Privacy Policy
1. Who is responsible
VibeTow is operated by Lone Stack LLC, a Wyoming, United States limited liability company (“we”, “us”). Contact for privacy: [email protected].
Registered address: 30 N Gould St, Ste R, Sheridan, WY 82801-6317, United States.
Day-to-day running of VibeTow — including how we read Tow Check emails and work on client projects — is carried out from South Tyrol, Italy by Christian Anese, the sole operator. Because that stable activity happens in Italy, we treat GDPR as applying under Article 3(1) (processing in the context of an establishment in the Union). Article 27’s separate EU representative is for organisations that are not established in the Union, so we have not appointed one. For privacy questions from the EU/EEA/UK, contact Christian Anese via [email protected].
2. What this site does with data today
As of the date above, vibetow.com:
- Is a static site hosted on Cloudflare Pages.
- Uses self-hosted fonts (no Google Fonts requests from your browser).
- Sets no analytics cookies and loads no advertising or analytics scripts.
- Takes Free Tow Check requests by opening your email app with a pre-filled message to [email protected] (mailto). We do not run a form backend on the site itself.
Cloudflare may process technical data (such as IP address, user agent and request logs) to deliver and protect the site. See Cloudflare’s own documentation for its role as hosting / CDN provider.
3. Personal data we process
a) Tow Check and project emails
When you email us (including via the Tow Check mailto), we receive whatever you put in the message. Typically that includes:
- Your email address and name (if you include them)
- App URL, what is broken, optional screen-recording link
- Which tool you built with, and which plan you are interested in
- Later: repo or project invites, and messages needed to do the job
Please do not send passwords, API keys or .env files. We never ask for them in a form or email intake.
b) Project access during a paid job
If you hire us, you grant temporary access to your code project so we can fix it on a branch. We only touch what we need for the quoted work. We do not copy your users’ data for our own databases. When the job is done, we remove our access.
c) Payments
Card payments are processed by Stripe (Stripe, LLC and, for customers in Europe, Stripe Payments Europe, Limited, as applicable). Lone Stack LLC is the seller; Stripe is the payment processor, not the merchant of record. Full card numbers are handled by Stripe and are never stored by VibeTow or Lone Stack LLC. Stripe’s privacy notice applies to payment card data.
d) Server / email infrastructure
Email for @vibetow.com is routed through Cloudflare Email Routing into the operator’s mailbox. Hosting and DNS are on Cloudflare. Those providers process data as needed to run email and the site.
4. Why we process it (purposes and legal bases)
- Respond to Tow Checks and deliver fixes — to take steps at your request before a contract, and to perform a contract once you approve a fixed price (GDPR Art. 6(1)(b)).
- Run and secure the website — legitimate interests in delivering a static site securely via Cloudflare (Art. 6(1)(f)), balanced against your rights.
- Legal accounting and compliance — where we must keep invoices or similar records (Art. 6(1)(c)).
5. Cookies and similar tech
The marketing site itself does not set analytics or advertising cookies and does not use a cookie banner today because it does not use non-essential cookies. If we later add analytics, accounts or a form backend, we will update this policy and, where required, ask for consent.
Your browser and Cloudflare may still use strictly technical mechanisms needed to fetch pages over HTTPS.
6. Sharing
We do not sell your personal data. We share it only with:
- Infrastructure providers that run the site and email (currently Cloudflare), under their terms
- Stripe (Stripe, LLC / Stripe Payments Europe, Limited, as applicable), for card payments
- Professional advisors (accountant, lawyer) when needed
- Authorities when the law requires it
Christian Anese, as the person doing the work for Lone Stack LLC, accesses client project data only to deliver the job.
7. International transfers
Lone Stack LLC is in the United States. Hosting, email and payments may involve processing in the US and other countries where Cloudflare and Stripe operate. Where a transfer needs an Article 46 GDPR safeguard, we rely on the mechanisms those providers publish:
- Cloudflare, Inc. — certified under the EU–U.S., UK Extension and Swiss–U.S. Data Privacy Framework (active on dataprivacyframework.gov). Cloudflare’s Customer DPA also incorporates the European Commission’s Standard Contractual Clauses (2021/914) as a fallback.
- Stripe, LLC — certified under the EU–U.S., UK Extension and Swiss–U.S. Data Privacy Framework (active on dataprivacyframework.gov). Stripe’s Data Transfers Addendum uses the DPF first, with the EEA SCCs and the UK International Data Transfer Addendum as fallback.
We will update this section if a provider’s certification status changes.
8. How long we keep data
- Tow Check emails that do not become a paid job: kept for 12 months after last contact, then deleted or archived with access limited.
- Paid jobs: project access removed at the end of the job. Emails, invoices and bookkeeping records are kept for up to 10 years, which covers Italian commercial-book retention (Civil Code art. 2220) and is longer than the IRS’s usual 3–7 year periods for US tax records.
- Server logs: per Cloudflare’s defaults / our account settings.
9. Your rights (including GDPR)
Depending on where you live, you may have the right to access, correct, delete, restrict or export your personal data, to object to certain processing, and to withdraw consent where processing was based on consent. You may also complain to a supervisory authority (for example, the Garante in Italy, or your local EU authority).
To exercise rights: email [email protected]. We may need to verify your request.
10. Children
VibeTow is aimed at adults buying business / developer services. We do not knowingly collect personal data from children.
11. Changes
We may update this Privacy Policy. The “Last updated” date at the top will change. If we start using analytics, cookies that require consent, or a hosted form, we will describe those flows here before or when they go live.
12. Contact
Privacy questions: [email protected].
Postal: 30 N Gould St, Ste R, Sheridan, WY 82801-6317, United States.