Privacy Policy

Susan is operated by Vibe Software, LLC (“Vibe,” “we,” “us,” or “our”). This Privacy Policy applies to Susan’s websites, applications, formation and compliance workflows, document storage, reminders, and related services (the “Service”).

• Account information: name, email address, sign-in identifiers, organization memberships, and account permissions.
• Business and filing information: company names, addresses, jurisdictions, owners, managers, registered agents, business activities, filing details, and compliance status.
• Documents and records: receipts, formation documents, contracts, correspondence, identifying numbers, and other files or information you choose to store.
• Communications: support requests, feedback, and other messages you send us.
• Technical information: IP address, browser and device information, timestamps, requested pages, security events, and diagnostic logs generated when you use the Service.

We receive information directly from you and other authorized users in your company. We also receive account and organization data from our authentication provider, and may receive information from government agencies or third-party providers when you direct Susan to interact with them or connect their services.

• provide, personalize, and maintain the Service;
• create company workspaces, prepare records, manage workflows, store documents, and deliver reminders;
• authenticate users and enforce company-level permissions;
• carry out instructions you authorize, including sharing information with a government agency or provider you select;
• answer support requests and communicate service updates;
• protect Susan, our users, and others from fraud or misuse;
• debug, analyze, and improve reliability and features; and
• comply with law and enforce our agreements.

We may disclose information to:

• Service providers that help us operate Susan, including WorkOS for authentication and Amazon Web Services for application hosting, databases, and file storage.
• Government agencies and providers you choose when you ask Susan to prepare, transmit, or manage a filing, order, or other workflow.
• Your company’s authorized users and advisers based on workspace permissions or sharing instructions.
• Legal and safety recipients when reasonably necessary to comply with law, protect rights or safety, investigate fraud, or respond to lawful process.
• Transaction participants in connection with a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information. We do not use personal information for cross-context behavioral or targeted advertising.

Susan currently uses cookies and similar browser data that are needed for sign-in, security, and session continuity. We do not currently use advertising cookies. If we introduce non-essential analytics or advertising technology, we will update this policy and provide choices where required.

We retain information while your account is active and for as long as reasonably necessary to provide the Service, maintain business and compliance records, resolve disputes, enforce agreements, and satisfy legal obligations. Retention depends on the information, why we hold it, and applicable law. Backups and logs may remain for a limited time after deletion through ordinary rotation cycles.

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated access, company-level authorization, HTTPS, private cloud storage, and infrastructure access controls. No system is completely secure, and we cannot guarantee that unauthorized access or loss will never occur.

If you believe your account or data may be at risk, contact us promptly and do not include sensitive documents in your email.

You may update much of your account and company information through Susan. You may also contact us to request access, correction, deletion, or a copy of personal information, or to object to or limit certain processing. Your rights depend on where you live and may be subject to legal exceptions, identity verification, and company recordkeeping obligations.

An authorized agent may submit a request where applicable, but we may require proof of authority and verification of your identity. If we deny a request, you may ask us to reconsider by replying to our decision.

Susan is a business service intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can investigate and delete it where appropriate.

Susan is operated in the United States, and information may be stored and processed in the United States. If you access Susan from another country, its data-protection laws may differ from those where you live.

We may update this policy as Susan, our providers, or legal requirements change. We will post the revised policy and update the effective date. If a change materially affects how we use personal information, we will provide additional notice when reasonably practical.

Email us with privacy questions or requests. Please do not send sensitive documents or identification numbers by ordinary email.