Privacy Policy

1. Introduction

Vibrant Tools (“we”, “our”, or “us”) is a product of Vibrant Digital, a digital and technology services agency based in Sri Lanka. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform at tools.vibrantdigital.net.

By using Vibrant Tools, you agree to the practices described in this policy. If you do not agree, please discontinue use of the platform.

2. Information We Collect

We collect the following types of information:

• Account information — When you sign in with Google, we receive your name, email address, and profile photo from Google’s OAuth service.
• Business profile data — Business name, address, phone number, and email that you enter into the platform.
• Document data — Invoices, quotations, line items, and associated financial figures that you create using our tools.
• Client data — Names, email addresses, phone numbers, and addresses of clients you add to the platform.
• Usage data — Basic analytics such as pages visited and features used, collected to improve the platform.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Vibrant Tools platform and its features
• Auto-fill your business details across documents
• Send invoices and quotations to your clients via email on your behalf
• Generate shareable document links
• Maintain your document history and client records
• Improve platform functionality and fix bugs
• Communicate important service updates if necessary

We do not use your data for advertising, profiling, or any purpose beyond operating this platform.

4. Data Storage and Security

All data is stored securely using Supabase, a hosted Postgres database platform with row-level security (RLS) enforced. Your data is isolated — no other user can access your invoices, quotes, or client records.

We implement reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. However, no internet-based system can guarantee absolute security, and you use the platform at your own risk.

5. Third-Party Services

Vibrant Tools uses the following third-party services:

• Google OAuth — For authentication. Governed by Google’s Privacy Policy.
• Supabase — For database and authentication infrastructure. Governed by Supabase’s Privacy Policy.
• Vercel — For hosting and deployment. Governed by Vercel’s Privacy Policy.
• Resend — For transactional email delivery (sending invoices and quotations to your clients).

Each of these services has its own privacy policy. We are not responsible for the practices of these third parties.

6. Data Sharing

We do not sell, rent, or trade your personal data to any third party. We do not share your data with advertisers or data brokers. Data is only shared with the third-party services listed above where strictly necessary to operate the platform (e.g. Resend receives your client’s email address to deliver the document you choose to send).

7. Your Rights

You have the right to:

• Access the data we hold about you
• Correct inaccurate data via your account settings
• Request deletion of your account and all associated data
• Export your document data

To exercise any of these rights, contact us at hello@vibrantdigital.net.

8. Cookies

Vibrant Tools uses session cookies strictly necessary for authentication (managed by Supabase Auth). We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. You cannot opt out of session cookies without disabling the platform entirely.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy. For material changes, we will make reasonable efforts to notify signed-in users.

10. Contact

If you have questions or concerns about this Privacy Policy, please contact us: