LEGAL

Privacy policy

This policy explains how VibeSweeper handles personal data. VibeSweeper is a product of Neon Mountain Ltd. It covers this website, bookings, and the information we need to carry out a review.

Who we are

Neon Mountain Ltd (“we”, “us”, “our”) is a company registered in England and Wales (company number 14814912). Our registered office is 9-10 Cross Street, Preston, Lancashire, PR1 3LT.

For privacy questions, email hello@neonmountain.co.uk, use the contact details on neonmountain.co.uk, or write to us at the address above.

What we collect

Depending on how you use VibeSweeper, we may process:

• Website technical data — standard server and hosting logs such as IP address, browser type, pages requested and request times, generated when you visit vibesweeper.com.
• Cookie-banner preference — a record of whether you accepted or declined analytics, stored in your browser’s local storage so we do not show the banner again.
• Analytics data — if you accept analytics cookies, Google Analytics 4 may collect pages viewed, approximate location, device and browser type, referral source and similar usage data.
• Booking and payment details — when you book a review, Stripe collects the information needed to take payment (typically your name, email address and payment details). We receive confirmation of the booking and the contact details needed to start the review. We do not see or store your full card number.
• Review materials — after you book, we ask for one repository, the product URL, login credentials and enough descriptive context to understand what the product should do.
• Correspondence — emails or messages you send us about a booking, the report, the wrap-up call or a Second Sweep.

We do not use advertising cookies. We do not sell your personal data.

How we use your data

We use personal data to:

• Operate, secure and host this website
• Take payment and confirm a booking
• Access the repository and product so we can carry out the review
• Write and send your report, and arrange the wrap-up call
• Carry out a Second Sweep of the same repository if you book one
• Answer questions and manage our relationship with you
• Understand how this website is used, if you accept analytics
• Meet legal, tax and accounting obligations

Our lawful bases are typically contract (delivering a review you have booked), legitimate interests (running and securing this website, and responding to people who contact us), consent (Google Analytics, if you accept), and legal obligation (keeping payment and accounting records). Your cookie-banner choice is stored so the site can remember it.

Repository access and credentials

Login credentials and repository access are collected only so we can review the product you booked. We use them for that review, and for a Second Sweep if you buy one. We do not use them to change your product, market to your users, or access systems unrelated to the booked review.

Treat those details as confidential. We ask that you provide access you are authorised to share, and that you revoke or rotate credentials when the review is finished if you wish.

Cookies and similar storage

This website uses local storage to remember your cookie choice. That is essential so we know whether to show the banner again.

If you choose Accept analytics, we load Google Analytics 4, which sets cookies or similar identifiers operated by Google to measure visits and page use. IP anonymisation is enabled in our configuration. If you choose Essential only, analytics is not loaded.

When you pay, Stripe may set cookies on Stripe’s own pages. Those cookies are controlled by Stripe, not by this website.

You can clear site data in your browser to reset the banner and choose again.

Who we share data with

We use trusted providers where needed to run VibeSweeper:

• Hosting — this website is hosted by Vercel. See Vercel’s privacy policy.
• Payments — bookings are processed by Stripe. See Stripe’s privacy policy.
• Analytics — if you accept cookies, visit data may be processed by Google Analytics (Google Ireland / Google LLC). See Google’s privacy policy.
• Email and files — we use ordinary business tools to send the report and arrange the wrap-up call.

We only share what is needed for those purposes. We may also disclose information if required by law. If you later ask Neon Mountain for optional remediation work, that is a separate engagement and is handled under the same company, not as part of the independent review by default.

How long we keep data

We keep booking, payment and accounting records for as long as tax and company law require.

Review materials, credentials and product access details are kept only as long as needed to complete the review, deliver the report, arrange the wrap-up call, and complete a Second Sweep if you book one. We then delete or revoke access we no longer need, unless a longer period is required by law or to deal with a genuine dispute.

Server logs are retained according to our hosting provider’s normal operations. The cookie-banner preference stays in your browser until you clear site data. Analytics data, if you accept, is kept according to our Google Analytics retention settings and Google’s own retention rules.

International transfers

Some providers (including Stripe, Vercel and, if you accept analytics, Google) may process data outside the United Kingdom. Where that happens, they are responsible for using appropriate safeguards under UK data protection law.

Your rights

Under UK data protection law you may have rights to access, correct, delete or restrict use of your personal data, to object to certain processing, and to data portability where applicable.

To exercise these rights, email hello@neonmountain.co.uk. You can also complain to the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

Children

VibeSweeper is a business service. We do not knowingly collect personal data from children.

Other Neon Mountain services

If you use other Neon Mountain services, the Neon Mountain privacy policy may also apply.

Changes

We may update this policy from time to time. The “Last updated” date below will change when we do.

Last updated 17 August 2026