Privacy Policy

BEFOREVIBE is a product of AOKIMO, Inc., a Delaware corporation (“we”, “us”). AOKIMO, Inc. is the data controller responsible for the personal data described in this policy. Our contact details are in the box on the right and in the Contact section below.

We only collect what we need to answer you, run our workshop and events, and operate the app:

• Inquiry & notify form: your name, work email, and — if you provide them — your company, team size, and the message you send us.
• Account & sign-in: sign-in is handled by Clerk, our authentication provider. We store the verified email address from your Clerk account and the basic account info needed to keep you signed in.
• Your projects: the flows you build (blocks, connections, access choices) and the PRDs you generate are saved to your account so you can return to them. If you choose to publish a PRD to the public Explore, its content and your chosen display name become publicly visible — unless you publish anonymously, in which case your name is not shown.
• Profile & uploads: your public profile (display name, bio, picture) and any files you upload (avatars, logos, documents you feed into the builder) are stored with our file-storage provider.
• Technical data: basic logs and device/browser information needed to keep the service secure and working. We use local storage to remember your language preference.

We do not use advertising trackers and we do not sell your personal data.

Under the GDPR, we process your data on these bases:

• To reply to your inquiry and let you know about upcoming webinars — to take steps at your request and on the basis of our legitimate interests.
• To operate your account and save your projects — to provide the service you signed up for (contract).
• To keep the service secure, prevent abuse, and improve it — on the basis of our legitimate interests.
• To send service-related messages (a reply, or a webinar notification you asked for) — legitimate interests. We do not send marketing emails without your consent.

We share data only with the service providers (processors) that help us run BEFOREVIBE, under appropriate data-processing terms:

• Replit: application hosting, database, and file storage.
• Clerk: sign-in and account management.
• Anthropic and OpenAI: generating your AI PRD and processing the content you submit (text, voice, pages or documents you import). Your content is sent to these providers to produce the output; it is not used by us to train models.
• Stripe: payment processing when you buy image-credit packs. We never see or store your card details.
• Slack: we receive an internal notification when you send an inquiry or sign in for the first time; it includes your email and message so we can follow up.
• Our email provider: to correspond with you.

We may also disclose data where required by law, or to protect our rights and the safety of users.

The builder uses AI to turn the tool you sketch into a written PRD, and to generate images such as logos, screen previews and posters. The text you enter, the flow you design, and any pages or documents you import are sent to our AI providers to generate those outputs. Please do not enter sensitive personal data or confidential third-party information into the builder.

We keep inquiry and notify messages for as long as needed to follow up and meet our legal obligations, then delete or anonymise them. Account and project data is kept while your account is active; if you ask us to delete your account, we remove it, subject to any records we must legally retain.

If you are in the EU/EEA, you have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these, email us using the Contact section below — we will respond within the legal time limits.

You also have the right to lodge a complaint with your local data protection authority. In France this is the CNIL (www.cnil.fr).

We use industry-standard measures — encryption in transit, access controls, and trusted infrastructure providers — to protect your data. No system is perfectly secure, but we work to keep your information safe and to notify you if a breach affects you.

Some of our providers process data outside the EU/EEA (for example, in the United States). Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.

We may update this policy as the service evolves. When we make material changes, we will update the date at the top and, where appropriate, let you know.