Privacy

Privacy policy

How VibePass stores and protects customer, organizer, payment, and QR ticket data.

Data stored

VibePass stores names, email addresses, payment references, QR ticket data, RSVP records, organizer verification documents, and bank account details needed for the documented platform flows.

Security

Passwords are encrypted with bcrypt.
API sessions use JWT authentication.
Suspicious login, duplicate scans, and fraud-related activity can be tracked in audit logs.
Payment credentials are configured through environment variables and are not hardcoded.

Notifications

Email, SMS, WhatsApp, and push notifications require provider credentials before production use.