Privacy Policy

ThaVibes Privacy Policy

Last Updated: April 3, 2026

Welcome to ThaVibes. This Privacy Policy explains how ThaVibes Ltd (“ThaVibes,” “we,” “us,” or “our”) collects, uses, discloses, retains and  protects information in connection with our services, including our websites, mobile applications, AI-powered creator tools, content streaming platform, event marketplace, digital wallets and  all related features (collectively, the “Services”).

This Policy is designed first and foremost to enable ThaVibes to operate, innovate and  protect its business and community while complying with applicable law and respecting user privacy. By accessing or using the Services, you expressly consent to the collection, use, disclosure and  processing of your information as described below. If you do not agree, you must immediately cease all use of the Services. This Policy is incorporated into and forms part of our Terms of Service.

Data Controller and Contact Information

ThaVibes Ltd is the data controller responsible for your personal information under applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act as amended by the CPRA (“CCPA/CPRA”), the Trinidad and Tobago Data Protection Act 2011 (as amended, “TT DPA”) and  equivalent or model data protection frameworks in other CARICOM member states (collectively, “Applicable Data Protection Laws”).

For privacy-related inquiries or to exercise any rights you may have under Applicable Data Protection Laws:

• Email: support@thavibes.com
• In-app support or Help Center

We may require secure identity verification before processing any request. 

1. Information We Collect

To deliver, secure and  continuously improve the Services—including our advanced AI tools that empower independent creators and filmmakers—we collect the following categories of information:

1. Information You Provide

• Account, profile and  identity data (name, email, phone, address, date of birth, government-issued ID where required for verification, tax, billing or regulatory compliance).
• Payment and wallet data (including cryptocurrency wallet addresses where permitted by law).
• Content and creative data: Any films, music, scripts, AI prompts, inputs, outputs, metadata, thumbnails or other materials you upload, generate or submit through our AI tools or content features.
• Communications, preferences and transaction data: Ratings, reviews, survey responses, support interactions, donation and ticket records.

1. Information Collected Automatically

• Usage, interaction and  behavioral data (watch history, search queries, engagement metrics, including in immersive or AI-enhanced experiences).
• Device and technical data (IP address, device identifiers, browser/app details, approximate location).
• AI-specific data (prompts, generated outputs, model interaction logs and  derived insights).
• Cookies, pixels, SDKs, web beacons and  similar tracking technologies (detailed in Section 9).

1. Information from Third Parties

• Data from partners, service providers, payment processors, device manufacturers, analytics firms and public sources, provided it is obtained and processed in accordance with Applicable Data Protection Laws.

We collect only what is necessary or reasonably useful for the purposes outlined in this Policy but we retain broad discretion to collect additional categories as the Services evolve.

2. How We Use Your Information

We use your information to operate, protect and  grow our business, including:

• Providing, personalizing and  improving the Services, AI tools, recommendations, streaming, events and  monetization features.
• Training, developing, fine-tuning and  enhancing our generative AI models and algorithms (including using anonymized, aggregated or de-identified data derived from user content, prompts, outputs and  interactions).
• Content moderation, safety, fraud prevention and  security (including AI-driven detection of deepfakes, prohibited content or platform abuse).
• Analytics, research, product development and business intelligence (including de-identified datasets for long-term AI improvement or industry insights).
• Marketing, communications and promotional activities (subject to your opt-out rights).
• Complying with legal obligations, enforcing our Terms of Service and  protecting the rights, property and safety of ThaVibes, our users and the public.
• Any other purpose consistent with this Policy or permitted by Applicable Data Protection Laws.

AI Data Practices

Our AI systems are core to the Services. We may use your data (including User Content and AI outputs) in anonymized, aggregated or de-identified form for model training and improvement, even after you delete your account or request data deletion to the maximum extent permitted by law. This enables ongoing innovation for creators worldwide. Where Applicable Data Protection Laws require consent or an opt-out for specific AI processing, we provide those mechanisms (see Section 4). You remain responsible for ensuring your content and AI-generated material comply with all laws and our Terms.

We may explore advanced or forward-looking AI applications (e.g. real-time adaptive storytelling in immersive content, de-identified behavioral trend analysis or predictive safety features) while maintaining compliance with the EU AI Act, TT DPA and  other Applicable Data Protection Laws through privacy-by-design, impact assessments and appropriate safeguards.

3. Disclosure and Sharing of Information

To the maximum extent permitted by Applicable Data Protection Laws, we may share your information:

• Internally among ThaVibes entities and affiliates for business operations and AI development.
• With service providers, AI partners, contractors and  vendors who assist us (under strict contractual protections).
• With device partners, payment processors, event platforms and  other third parties necessary to deliver the Services.
• In connection with business transfers (mergers, acquisitions, asset sales or reorganizations).
• To comply with legal process, government requests, national security or public safety obligations.
• To enforce our Terms, detect fraud or protect rights and safety.
• With your consent or in public-sharing features you choose to use.

Aggregated or de-identified data may be shared broadly for research, analytics or commercial purposes without further restriction. International transfers (including to the United States) are conducted using Standard Contractual Clauses, binding corporate rules or other lawful mechanisms recognized under the TT DPA and CARICOM frameworks.

4. Your Rights and Choices

Where Applicable Data Protection Laws (including the TT DPA, GDPR and  CCPA/CPRA) grant you rights, you may:

• Access, correct or delete your personal information (subject to verification and exceptions).
• Opt out of certain processing, including targeted advertising, specific AI model training on your identifiable data or automated decision-making with legal/significant effects.
• Object to or restrict processing in certain circumstances.
• Withdraw consent where processing is consent-based.
• Portability of your data (where technically feasible).

How to Exercise Rights

Contact support@thavibes.com. We will respond within the time required by law after verifying your identity. We may deny or limit requests that are unreasonable, repetitive, require disproportionate effort, risk the security of our AI models or platform or conflict with legal obligations or legitimate business needs (including continued use of de-identified data for AI improvement). Exercising rights will not result in discriminatory treatment.

For AI-specific “Do Not Train” requests on identifiable data, use account settings or email us. Note that de-identified or aggregated data derived from your inputs may continue to support model improvement.

5. Children’s Privacy

The Services are not directed to children under the minimum age required by law (13 years under COPPA and equivalent standards; the age of majority—generally 18—in Trinidad and Tobago and most CARICOM jurisdictions). Users below the age of majority may only use the Services with verifiable parental or guardian consent and supervision. We do not knowingly collect personal information from children without such consent and will delete any such data discovered. Parents/guardians are fully responsible for supervising their children’s use.

6. Security

We implement reasonable administrative, technical and  physical safeguards appropriate to the nature of the data and the risks involved. No security system is impenetrable; we are not liable for unauthorized access, disclosure or breaches beyond what Applicable Data Protection Laws strictly require.

7. Data Retention

We retain information for as long as necessary to fulfill the purposes in this Policy, comply with legal obligations (including under the TT DPA), resolve disputes, enforce our Terms or support our legitimate business needs—including the ongoing improvement of our AI models using de-identified data. Deletion requests are honored subject to these exceptions.

8. Third-Party Platforms and Links

The Services may integrate with or link to third-party devices, platforms or services (e.g. smart TVs, gaming consoles, voice assistants). Their privacy practices are governed solely by their own policies. ThaVibes is not responsible for their data handling.

9. Cookies, Tracking Technologies and  Internet Advertising

We and our partners use cookies, pixels, SDKs and  similar technologies for essential operations, analytics, personalization, fraud prevention and  advertising. You may manage preferences through our consent tools, browser settings or industry opt-out mechanisms (e.g. NAI, DAA or global privacy signals). Deleting cookies may impair Service functionality.

10. Changes to This Privacy Policy

We may update this Policy at any time to reflect legal, technological or business changes. Material updates will be notified at least 30 days in advance via email, in-app notice or platform posting. Your continued use of the Services after the effective date constitutes your acceptance of the revised Policy. If you do not agree, you must stop using the Services.

11. Governing Law and Regional Applicability

This Policy is governed by the laws of the State of Delaware, USA, without prejudice to any non-waivable rights you may have under the TT DPA, other CARICOM data protection laws, GDPR, CCPA/CPRA or your local law.