Privacy Policy
This Privacy Policy applies to Vibecoding at vibecoding.clickfq.com, a service operated by KIWCO ("we", "us", "our") under the brand name ClickFQ. Our registered address is 5th Floor, Horizon Centre, Gurgaon — 122002, India.
This page explains what data we collect, why we collect it, how it is stored, and the rights you have over it.
What we collect
- Account information — your email address, and either a hashed password or your Google OAuth identifier.
- Project state — the answers you provide in chat (business name, branding, features, pages). Used solely to build your website.
- Connection credentials — the Supabase URL, anon key, service-role key, management PAT, and Vercel token you paste in the Connections tab. Encrypted at rest with AES-256-GCM before being written to our database. Used solely to provision and deploy your site to your infrastructure on your behalf.
- Chat history — your messages to our assistant and its replies, for context continuity in the conversation.
- Payment metadata — Razorpay order id and payment id (for receipts and refunds). Card numbers and CVVs are never seen by us; they go directly to Razorpay.
- Usage data — model used, tokens consumed, credits charged. Used for billing and analytics.
Why we collect it
- To deliver the service — provisioning your Supabase, creating your Vercel project, deploying your site.
- To bill you accurately for AI tokens and skeleton features you use.
- To improve the product (aggregate, anonymised usage stats).
- To respond to support requests.
How long we keep it
While your account is active, indefinitely. You can request deletion at any time by emailing info@clickfq.com. We acknowledge requests within 48 hours and will delete your account and project data within 30 days. Connection credentials are deleted immediately on request.
Who we share with
- Anthropic / OpenAI / Google via Vercel AI Gateway — your chat messages are sent for inference. We do not opt in to training data sharing.
- Razorpay — payment processing.
- Supabase — our own database for storing your account and project state.
- Vercel — hosting for vibecoding.clickfq.com itself.
- We do not sell your data to anyone.
Your rights
Under India's Digital Personal Data Protection Act, 2023 and the EU GDPR (where applicable), you have the right to access, correct, export, and delete your personal data. You also have the right to withdraw consent to processing at any time. Email info@clickfq.com to exercise any of these rights — we respond within 48 hours.
Cookies
We use a session cookie (issued by Supabase Auth) to keep you signed in. We do not use third-party tracking or advertising cookies.
Security
Connection credentials are encrypted with AES-256-GCM before storage. Transport is HTTPS-only. We follow least-privilege access for our team and rotate platform secrets regularly. If we become aware of a breach affecting your data, we will notify you and the Data Protection Board of India within the timelines required by law.
Children
Vibecoding is not directed at users under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, please contact us and we will delete it.
Changes
We will update this page when our practices change and surface significant changes in-app or by email.
Grievance Officer & Contact
KIWCO
5th Floor, Horizon Centre, Gurgaon — 122002, India
Grievance Officer / Data Protection Officer: info@clickfq.com
We acknowledge all enquiries within 48 hours.