Privacy Policy

This policy explains what information FameVibe collects when you visit the website, create an account, or place an order. It also covers why we collect each piece, who we share it with, how long we keep it, and how you can ask us to delete it. If anything here is unclear, please write to info@famevibe.io and we will help.

1. What We Collect

The exact information we hold depends on which features you use.

• When you place an order: your email address, the social media profile or post URL you submitted, the order amount, and a record of the order itself (order number, status, refill history).
• When you create an account: your email address and a hashed password. Passwords are stored using bcrypt and are never visible to us in plain form.
• When you sign in with Google: we receive your email address and your given name from Google as part of the OAuth response. We do not request or store any other Google profile data.
• When you contact support: the content of your message, the email address you provided, and the support ticket history connected to your email.
• When you visit the site: your IP address (used for rate limiting and abuse prevention), the country code that Vercel infers from the IP (used to show prices in your local currency where we support one), and a session cookie if you are logged in.
• Payment data: we never see or store full card numbers. Payment processors (Marx IPG and Heleket) handle card and crypto details directly. We only retain a transaction reference and the amount charged so we can match payments to orders and process refunds.
• Wallet activity: if you use FC Coins, we keep a ledger of credits earned and spent, the balance, and the related order numbers.

2. Why We Use Your Information

We use the information above only for the following reasons:

• To deliver the service you ordered and notify you when it is complete.
• To answer your support questions and process refunds.
• To prevent fraud, abuse, and brute-force login attempts on your account.
• To show prices in your local currency where we support one.
• To meet our legal and tax obligations where they apply.

We do not sell your personal information. We do not use it to build advertising profiles, and we do not share it with marketing data brokers.

3. Cookies and Local Storage

We use a small number of cookies. The cookies in this section are strictly functional — they are needed for the site to work. Optional analytics and advertising cookies are covered separately in the next section and only fire after you accept them in the cookie banner.

• Sign-in cookies. Keep you logged in to your account or admin area while you use the site. HTTP-only and expire after seven days of inactivity.
• Country and currency. The first time you visit, we save the country we detect from your IP so the storefront can show prices in your local currency. Refreshed every 24 hours.
• Sign-in security. Short-lived cookies set during a Google sign-in to prevent cross-site request forgery and to remember which page to send you back to. They are deleted automatically within a few minutes.
• Local storage. We cache the live exchange rate in your browser so prices do not flash when the page loads. You can clear browser storage at any time without affecting your account.

4. Analytics and Marketing Pixels

We use a small number of analytics and advertising tools to understand how the site performs and to measure the effectiveness of our marketing. All of them are gated behind your consent choice in the cookie banner, using Google Consent Mode v2 — nothing personally identifying is sent until you click Accept.

• Google Analytics. Used for aggregated traffic reporting — which pages people visit, how long they stay, which countries they come from. IP addresses are truncated by Google before storage. Before consent, Google Analytics runs in cookieless "ping" mode and no identifiers are written. You can opt out at any time at tools.google.com/dlpage/gaoptout.
• Google Ads conversion tracking. Used to measure whether visitors who arrived from a Google Ads click ultimately placed an order. Only an anonymous event with the order value is sent to Google. No personally identifying information is transmitted. You can manage Google ad personalisation at myadcenter.google.com.
• Meta (Facebook) Pixel. Used to measure conversions for ads we run on Facebook and Instagram. The pixel boots in consent-revoked mode and only begins reporting after you accept cookies. You can manage Meta ad preferences at facebook.com/adpreferences/ad_settings.

You can change your cookie choice at any time by clearing your browser's site data for famevibe.io, which causes the banner to reappear on your next visit. Refusing analytics cookies does not break any part of the storefront — orders, account, refunds, and support all work the same way.

5. We Never Ask for Your Password

We never ask for the password to your social media account, your two-factor authentication codes, or your account recovery information. The only password we collect is the password you set on your FameVibe account, and that is stored only as a hash. If anyone claiming to be FameVibe support asks for your social media login, they are not us. Please report it to us right away.

6. Service Providers We Share Data With

We use a small set of trusted vendors to actually run the service. They are bound by contract to handle the data we send them only for the purposes described below and in line with applicable privacy law.

• Hosting and infrastructure providers. Run the website, the database, file storage, and the proxy layer that talks to our fulfilment partners. They hold whatever account and order data is needed to serve the site.
• Payment processors. Card and cryptocurrency transactions are processed by third-party PCI-compliant processors. They receive the payment details directly through their own secure gateway. We only ever see a transaction reference and the amount, never your full card number.
• Email delivery provider. Sends transactional emails on our behalf — order confirmations, support replies, password resets, refund notices.
• Profile verification service. At checkout we send the platform name and the public handle or post URL you supplied to a third-party verification service so we can confirm the account exists before accepting your order. No personal details about you are sent.
• Fulfilment partners. When you place an order we send the link, the quantity, and the package identifier to the upstream fulfilment partner so they can deliver. We never send your email, billing details, or name to them.
• Google — only if you choose "Continue with Google" at sign-in. Google returns the email address and given name on your account.
• Trustpilot — if you receive a review invitation from Trustpilot after an order, it is because our order email is BCC'd to Trustpilot to trigger that request. You can opt out of Trustpilot emails directly through the link in their message.

7. International Transfers

The vendors above store data in multiple regions, primarily in the United States and the European Union. By using FameVibe you agree that the small amount of data described in this policy may be transferred to and processed in those regions. Each vendor has its own safeguards in place for these transfers.

8. Data Retention

Order records are kept for at least twelve months so we can answer support and refund questions, and longer when local tax law requires. Account profiles are kept while the account is active and for thirty days after you ask us to delete it (in case you change your mind). Payment-processor receipts are kept under the processor's own retention rules. Server logs are kept for thirty days.

9. Your Rights

You can ask us at any time to:

• Send you a copy of the personal information we hold about you.
• Correct anything that is wrong or out of date.
• Delete your account and the associated data, subject to legal retention rules.
• Stop sending you transactional emails (note that this also disables order updates).
• Object to any processing you believe is unfair, or restrict it while we look into your request.

Email info@famevibe.io from the address on the account, or open a ticket through the contact page. We aim to respond within seven days.

10. Children

FameVibe is not intended for anyone under the age of eighteen. We do not knowingly collect personal information from children. If you believe a child has used the service, please tell us so we can remove the data.

11. Changes to This Policy

We update this policy when we add new features or work with new vendors. The date at the top of the page changes whenever the policy itself does. If a change materially affects how we use your data, we will give reasonable notice on the site or by email before it takes effect.

12. Contact

Questions, requests, or complaints about this policy go to info@famevibe.io. Please mention "Privacy" in the subject so we route it correctly.