retained until you unsubscribe or request deletion.
• Brand voice profiles and content history: Retained for as long as your account is active. localStorage data persists until you clear your browser data.
• Usage analytics: Retained in anonymized, aggregated form. Individual session data is not retained beyond 90 days.
• Support communications: Retained for up to 2 years to provide context for ongoing support.
• Download tokens (Vida Prompt Vault): HMAC-signed download tokens expire after 1 hour and are not stored.

Data Deletion

You may request deletion of your personal data at any time by emailing hello@vidatogether.com. Upon receiving a verified deletion request, we will delete your account and associated data within 30 days, remove your email from ConvertKit mailing lists, and delete your brand voice profiles and content history from Supabase. We may retain certain information as required by law (e.g., transaction records for tax purposes) and will inform you if any data must be retained and why.

9. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Secure payment processing: Payment data is handled entirely by Stripe, a PCI-DSS Level 1 certified payment processor. We never handle or store raw payment card data.
• Access controls: Access to user data is restricted to essential personnel and systems.
• Secure infrastructure: Our databases are hosted on Supabase (AWS), which implements enterprise-grade security including encryption at rest, network isolation, and regular security audits.
• HMAC-signed tokens: Digital product download links use cryptographically signed tokens with 1-hour expiration to prevent unauthorized access.

While we implement industry-standard security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

10. Your Rights

All Users

Regardless of where you live, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Opt-out: Unsubscribe from marketing emails at any time.
• Data portability: Request your data in a commonly used, machine-readable format.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to Know: Request disclosure of what personal information we collect, use, and share about you.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: We do not sell your personal information. There is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: Request correction of inaccurate personal information.

To exercise your California privacy rights, email us at hello@vidatogether.com with the subject line “CCPA Request.” We will verify your identity and respond within 45 days.

European Economic Area, UK, and Swiss Residents (GDPR)

While Vida Together LLC is a United States-based company, we respect the rights of individuals in the EEA, UK, and Switzerland under the GDPR and equivalent legislation. If you are located in these regions, you may exercise your rights to access, rectify, erase, restrict, or port your data by contacting us at hello@vidatogether.com. Your data is processed and stored in the United States. By using our services, you consent to the transfer of your data to the United States.

11. Third-Party Links

Our websites may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Children's Privacy

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@vidatogether.com, and we will promptly delete such information. Users between 13 and 18 should use our services only with the involvement and consent of a parent or legal guardian.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date, post a notice on our websites for at least 30 days, and for significant changes, notify registered users via email. Your continued use of our services after changes are posted constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy-related inquiries within 30 days. For CCPA requests, we will respond within 45 days as required by law.

15. Policy Summary

For your convenience, here is a plain-language summary of our key privacy commitments:

This summary is provided for convenience only and does not replace the full Privacy Policy above.