Privacy policy

1Who we are

Hangarvibe Inc. ("Hangarvibe", "we", "us", "our") operates the Hangarvibe desktop application, web application at hangarvibe.com, Hangar MCP infrastructure, and associated services (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect your personal information.

2Information we collect

Account information

When you create an account, we collect your email address, name, and a hashed password. If you sign in via an OAuth provider (GitHub, Google), we receive the email and display name associated with that provider account.

Usage data

We collect anonymous telemetry about feature usage, error events, and performance metrics. This data does not include the content of your agent prompts, responses, or project files. You can opt out of telemetry in Hangarvibe Settings → Privacy.

Billing data

Payment is processed by Paddle. We receive a payment confirmation token and your subscription plan — we never see or store your full card number.

Hangar MCP usage logs

When you use Hangar MCP endpoints, we log the timestamp, API key prefix, tool name, token count, and credit cost. We do not log the content of tool inputs or outputs.

3How we use your information

• Provision and maintain the Service, including billing and entitlements
• Send transactional emails (receipts, subscription changes, critical alerts)
• Detect and prevent fraud, abuse, and security incidents
• Improve the Service using aggregated, anonymized analytics
• Respond to support requests and legal obligations

We do not sell your personal information. We do not use your agent prompts, code, or project data to train AI models — yours or ours.

4Cookies and tracking

We use strictly necessary cookies for session management and authentication. We use analytics cookies (Plausible Analytics) that collect no personally identifiable information and are not shared with third parties. We do not use advertising cookies or cross-site tracking.

5Data sharing

We share your data only with:

• Supabase — database and auth infrastructure (EU and US regions)
• Paddle — payment processing
• Resend — transactional email delivery
• Law enforcement or government authorities when legally required

We do not share data with advertising networks, data brokers, or analytics resellers.

6Your rights

Depending on your location, you may have rights under GDPR, CCPA, or similar laws:

• Access or export a copy of your personal data
• Correct inaccurate data
• Delete your account and associated data
• Object to or restrict certain processing
• Opt out of the sale of personal information (we don't sell data, but the right applies)

To exercise any of these rights, email privacy@hangarvibe.com. We will respond within 30 days.

7Data retention

Account data is retained for as long as your account is active. When you delete your account, personal data is purged within 30 days. Usage logs are retained for 12 months for billing and abuse purposes, then deleted.

8Security

We use industry-standard encryption (TLS 1.3) in transit and AES-256 at rest. Access to production systems is restricted to authorized personnel with MFA. We conduct periodic security audits and respond to vulnerability disclosures at security@hangarvibe.com.

9Changes to this policy

We will notify you of material changes to this policy via email at least 14 days before the changes take effect. The effective date at the top of this page reflects the most recent revision.

10Contact

Hangarvibe Inc. · 2261 Market Street #4667 · San Francisco, CA 94114
privacy@hangarvibe.com