Privacy Policy

Controller

Pravos LLC, doing business as Vibrana, is the controller for information submitted directly to vibrana.ai unless a branded assessment names a partner controller. Privacy requests can be sent to hello@vibrana.ai.

Information We Collect

We collect information that you provide directly to us, including:

• Contact, company, role, budget, timing, and attribution information submitted through our forms
• AI readiness answers, scores, reports, quality signals, and optional company context
• Public company website and LinkedIn URLs supplied for company analysis
• Commercial correspondence, booking, proposal, and pipeline status

How We Use Your Information

We use the information we collect to:

• Deliver requested assessments, reports, confirmations, and service communications
• Review Sprint and transformation fit, arrange calls, and manage proposals
• Analyze a company’s public website to personalize an assessment report
• Send assessment-related follow-up and, where separately requested, newsletters
• Measure funnel performance and improve our services and website

Our basis depends on the purpose: providing a requested assessment, report, or proposal and taking pre-contract steps; legitimate interests in responding to business inquiries, maintaining security, and measuring service performance; consent for optional newsletters or other consent-based marketing; and legal obligations where applicable. Assessment-related service email includes a route to stop non-essential follow-up.

Business Contacts and Prospecting

This section covers people we contact about our work who have not filled in one of our forms. Pravos LLC, doing business as Vibrana, is the controller.

What we hold about a business contact:

• Name, work email, role, company and, for people in our founders' networks, LinkedIn profile URL
• Public business signals about the company, with the source of each
• For people in our founders' own networks, the dates we last exchanged messages. We do not store the messages themselves.

Where it comes from: public company sources, professional data providers, and our founders' own professional networks.

Why we hold it: to contact you about AI transformation work for your company. We rely on legitimate interest, which means we think a relevant business message to a work address is a reasonable thing to send and that it is unlikely to surprise you. Contacts from a founder's own network are only used for that founder's personal messages to people they know, never for cold email sequences.

Where it is stored: in our CRM (Twenty, hosted by us on Fly.io) and in private files on our founders' own devices. How long: we keep a record while it is relevant to our work. The founders review these records at least once a year.

You can object, opt out or ask what we hold about you at any time. Email hello@vibrana.ai. If you ask, we stop contacting you, remove your record from our CRM and keep only a suppression entry, used for nothing else, so you are not contacted again. This notice is general information, not legal advice.

Meeting Notes

This section covers work meetings that members of the Vibrana team (John or Abe) record. Pravos LLC, doing business as Vibrana, is the controller.

When we record a work meeting, Granola transcribes and summarizes it. If the meeting is with someone who is already a Vibrana contact, we remove email addresses, phone numbers, links and long numbers from the transcript. We then send the redacted transcript through OpenRouter to an AI model, which extracts a summary, decisions, follow-ups and dates. We restrict these requests to model providers that do not retain the data or use it for training (zero data retention routing).

The processors of meeting content are:

• Granola (Granola, Inc.), a meeting notes service, which transcribes and summarizes recorded meetings
• OpenRouter (OpenRouter, Inc.), an API router, which passes redacted transcripts of meetings with existing contacts to an AI model provider
• The AI model provider that OpenRouter sends these requests to, currently Google (Gemini models served by Google, as listed by OpenRouter)

We keep this list current and update it when a processor changes.

The resulting summary is stored in our CRM (Twenty, hosted by us on Fly.io). We do not store raw transcripts in the CRM. Transcript copies on our processing server are deleted within 90 days.

Internal meetings, and meetings with people who are not Vibrana contacts, are only transcribed and summarized by Granola. We do not send them through OpenRouter or to any AI model ourselves.

You can ask us to delete the data from a meeting you were in at any time. Email hello@vibrana.ai.

Data Storage and Security

Form and assessment records are stored in Supabase. Resend processes transactional and follow-up email. Vercel hosts the website and provides site analytics. For the readiness assessment, Firecrawl may retrieve the public website you provide and Anthropic may process that public content to produce company context. We do not intentionally send your assessment answers to Firecrawl. Meeting content is processed by Granola, by OpenRouter, and by the AI model provider that OpenRouter sends requests to, as described under Meeting Notes.

We use these providers under their applicable service and data-processing terms. We do not sell submitted information. Do not submit credentials, special-category personal data, client-confidential material, or regulated data through website forms.

We keep active inquiry and assessment records while delivering the requested report and managing the related commercial conversation. Records are then reviewed under our operational retention schedule and removed when no longer needed for the stated purpose, contract administration, dispute handling, or a legal obligation. You may ask for the applicable retention date, export, correction, or deletion at any time; where a duty requires retention, we will explain the exception.

A completed assessment report is also stored in your browser's local storage so the results page can reopen it. New reports include a seven-day expiry check. You can remove it sooner by clearing site data for vibrana.ai.

Some providers may process information outside your country, including in the United States. We use the contractual and organizational transfer safeguards available under the relevant provider agreement and applicable law. Contact us for the safeguard applicable to a specific transfer.

Your Rights

You have the right to:

• Access your personal information
• Request deletion of your personal information
• Request correction or a copy of submitted information
• Object to or withdraw from marketing follow-up
• Unsubscribe from our email communications at any time

To exercise these rights, please contact us at hello@vibrana.ai

You may also complain to the data-protection authority that applies where you live or work.

Contact Us

If you have questions about this Privacy Policy, please contact us at hello@vibrana.ai