DRAFT — REQUIRES LEGAL REVIEW
Privacy Policy
Prepared October 20, 2026. Not an approved commercial agreement or a claim of legal compliance.
Account and website information
The app collects account email, name, passwords for authentication and optional profile company/phone; website name, business description, industry, audience, calls to action, page/style/colour choices, text, links and images; support/design requests; and saved versions/edit history. Authentication credentials are handled by Lovable Cloud auth; the app's profile records do not store plaintext passwords. Website or image content may identify you or others. [REVIEW L04: specify lawful purposes/bases, sensitive-data restrictions and rights for the actual jurisdictions served.]
Payments, domains and usage records
Stripe receives checkout/payment details directly, account email and user/order identifiers. The app stores subscription/customer/session/event identifiers, plan/status/periods and financial event summaries, not full card numbers. Domain checkout stores registrant first/last name, optional organisation, email, phone, street, city, state, postcode and country, consent timestamp, quotes and order/payment/provider status. OpenSRS receives domain queries and, on authorised paid test submission, registrant contacts. The app also records AI use, voice-ticket timestamps, support status, project activity, upgrade-prompt context and checkout starts.
Voice and AI processing
Starting voice uses microphone permission. Live audio is transmitted to the Lovable AI voice service using OpenAI; app code does not record audio files. Captions and conversation context are held in browser/server memory during the call and transcripts/context are sent for AI processing. Captured questionnaire answers become project information when saved; applied voice edits, summaries and previous-site snapshots persist in history and versions. Ending a call does not erase saved edits. Text/image generation also sends relevant business/site details to Lovable's AI gateway using OpenAI. [UNVERIFIED L05: obtain gateway/provider payload-log, audio/transcript retention, training-use, deletion and transfer terms; store:false is not a promise that providers keep nothing.]
Storage, access and other recipients
Lovable Cloud stores account/application records and private project/template files. Customers ordinarily access their own records; authorised administrators can access records permitted by their roles, and privileged server operations use broader access after verification. Approved sandbox publication sends site content and owned images to WordPress media/pages on WP Engine. Bluehost and its affiliate intermediary receive browser visits when the referral link is followed. Google serves web fonts; Google sign-in uses Google/Lovable when chosen. Domain DNS checks send domain names to Cloudflare DNS and may contact the domain's HTTPS server. [UNVERIFIED L06: confirm exact processor legal entities, underlying mail carrier, infrastructure/monitoring providers, regions, contracts, access roster and international-transfer safeguards.]
Retention — what the app does now
There is no automatic inactivity, Free-draft, cancellation or failed-payment deletion. Most records, history and uploaded files have no app-defined time-based purge. Customers can explicitly delete a project; this is not a complete account/file/vendor deletion process and some files may remain. Undo removes selected action-history entries but saved versions/activity can remain. Raw voice audio is not saved by app code; in-memory transcripts have no durable transcript table, but saved answers/edits and external AI logs are separate. Voice tickets expire for use after five minutes but rows are not thereby deleted. Project-image links last one hour; template screenshot links ten minutes: expiry does not delete the files. Domain search cache is normally reusable for 60 seconds; entries older than one hour are removed only when a cache write runs. [UNVERIFIED L07: approve a lawful record/file/log/suppression retention and deletion schedule; vendor and backup copies are not covered by these app observations.]
Browser storage and privacy requests
Sign-in uses browser session storage mechanisms, including local storage; the app keeps intended navigation in session storage. The sidebar component can set a seven-day preference cookie; its use on each page and third-party cookies require review. Account settings allow profile correction, and project deletion is available. There is no verified self-service full-account deletion or complete personal-data export workflow. [REVIEW L08/L09: provide verified privacy contact, identity-check/request procedure, deadlines, rights/complaints, cookie inventory and consent approach; no sale/sharing, no-tracking or compliance claim is assumed.]