Digital Vibes Design (“Digital Vibes”, “we”, “us”) is a web design and local marketing studio based in Salinas, California, operated by Roberto Cerda. This policy covers our website at digitalvibes.design, our online store at shop.digitalvibes.design, our on-site AI chat and voice assistant, and the forms and audits we run on those sites.
Reading this page, browsing the site, chatting with the assistant or buying a service means this policy applies to you. If you disagree with it, please don’t use the site or the store.
1. Information you give us
- Contact and lead details. Name, business name, email address, phone number, city and whatever you type into a message field, when you use a contact form, request an audit, take the Local SEO Scorecard, unlock a Google Business Profile report, or start an intake.
- Project intake information. Answers about your business, services, hours, service area, competitors, existing accounts, and any documents or images you upload so we can build or manage something for you.
- Conversations. Messages you send to the AI assistant, and, if you start voice mode, the audio you speak and its transcript. Conversation turns are stored so the assistant has context and so a human can follow up on a real lead.
- Order details. What you bought, the plan you chose, billing email, and billing address as required for tax. Card numbers never touch our servers. See section 4.
2. Information collected automatically
- Usage data. Pages viewed, referring page, approximate location derived from IP address, device, browser and language, timestamps, and which buttons or CTAs were clicked.
- A visitor identifier. A random ID stored in your browser that lets us tie a conversation to the pages that preceded it, and to remember your language preference. It is not tied to your name unless you give us your name.
- Cookies and similar storage. Set by us for the items above and by the analytics and advertising tools in section 4. Section 5 covers your choices.
- Server logs. Standard request logs kept by our hosting provider for security and debugging, including IP address.
3. Why we use it
- To answer your question, prepare a quote, run the audit you asked for, and follow up on it.
- To deliver, support and improve the services you bought.
- To take payment, renew a subscription, issue a receipt and handle refunds.
- To measure which pages and campaigns actually produce customers, and to show ads to people who visited the site.
- To keep the site working and secure: rate limiting, abuse prevention, debugging.
- To meet legal, tax and accounting obligations.
We do not use your information to make automated decisions that produce legal effects about you.
4. Who processes it on our behalf
We are a small studio and we use established vendors rather than building everything ourselves. Each one receives only what it needs to do its job, and is contractually a service provider, not an independent owner of your data.
| Provider | What it handles |
|---|---|
| Vercel | Website hosting, server logs, page performance and traffic analytics |
| Supabase | The database that stores leads, conversations, audits and intake answers |
| Shopify | The online store at shop.digitalvibes.design, including checkout, card payments, subscription billing and order records |
| Google (Analytics 4, Tag Manager, Ads) | Traffic measurement and ad measurement |
| Meta (Facebook Pixel) | Ad measurement and audiences for Facebook and Instagram |
| Anthropic | The language models behind the on-site assistant (Echo) |
| Inworld | Voice conversations with the on-site assistant |
| Voyage AI | Matches your question to our own help content so the assistant answers from it |
| Mem0 | Conversation memory, so the assistant remembers context between visits |
| Langfuse | Logging of assistant conversations so we can debug and improve them |
| GoHighLevel | Our CRM: leads, notes, appointments and follow-up messages |
| QuickBooks (Intuit) | Our accounting: customer records and sales receipts |
| Upstash | Rate limiting and caching |
| WorkOS | Sign-in for the website editor used from Claude and ChatGPT (section 13) |
| GitHub | Stores client website code and content, including edits made through the website editor |
Card numbers, CVV codes and full payment credentials are handled by Shopify and are never stored on our systems. We see the last four digits, the card brand and the result.
We may also disclose information when the law requires it, to enforce our terms, to protect someone’s safety, or to a buyer if the business is ever sold. If that last one ever happens, this policy travels with the data.
We do not sell your personal information for money. Our use of Google and Meta advertising tags may count as “sharing” for cross-context behavioral advertising under California law. See the CCPA Notice for what that means and how to opt out.
5. Your choices
- Cookies. Your browser can block or delete cookies. Blocking them may break the chat and the store cart.
- Google Analytics. Install the Google Analytics opt-out add-on.
- Meta ads. Adjust your Facebook ad preferences.
- Marketing email and SMS. Every marketing email has an unsubscribe link; reply STOP to any text.
- The assistant. Don’t type or say anything into chat you wouldn’t want stored: health details, government IDs, card numbers, or passwords. Ask for a call instead and we’ll take it verbally.
- Do Not Track. Browsers send this signal inconsistently and there is no agreed standard, so we do not respond to it. We do honor the requests described in the CCPA Notice.
6. How long we keep it
- Leads, conversations and audits: up to 3 years from your last interaction with us, then deleted or anonymized.
- Client project files and intake answers: for the life of the engagement plus 3 years.
- Orders, invoices and tax records: 7 years, because tax law requires it.
- Server and analytics logs: per the provider’s retention, typically 14 months or less.
- Website editor history (section 13): 2 years from the change, then deleted automatically.
You can ask us to delete sooner. See section 8.
7. Security
The site is served over TLS. The database uses row-level security so one visitor’s records aren’t reachable from another’s session. Admin surfaces are token-gated. Secrets live in environment variables, not in the codebase.
No system is perfectly secure, and we won’t pretend otherwise. If a breach ever affects your personal information, we will notify you as California law requires.
8. Your rights and how to use them
Depending on where you live, you may have the right to know what we hold, get a copy, correct it, delete it, opt out of sale or sharing, and not be discriminated against for asking. California residents: the CCPA Notice is the detailed version, with the categories and the request process.
To make a request, email hey@digitalvibes.design with “Privacy request” in the subject, or call (831) 214-4827. We answer within 45 days and will tell you if we need the one extension the law allows. We may need to verify who you are before we act, usually by confirming details we already have on file.
9. Children
The site and the store are for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child gave us information, email us and we’ll delete it.
10. Where your information is processed
We operate in the United States and our providers process data in the United States. If you use the site from outside the US, you are sending your information to the US, where privacy law differs from your home country’s.
11. Changes
When this policy changes we update the “Last updated” date at the top. Material changes get a notice on the site. The current version always lives at digitalvibes.design/privacy-policy.
12. Text messages (SMS and WhatsApp)
If you are a Digital Vibes client and you opt in, we send you text messages and WhatsApp messages from (831) 273-9779 about your own website: when updates we publish go live, when your tracked Google rankings improve, a monthly ranking summary, and replies to questions you send us. They are written by Echo, our AI assistant, on Roberto’s behalf. If you subscribe to the Monthly Website Report, we text you your reports, setup messages and ranking updates at the number you give at checkout.
- What we collect. Your mobile number, the date and the way you opted in, and the messages we exchange.
- Google Analytics and Search Console (Website Report). To prepare your report you give our service account read-only (Viewer / Restricted) access to your Google Analytics and Search Console. We read only United States visitor counts, pages, key events and Google search data for your report, never change anything, and stop when you remove the access.
- We do not share your mobile information. We do not sell, rent or share your mobile phone number or your text messaging opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. The sharing described elsewhere in this policy excludes text messaging originator opt-in data and consent; that information is not shared with any third party, except the providers that deliver the messages for us (Twilio for text messages and Meta for WhatsApp).
- Stopping messages. Reply STOP to any text message at any time and you will get no more. Reply HELP for help. Message and data rates may apply. Message frequency varies.
13. Website editor in Claude and ChatGPT
If you are a Digital Vibes client, you can edit your own website by connecting the Digital Vibes website editor (edit.digitalvibes.design) to Claude or ChatGPT. This section covers what that editor collects.
- Your sign-in. You sign in through WorkOS with the email address you gave us, using a one-time email code or a password. We receive your email address, whether it was verified, and a WorkOS user ID, and we use them only to confirm which website you’re allowed to edit.
- What the editor receives from Claude or ChatGPT. Only the specific requests the AI sends to make a change, such as “set Saturday hours to 10:00 to 14:00” or the new text for a section, plus a technical identifier for the app (Claude or ChatGPT). The editor does not receive the rest of your conversation. Claude and ChatGPT are separate services covered by Anthropic’s and OpenAI’s own privacy policies.
- Your website content. The business details, text and photos you ask to change become part of your website. They are saved as a private draft in your website’s code repository (GitHub), shown to you through a private preview link that expires after 48 hours, and published on your website (Vercel) only when you say so. Photos are resized and stored as part of your website; we don’t keep a separate copy of the original.
- Edit history. For each change we record what was changed, the values you asked for, when, from which app, and your user ID, so we can support you and undo mistakes. This history is kept for 2 years and then deleted automatically.
- Short-lived data. Photo upload links expire after 30 minutes and preview links after 48 hours.
- What we don’t do. We don’t use editor data for advertising, and we don’t sell or share it. Only your own website can be edited from your account.
To stop using the editor, remove the connector in Claude or ChatGPT. To have your sign-in and edit history deleted, email hey@digitalvibes.design (section 8). Your website’s published content stays on your site unless you ask us to change it.
14. Contact
Digital Vibes Design Salinas, California, United States Email: hey@digitalvibes.design Phone: (831) 214-4827
A postal address for formal notices is available on request.