What we keep, and why.

01Who we are

Vibe Living runs Trails, Corps and Stays from Bengaluru, India, through the website vibeliving.in and the member portal at member.vibeliving.in. In this policy, “we” and “us” mean Vibe Living, and “you” means anyone who uses either of them.

We decide what personal data is collected and why, which makes us the Data Fiduciary under the Digital Personal Data Protection Act, 2023. For anything about your data, write to mumin.bhat@vibeliving.in.

02What we collect

Only what we need to read your request, run what you booked, and keep you safe while you are with us.

• When you make a request for a chapter: your name, email, phone number, city, age band, gender, a sense of your fitness, and your answers to our questions, including the line you love. We ask your gender for one reason: to balance every room by hand.
• When you hold or pay for a seat: the amount, the date and the payment reference. Your card, UPI or bank details go to PayU, who processes the payment (Razorpay processed earlier ones). They never reach us.
• In the member portal: the code name you choose, your member number, sizes for anything we make for you, an optional photo for your pass, an address to send it to, and an emergency contact.
• Things you choose to tell us about your health, diet or access needs. We use these only to keep you safe and fed, and only the people who need them to do that see them.
• When you write to us, request a date for your team, or leave an email for something not yet open: what you write, and the details you give us.
• Automatically, when you use the website: your device, browser, pages visited, the link or ad that brought you here, and an approximate location from your IP address. See the section on measurement below.

We do not ask for your income, your looks or your follower count. We do not need your government ID unless a place we take you to requires it by law, and if it does, we will tell you before we ask.

03What we do with it

• Read your request and write back to you. A person does this, not a system.
• Build the rooms: decide who is in which batch and which unit, balanced by hand.
• Take payments, send receipts, and give refunds.
• Run the chapter: share with the crew and the places we stay what they need to host you.
• Keep you safe: emergency contacts, health notes you shared, and records of any incident.
• Tell you about a series or a door you asked to hear about. Every such email can be stopped with one reply.
• Understand which ads and pages bring people to us, so we spend less to find the right ones.
• Meet our obligations under Indian law, including tax and accounting rules, and protect ourselves against fraud and misuse.

We rely on your consent, which you give when you submit a form or pay, and on the legitimate uses the law allows: performing what you asked us to do, meeting legal obligations, and responding to emergencies. You can withdraw consent at any time (see Your rights). Withdrawing it does not undo what was done before, and some things, like a booking you paid for, cannot run without the data behind them.

04Inside a chapter

Inside, you are your code name. Other members are not told your real name, your job, your city or anything else you gave us. What you tell them yourself is yours to tell.

We take photographs and film during chapters. A photograph in which you can be recognised is never published without your consent. We may publish ones in which you cannot be, and we credit people by code name, never by real name.

05Measurement, cookies and ads

The website uses a few tools that set cookies or similar storage in your browser:

• Meta Pixel and Meta Conversions API: tell Meta when someone who saw our ads visits, makes a request or pays, so our ads reach people like them. We send your email and phone number to Meta only in hashed form, which Meta uses to match, not to read.
• Google Analytics: counts visits and pages, in aggregate.
• Microsoft Clarity: records how pages are used (scrolls, clicks, where people stop) so we can fix what confuses them. It is set to hide what you type into forms.
• Our own storage: remembers which link or ad brought you here, so a request can be matched to it.

You can block or clear cookies in your browser, and you can turn off ad personalisation in your Meta and Google settings. The site still works without them.

06Who else sees it

We never sell your data, and we never let anyone use it for their own marketing. We share it only with the people and services that help us do what you asked:

• PayU, for payments, and Razorpay, for payments made before PayU.
• Supabase, which hosts our database, and Vercel, which hosts the website.
• Resend, which delivers our emails.
• Meta, Google and Microsoft, for the measurement described above.
• Sentry, which records errors on the site so we can fix them. An error report can include your browser and IP address.
• The crew, guides, drivers and places we work with on a chapter, who receive only what they need: usually your code name, dietary needs and, in an emergency, your emergency contact.
• Authorities, when the law requires it, or when it is needed to protect someone’s life or safety.
• A buyer or successor, if Vibe Living is ever merged or sold, under the same promises as this policy.

Some of these services store data on servers outside India. When they do, they protect it under their own contracts and the law that applies to them, and we only use services that let us honour this policy.

07How long we keep it

• A request that did not become a booking, a letter, or an email left for something not yet open: up to 24 months after we last heard from you, then deleted.
• Bookings, payments and refunds: as long as Indian tax and accounting law requires, currently up to eight years.
• Your member record, code name and member number: for as long as you are a member. One record, for life, unless you ask us to delete it.
• Health notes and emergency contacts: until the chapter ends and any incident from it is closed, then deleted.
• Measurement data: as long as Meta, Google and Microsoft keep it under their own policies.

08Your rights

Write to mumin.bhat@vibeliving.in and a person will act on any of these:

• See what we hold about you, and who we have shared it with.
• Correct anything that is wrong or out of date.
• Delete it. We will, except for what the law makes us keep, such as payment records.
• Withdraw consent, or stop any email from us.
• Nominate someone to exercise these rights for you if you die or cannot do so yourself.
• Complain. We acknowledge a complaint within 48 hours and resolve it within 30 days. If you are not satisfied, you may take it to the Data Protection Board of India.

We may ask you to confirm it is you before we act, so nobody else can change or remove your data.

09Keeping it safe

Data is encrypted in transit and at rest, and only the people who need it to do their work can open it. No system is perfectly secure. If something goes wrong that affects your data, we will tell you and the Data Protection Board as the law requires, and say what we are doing about it.

10Age

Everything we run is for adults, 18 and over. We do not knowingly collect data from anyone younger. If you think someone under 18 has given us their details, tell us and we will delete them.

11Changes

When this policy changes, the date at the top changes with it. If a change affects how we use data you have already given us, we will write to you before it takes effect.

12Grievances and contact

Vibe Living, Bengaluru, Karnataka, India. Grievance officer: Mumin Bhat, mumin.bhat@vibeliving.in. A person reads every message and writes back within 6 business hours. This policy is governed by the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.