Information We Collect
At Viblooop, data privacy is an engineering priority. We collect only the data necessary to provide personalized event discovery, secure authentication, and trustworthy community connections.
- Account & Identity Data: Your name, email address, profile avatar, self-selected vibe interests, and verified phone numbers for one-time passcode (OTP) security.
- Activity & Ticketing Records: Events you bookmark, RSVP history, ticket QR verification codes, past attendance logs, and host ratings.
- Communications Data: In-app messages exchanged within event group chats and direct inquiries with hosts (stored encrypted in transit and at rest).
- Technical Telemetry: Device architecture, IP address, operating system, crash logs, and browser diagnostics used for platform stability and fraud detection.
How We Use Your Information
We treat your data with strict stewardship. We never sell your personal information to third-party data brokers or advertising networks.
We process your data solely for:
- Delivering tailored event recommendations matching your music, culture, and lifestyle tags.
- Facilitating real-time socket communication for instant chat notifications and updates.
- Maintaining community safety through automated keyword detection for harassment or illegal drug solicitation.
- Generating trust verification badges and anti-bot validation.
Geolocation Privacy & Discovery Controls
Viblooop helps you discover what’s happening in your city. When you enable location permissions:
- Proximity Calculation: We calculate approximate distance (e.g., “2.4 km away”) to sort relevant gatherings near your neighborhood.
- Privacy Radius: We do not broadcast your live pinpoint coordinates to other attendees. Your profile displays only the general neighborhood or city tag you choose to reveal.
- Location Revocation: You can revoke device location access at any moment via your browser or smartphone settings; Viblooop will gracefully fall back to city-level search.
Third-Party Service Providers & Subprocessors
To deliver seamless performance, we partner with vetted infrastructure providers bound by strict confidentiality and data-protection covenants:
Payment Processors
PCI-DSS certified payment gateways (e.g. Stripe) manage card authorizations and payouts.
Cloud Infrastructure
Encrypted cloud compute and database clusters located in high-security regional data centers.
Transactional Messaging
Automated email and SMS gateways for one-time passwords, ticket confirmations, and emergency updates.
Mapping Services
Geocoding APIs to convert venue addresses into interactive map overlays without tracking users.
Your Rights, Data Portability & Account Deletion
Under global privacy frameworks including GDPR, CCPA, and CPRA, you possess comprehensive rights over your personal data:
- Right to Access: Request a full, machine-readable export of all profile data, attended events, and purchase history.
- Right to Rectification: Edit, modify, or correct your personal information directly within your Profile Settings at any time.
- Right to Erasure (“Right to be Forgotten”): Request permanent account deletion. Upon verification, all identifiable profile records, messages, and wishlists will be purged within 30 days.
- Right to Opt-Out: Easily manage your email digest preferences, push notifications, and marketing communications through account settings.
Data Security Architecture & Retention
We employ defense-in-depth architectural security protocols:
- 256-bit TLS encryption for all data transmitted between your browser and our server clusters.
- Encrypted data storage at rest with strictly restricted role-based employee access controls.
- Real-time automated anomaly detection and rate-limiting to prevent unauthorized credential stuffing.
- Retention of transactional records strictly as mandated by financial, tax, and anti-money laundering regulations.
Data Protection Officer & Privacy Inquiries
For privacy queries, GDPR/CCPA data export requests, or complaints regarding our data handling, contact our dedicated privacy team: