Privacy Policy

Last updated: 28 July 2026

Vibe Map is a creative briefing tool for video editors, music supervisors and composers. You draw an energy arc, describe a mood, and share a brief with the people you're working with. This page explains exactly what we collect, what we do with it, and — just as importantly — what we don't.

We've written this in plain language rather than legalese. If anything here is unclear, email lovebassjake@gmail.com and we'll explain it.


The short version

  • We collect your email address if you sign in, and whatever you put into the app.
  • We do not use analytics, advertising, or tracking of any kind. No Google Analytics, no pixels, no third-party trackers.
  • We have never sold, and will never sell, your data.
  • Anything you share by link is accessible to anyone who has that link. That is how the product is designed to work, and it's the most important thing on this page. See "How sharing works" below.
  • Your rough-cut video never leaves your computer. Only the thumbnail strip does.

What we collect

If you sign in. Your email address. We use magic links, so we never ask for or store a password.

What you create. Vibe maps, energy arcs, briefs, notes, scene markers, references, comments, and the names you give things. This is your work; we store it so the app can show it back to you and to the people you share it with.

What you upload. Audio and video demos, and storyboard or rough-cut files you drop onto the arc. See "Files you upload" for how each type is treated — they are not treated the same.

Basic technical data. Your browser sends an IP address with each request, which we use to apply rate limits and to keep the service from being abused. Our hosting providers keep standard server logs.

Preferences stored in your browser. Things like whether you last used Impulse Map or Music Mode, panel widths, whether you've dismissed a tip, and a display name you type when commenting as a guest. These live in your browser's local storage, not on our servers, and you can clear them by clearing your browser data.

What we don't collect

No analytics or product-usage tracking. No advertising identifiers. No cookies for marketing. No location data. No fingerprinting. The only cookies we set are the ones that keep you signed in.


Files you upload — this differs by type, deliberately

Rough-cut video: never uploaded. When you drop a rough cut on the arc, your browser decodes it locally and creates a small strip of thumbnails. Only that thumbnail strip is uploaded. The video file itself never leaves your computer.

Storyboards (PDF or image): read, then discarded. Pages are sent once to our AI provider so the shots and captions can be read, and are not stored by us afterwards. The thumbnail strip built from them is stored.

Audio and video demos: stored, and publicly accessible by URL. Demos you upload to a review room are stored in a public storage bucket. That means anyone who has the file's URL can play or download it, whether or not they have a link to the session. URLs are long and not listed anywhere, but they are not secret. Don't upload anything you couldn't tolerate being seen if the URL got out.


How sharing works — please read this one

Vibe Map is built around shareable links so that clients and composers don't need accounts.

Anyone who has a link to a session or a brief can open it. There is no password on that link. If you forward it, and they forward it, it keeps working. Delivery links land someone in a specific folder but do not prevent them from browsing the rest of that session's review room.

This is a deliberate design choice, and it's the right one for how editors actually work — but it means a link is a credential. Treat session and brief links the way you'd treat a Google Drive "anyone with the link" URL, because that is effectively what they are.


Who we share data with

We don't sell data and we don't share it for advertising. We use a small number of service providers to run the product:

ProviderWhat it handlesWhat it sees
SupabaseDatabase, sign-in, file storageYour account email, your saved work, your uploads
VercelHostingRequests to the site, standard server logs
AnthropicAI features (arc generation, shot-list and storyboard import)The text and images you submit to those features
ResendNotification emailsRecipient email addresses and message contents
Spotify, YouTube, DeezerReference track detailsThe reference links you paste

These providers process data on our behalf, in the United States and other countries where they operate. Using the product means your data is processed in those places.

About the AI features

When you use arc generation, shot-list import or storyboard import, the text or images you submit are sent to Anthropic's API to produce the result. Anthropic does not use data submitted through its API to train its models.

We don't send your uploaded audio, your demos, or your rough-cut video to any AI provider. Only what those features actually need: the prompt or brief text you typed, scene and note text, and storyboard page images.


How long we keep things

We keep your sessions and uploads until you delete them or ask us to. Deleting a session removes its scenes, comments and demos.

Anonymous sessions — ones created without signing in — are throwaway by nature and may be cleared out periodically. If you want work kept, sign in.


Your rights

Wherever you live, you can ask us to:

  • tell you what data we hold about you,
  • correct it,
  • delete your account and everything in it,
  • send you a copy of your work.

Email lovebassjake@gmail.com and we'll do it. We aim to respond within 30 days.

If you're in the UK or EU, the GDPR gives you these rights and the right to complain to your data protection authority. If you're in California, the CCPA gives you the right to know, delete, and not be discriminated against for asking — and note we don't sell personal information, so there's nothing to opt out of.

Children

Vibe Map isn't intended for anyone under 16, and we don't knowingly collect their data. If you believe a child has given us information, email us and we'll delete it.

Security

Access to data is controlled by database rules, uploads go to our storage provider, and traffic is encrypted in transit. No system is perfectly secure, and — as above — links are credentials, so the biggest practical risk is a link being forwarded further than you intended.

Changes

If we change this policy we'll update the date at the top. If a change materially affects how we handle your data, we'll say so on the site.

Contact

lovebassjake@gmail.com