Legal

    Data Processing Addendum

    Last updated: July 2026

    This DPA applies to Build on Vibe customers whose use of the service involves processing personal data of individuals in the EU, UK, or other regions with equivalent data-protection laws.

    Roles

    You are the data controller. Build on Vibe is the data processor. We process personal data solely on your documented instructions.

    Subprocessors

    See our subprocessors list. We give 30 days' notice before adding new subprocessors.

    Security

    Data is encrypted in transit (TLS 1.2+) and at rest. Access is role-based and audited.

    Requesting a signed DPA

    For a countersigned copy, email legal@vibe-builder-flow.lovable.app.