Skip to content
pryoraContactGet my free demoFree demo

Privacy Policy

Last updated: 5 November 2026

1. About this policy

This policy explains how Vibe Shift (ABN 66 778 054 537) handles personal information collected through Pryora, which includes our website (pryora.dev), the demos we build, and our client portal (my.pryora.dev). Vibe Shift is based in Adelaide, South Australia, and operates Pryora as a website design and development service for small and medium businesses.

We comply with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth), and we apply them to everyone who uses Pryora. Our free demos are available to businesses in Australia, New Zealand, the United Kingdom, Ireland, the United States, Canada, South Africa and Singapore.

2. Information we collect

When you use Pryora, we collect the following information:

2.1 Information you provide

  • Your email address, submitted when you ask for a demo, so we can send you a verification link and the private link to your demo.
  • The details of your demo request, depending on how you start: the address of your existing website, or the Google listing you choose for your business, or a description of your business in your own words. We also record your country and your choices, such as the design theme, whether to keep your logo and colours, which listing photos to use, and whether AI-generated images are allowed.
  • Business information you ask us to show on your new site, such as a phone number, address and public email address.
  • Messages you send us through the contact form: your name, email address, chosen topic and message. These reach us by email and are not stored in our database.
  • Client portal details, if you become a client: your name and email address, the business you are linked to, and your sign-in. Your password is handled by our sign-in provider, and we do not see it.

If you book a call, you do so on Cal.com, which collects the details you enter there and shares them with us so we can hold the call.

2.2 Information collected automatically

  • Content from the website you submit: text, links, images, colours, contact details and metadata taken from the public pages of your existing site. We use this as the reference material for building your demo.
  • Information from your Google listing: if we find or you choose a listing, we collect its public details, such as your business's name, address, phone number, opening hours, photos and customer reviews. Reviews can include the name of the person who wrote them.
  • Technical information needed to operate and secure the service, including your IP address (used for rate limiting, abuse prevention, and advertising measurement as described below), your browser's user agent, and standard request logs.
  • Visitor analytics collected through Vercel Web Analytics: the page you visit, the site that referred you, your general location, and your browser, operating system and device type. It uses no third-party cookies, and it identifies a visit by a hash that is discarded after 24 hours. It is not collected on the pages you reach from the links we email you.
  • Advertising and conversion data collected through Meta Platforms' Pixel (browser) and Conversions API (server), when you use the production Pryora site. This may include: cookies and similar identifiers set or read by Meta (commonly named _fbp and _fbc); a Meta click identifier (fbclid) that we may store in your browser's local storage for up to 90 days when you arrive from a Meta ad; your IP address and browser user agent; the page URL associated with the event; and event names that describe what you did on the site (page view, starting a scan, and submitting a demo request). When you submit a demo request, we may also send Meta a one-way hash of your email address so Meta can attribute the conversion. We do not send Meta your name, phone number, address or listing details, and we do not keep our own record of these events.

The Meta Pixel script loads only on our production site. It is not loaded in local development or preview environments, and it is not loaded on the demo sites we build, on the client portal, or on the pages you reach from the links we email you. Some browser extensions (such as ad blockers) may prevent the Pixel from loading; in those cases we may still send a matching server-side conversion event so measurement remains reliable.

3. How we use your information

We use the information described above to:

  • Verify your email address and confirm your request;
  • Build a free demo of your new website, including by providing the information you have submitted to our build process and third-party processors (see Section 5);
  • Send you the link to your demo and invite you to book a call;
  • Build and look after the website of a client, and give clients access to the client portal;
  • Respond to enquiries, support requests, and privacy requests;
  • Operate, maintain, and secure the service (including detecting and preventing abuse);
  • Review how demos were built and how visitors use our site, so we can improve the service;
  • Measure and attribute advertising performance (including Meta ads), understand which ads and pages lead people to start or complete a demo request, and improve the effectiveness of our marketing; and
  • Comply with our legal obligations, including record-keeping requirements that apply to financial transactions.

We do not sell your personal information, and we do not share or rent our contact lists to third parties for their own marketing. Sharing advertising and conversion data with Meta as described in Sections 2 and 5 is for measuring and improving our own advertising, not for selling your information.

4. The website content you submit

Pryora exists to build websites that promote businesses. Where you ask us to include contact information or other business details on your new site, such as a phone number, email address, or office address, those details are intended to be published on the public web as part of your new site, and will be included in the data we send to our third-party processors so that they can build and host the site.

A demo sits at a hard-to-guess web address and is kept out of search engines, but anyone you share the link with can see it. Your demo may also use what we found on your existing site or Google listing, including customer reviews.

You control what appears on your new site. If you do not want a particular piece of information used, tell us using the address in Section 11.

5. Third parties we share information with

We rely on a small number of third-party service providers and platforms to operate Pryora and measure our advertising. These organisations may store and process data outside Australia (including in the United States), under their standard terms of service or platform policies.

  • Firecrawl — scans the website you submit so we can use its content as a reference.
  • Vercel — hosts the Pryora site and client portal, generates and runs your demo, and provides our visitor analytics.
  • Anthropic — its AI models check the descriptions submitted with custom requests and write descriptions of the images used in a demo.
  • Firebase (Google) — handles client portal sign-in and stores images and files for your demo.
  • Mailgun — sends email such as the verification link, demo delivery email and client portal sign-in links, and delivers contact form messages to us.
  • Google Places — provides business lookup information when you search for your business, and the listing details described in Section 2.2.
  • Cloudflare Turnstile — checks that requests to our website come from a person and not an automated program. It processes technical information from your browser to do this.
  • Cal.com — takes bookings when you book a call with us.
  • MongoDB Atlas — hosts our primary database.
  • Railway — hosts our application servers.
  • Meta Platforms (including Facebook and Instagram advertising tools) — receives browser Pixel events and server-side Conversions API events so we can measure ad performance and attribute conversions. Data shared may include the identifiers and technical fields described in Section 2.2, and a hashed email address when you submit a demo request. Meta may process this information in accordance with its own terms and privacy policy, including outside Australia.

By using Pryora or submitting information through it, you acknowledge that information may be processed by these providers and platforms for the purposes described in Section 3. We will also disclose personal information where required or authorised by Australian law.

6. How long we keep your information

Some records are removed automatically: an unfinished scan after 24 hours, the content we scanned from a website after about 7 days unless it became part of a demo request, and rate-limit records once they have expired.

A demo stops being available 14 days after it is built, unless we extend it. We do not currently apply a fixed maximum retention period to the records behind it. Your request, the content and images collected for it, and the record of how each demo was built are kept for as long as is reasonably needed to deliver the service to you and to maintain our records.

We may periodically review and remove inactive or abandoned requests, so that we are not holding information beyond what is useful. You can ask us to delete your information at any time, without waiting for such a review; see Section 8.

Records relating to financial transactions (invoices, payment records, and similar) may be retained for longer where required by Australian tax and corporate-records law.

7. How we store and protect your information

Your information is stored on infrastructure operated by the providers listed in Section 5. We use reasonable administrative and technical measures appropriate to the kind of information we hold, including:

  • Encryption in transit (HTTPS) for all browser traffic;
  • Access controls on our databases and source-code repositories;
  • Rate limiting and abuse protection on our public APIs; and
  • Reliance on the security practices of the established providers listed above.

No method of transmission or storage is completely secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security.

8. Your rights

You have the right to:

  • Access the personal information we hold about you;
  • Correct information that is inaccurate, out of date, incomplete, or misleading; and
  • Request deletion of your personal information and associated project data.

To make a request, contact us at the address in Section 11. We will respond to deletion requests within 30 days. Where we are required to retain certain records (for example, records relating to financial transactions), we will retain only the minimum required by law and delete the rest.

9. Children

Pryora is intended for use by business owners and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The version in effect is the one published on this page, and the date at the top indicates when it was last revised. Material changes will be highlighted on this page.

11. Contact and complaints

If you have a question about this policy, want to make a privacy request, or wish to complain about how we have handled your personal information, contact us at:

Vibe Shift, operating Pryora
Adelaide, South Australia
Email: hello@pryora.dev

We will acknowledge your complaint and aim to respond within a reasonable time. If you are not satisfied with our response, you can refer the matter to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.