Privacy Policy

Last updated: 22 July 2026

VibeSchema (vibe-schema.com, contact: contact@vibe-schema.com) is a database schema design tool. This policy explains what we store and why.

What we collect

• Account data: your email address and a password (stored as a secure hash by our authentication provider). We use these to sign you in and to send account emails such as confirmations and password resets.
• Your content: the schemas you create, including code, layouts, snapshots, and your AI chat history. Your content is encrypted before it ever reaches the database, with keys we hold separately, so the database host cannot read it. Our systems decrypt it only to operate the service for you. We do not access your content beyond that, except with your permission or where the law requires it.
• Share links: creating a share link stores a copy of the shared schema. Anyone with the link can view it. Share links and their data are automatically deleted from our servers after the lifetime shown when the link is created.
• Technical data: IP addresses, used to prevent abuse and as part of usage analytics, and basic usage analytics (feature usage and chat prompts). Analytics never include your schema content.

We process this data to provide the service (performance of our contract with you), to keep the service secure and improve it (legitimate interest), and to meet legal obligations.

Security

We protect your data with encryption and access controls, but no online service can guarantee perfect security.

AI features

When you use the AI chat, your messages and the relevant schema are sent to Anthropic via their standard API to generate the response.

Schemas entered in our free tools that work without an account, such as the AI ER diagram generator, are processed transiently and never stored on our servers.

Who else processes data

We use service providers for hosting, database and authentication, email delivery, and analytics. Some of these providers process data in the United States under standard EU data transfer safeguards. We never sell your data.

If VibeSchema is ever involved in a merger or acquisition, your data may be transferred as part of that transaction; this policy would continue to apply to it and we would notify you of any material change.

Cookies

VibeSchema currently works without tracking cookies. Your session and preferences are kept in your browser’s local storage (functional only). If we ever introduce cookies that require consent, we will ask for it in the app first.

Children

VibeSchema is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.

Retention and deletion

Your content is kept as long as your account exists. Deleting your account permanently deletes all your projects, schemas, and chat history. Share links expire and are deleted after their stated lifetime.

Your rights

You can access and export your data from within the app, and delete your account at any time. Under the GDPR you can also request access, correction, or deletion by emailing us, and you have the right to lodge a complaint with your data protection authority.

Changes

If we make material changes to this policy, we will notify you in the app or by email and update the date above.