This is a courtesy translation. The GERMAN version of this page is the legally binding one.
1. Controller
GoVibe — sole proprietorship, Owner: Abbas Albukhari, Bebelstr. 9, 44623 Herne, Germany Phone: +49 163 515 9183 · Email: eng.abbas.it@gmail.com
2. Data we process
- Account data: email, name (optional), password (stored only as a hash) or Google sign-in
- Project data: projects, prompts, generated files and automatic restore points
- Usage and billing data: token consumption per model and project, purchase amounts, payment status and references
- Technical cookies only: session (login), language, theme — NO tracking, NO advertising or analytics cookies; hence no cookie banner is required (§ 25 (2) TDDDG)
3. Purposes and legal bases
Provision of the service and performance of the contract (Art. 6(1)(b) GDPR), billing and statutory retention duties (Art. 6(1)(c) GDPR), and legitimate interests in security and abuse prevention (Art. 6(1)(f) GDPR).
4. AI processing and third-country transfers
Prompts and project content are transmitted to AI providers (currently primarily DeepSeek; alternatively OpenAI or Anthropic) to generate websites. Transfers may occur to countries outside the EU; they are necessary to perform the requested service (Art. 49(1)(b) GDPR). DO NOT enter sensitive personal data in prompts — the platform is not intended for it.
5. Other recipients
- Hosting: IONOS SE, Germany (servers located in Germany)
- Google Ireland Ltd. — only when using Google sign-in
- Supabase — only if you connect your own Supabase database (its data processing is your responsibility as operator of your website)
- PayPal (Europe) — only for PayPal payments; bank-transfer details remain with the banks
- CDN services for fonts and editor components (fetched by your browser)
6. Websites published by users
For personal data that users process on their own created websites (e.g. contact forms with their own Supabase database), the respective user is the data controller. GoVibe merely provides the technical infrastructure.
7. Retention
Account and project data until account deletion; billing-relevant data per statutory periods (up to 10 years, §§ 147 AO, 257 HGB).
8. Your rights
Access, rectification, erasure, restriction, data portability, objection (Art. 15–21 GDPR) and complaint to a supervisory authority — for NRW: the Data Protection Commissioner of North Rhine-Westphalia.
Last updated: 4 July 2026