Privacy
Last updated: August 20, 2026
Vibe & Sell
Last updated: August 20, 2026
This explains what data of yours we keep, what for, where it lives, how long, and how you delete it. It's written so you can understand it without a lawyer next to you. If something isn't clear, write to us and we'll explain it.
Email for anything about your data: hello@vibeandsell.club. No form, no ticket. You write and a person answers.
1. Who's responsible for your data
Isabella Fernández, an individual, with a professional address in Madrid, Spain. Email: hello@vibeandsell.club Postal address: 1801 Coffeen Avenue, Suite 1200, Sheridan, WY 82801, United States
Vibe & Sell is her brand. There's no company behind it, it's her.
Because she's established in the European Union, the European General Data Protection Regulation (GDPR) applies to all of your data, wherever you live. That works in your favor: it's the strictest standard there is. And if you live in California, your specific rights are further down.
2. What data we collect and why
If you're on the waitlist
| What we keep | What for | Legal basis |
|---|---|---|
| Your name | To write to you by your name | Your consent |
| Your email | To tell you when spots open and to send you the launch emails | Your consent |
| Your country | To know what times work for you and what language to write in | Your consent |
| The date and time you signed up | So we can prove when you gave permission | Legal obligation (GDPR requires us to be able to prove it) |
| The exact text of the box you accepted | Same | Legal obligation |
| Where you came from (which link or which network) | To know what's working | Our legitimate interest in understanding which channel brings people |
If you buy the challenge
On top of the above:
| What we keep | What for | Legal basis |
|---|---|---|
| That you bought, when and for how much | To give you your spot and to invoice | Performing our contract with you |
| The billing data the law requires | To comply with the Spanish tax authority | Legal obligation |
| Your entry form answers (time zone, state, what time of day you'll work, your idea's category, your level with tools, your audience today) | To build your pod with people who fit you | Performing our contract with you |
| Your daily check-ins and whether they're posted or not | To support you if you fall behind and to settle the guarantee without arguing | Performing our contract with you |
| Your phone number, if you join the WhatsApp groups | For the group and for your pod | Your consent |
| What you post in the community | It is the product: the community | Performing our contract with you |
| Recordings of the live sessions and Demo Day where you appear | So the cohort can watch them afterwards | Performing our contract with you |
| Your testimonial, your face or your app in sales material | Only to sell future cohorts | Your consent, asked separately and in writing. Without it, nothing gets used |
What we never see: your card details. Stripe handles that and it never reaches us.
What we don't do: we don't ask you for health data, political views, religion, ethnic origin, sexual orientation or anything like that. If you tell us in the community because you want to, that's yours and we don't store it anywhere separately.
3. The text you accepted, word for word
We keep the exact text of the box you ticked and the day you ticked it. These are the versions that have been published:
Since August 16, 2026 (waitlist):
"I agree to let Vibe & Sell store my name and my email to tell me when spots open. I can ask to have them deleted whenever I want."
Since August 20, 2026 (waitlist and purchase):
"I agree to let Vibe & Sell store my name, my email and my country to write to me about the challenge, the spots, and whatever Isa launches. I can unsubscribe from any email with one click, and I can ask to have my data deleted whenever I want."
If you signed up under the first version, we only write to you for what that first version says, until you say yes to the rest. Nobody is going to put you on a list you didn't say yes to.
4. Where your data lives
| Where | What's there | Located in |
|---|---|---|
| Supabase | The database with your name, email, country and consent | Paris, France (European Union) |
| Vercel | The website server | United States and Europe |
| Stripe | The payment, the invoice and your card details (which we don't see) | United States and Ireland |
| WhatsApp (Meta) | The groups and your number, if you join | United States |
| The email tool | Your email, to send you the emails | [PENDING ISA: confirm which one is used and where it is] |
| The video call tool | The live sessions and their recordings | [PENDING ISA: confirm which one is used] |
About the ones in the United States: when your data leaves Europe, it's sent with the safeguards European law requires (the European Commission's standard contractual clauses, or the EU to US adequacy framework, depending on the company). We're telling you because you have a right to know, not because there's anything strange about it.
5. Who we give your data to
Nobody who wants to sell you something. We don't sell, rent or hand over your information to third parties so they can advertise to you. Ever.
Your data only reaches:
- The platforms in the table above, which work for us and can only use your data for what we ask them to.
- The other participants, in whatever you post in the community, and your phone number if you join a WhatsApp group. You control this: you post what you want and you can ask to stay out of WhatsApp.
- Whoever the law obliges us to, if one day a judge or the tax authority asks.
If we ever make a sale through an affiliate, that person knows how many sales they brought in, not who bought. We don't give them your name or your email.
6. How long we keep it
| What | How long |
|---|---|
| Waitlist data | Until you unsubscribe, or up to 24 months without you opening a single email. Whichever comes first |
| Proof of your consent (text and date) | 3 years after it ends, because it's what lets us prove you signed yourself up |
| Billing and purchase data | 6 years, which is what Spanish law requires for keeping the books |
| Your entry form answers | Up to 6 months after Demo Day |
| Your check-ins and your tracking sheet | Up to 12 months after Demo Day, so we can settle any guarantee claim |
| What you posted in the community | As long as the community exists, or until you ask for it to be deleted |
| Recordings of the sessions and Demo Day | Until at least October 20, 2027 |
| Your testimonial or your image in sales material | Until you withdraw permission |
When the deadline hits, it gets deleted or anonymized.
7. Your rights
You have all of them, and exercising them is free. You write to hello@vibeandsell.club and that's it. You don't have to explain why.
- Know what we have of yours and ask for a copy.
- Correct anything that's wrong.
- Delete everything. Without giving reasons. The only thing that can stay is what the law obliges us to keep, like an invoice, and we tell you exactly what stays and why.
- Take your data with you in a file you can open somewhere else.
- Object to us using it for something, or ask us to freeze it while something gets sorted out.
- Withdraw your consent whenever you want. What we did before you withdrew it stays valid, but going forward we stop.
- Unsubscribe from the emails with one click, in any email we send you. There's always an unsubscribe link and it always works.
- We don't decide anything about you with a robot. There's no automated profiling and no automated decisions.
How long we take: we answer within 3 business days and resolve it within 30 calendar days at the most, which is what the law allows.
If you think we got it wrong: you can complain to the Spanish Data Protection Agency (www.aepd.es), or to the data protection authority of the EU country where you live if that applies. And if you're in the United States, to your state's attorney general's office.
8. If you live in California
California law (CCPA and CPRA) gives its residents extra rights. Because of our size, we're not legally required to comply today (it applies to large businesses or to businesses that live off selling data, and we're neither). We give you these rights anyway, because it seems right and because it costs us nothing:
- Know what categories of your data we collected, where from, what for and who we shared it with. All of that is in sections 2, 4 and 5 of this page.
- Have it deleted.
- Correct it.
- Not be treated differently for exercising any of these rights. We won't charge you more or give you less.
About selling or sharing your information: we don't sell your personal information and we don't share it for cross-context behavioral advertising. We haven't done so in the last 12 months either. That's why you won't see a "do not sell my information" button, because there's nothing to switch off. If that ever changed, this page changes first and we tell you.
Sensitive data: we don't collect the categories California considers sensitive.
You can exercise all of this by writing to hello@vibeandsell.club, or through someone you authorize in writing.
9. Cookies and tracking
Today the site uses no advertising cookies and no third party tracking tools. There's no Meta pixel, no TikTok pixel, no Google Analytics. The only thing used is what's strictly necessary for the page to work.
If we ever add advertising or analytics, this page gets updated before that gets switched on, and you'll see a cookie notice with a real option to say no. [INTERNAL NOTE: if a Meta or TikTok pixel gets installed for the campaign, this section has to be rewritten and a cookie banner added before switching it on.]
10. Minors
This is for people 18 and over. We don't knowingly collect data from minors. If we find out we have a minor's data, we delete it.
11. Security
Your data sits on servers with restricted, password protected access, and only the people who need to see it to do their job see it. Nobody is immune to an incident. If something ever happened that puts you at risk, we tell you and the relevant authority within 72 hours of finding out, as the law requires.
12. Changes to this policy
If we change something important, we tell you by email before it takes effect. The date at the top tells you when it was last updated.
13. Contact
hello@vibeandsell.club Isabella Fernández Madrid, Spain 1801 Coffeen Avenue, Suite 1200, Sheridan, WY 82801, United States
This document was drafted following standard industry practice and is not a substitute for advice from a licensed attorney.