Privacy policy draft

Account and project information

We store account identity, organization membership, projects, conversations and saved instructions in Lovable Cloud. Sign-in stores session information in your browser. Identity providers used during sign-in receive the information necessary to authenticate you. Billing records, when available, include invoice references, credits, reservations and payment status; we do not ask you to enter card details here.

Project processing and external services

Explicit founder-approved engine actions send project instructions and relevant source to the independent coding engine hosted on Render. AI and sandbox providers may process material required for those actions. Temporary previews load generated code on a separate origin, and published apps may maintain their own browser-local data. Do not include secrets or sensitive personal information in prompts. Exact downstream providers, processing locations, retention and contractual safeguards must be reviewed before customer launch.

Private repository export, when explicitly requested and supported, sends validated source to GitHub. Stripe is not connected for customer payments today. If payments are enabled after acceptance, Stripe will receive payment, billing-address and tax information through its hosted payment pages.

Visitor analytics

Lovable's visitor analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. Page visits, referral sources, country, browser, operating system, device type, time on page, page-load speed and errors are recorded for every visitor. Detailed data is kept for 90 days and daily summaries for a year.

Our app reports errors to Lovable. Error reports are not a support message or a request to delete an account. No additional app interaction events or ad pixels were found in the reviewed application. Click-tracking status could not be verified; confirmation of whether clicks are recorded is required before approval.

Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

Other browser storage and external requests

Editable project prompts and generated demo-app data may be saved in browser storage. Clearing it can remove local drafts or demo records; cloud project records are separate. Google Fonts receives requests to serve our typefaces. Auth sessions and any explicitly opened external preview or GitHub/Render page follow their own service policies.

Required review before approval

We must establish a verified privacy contact, deletion/access request process, account and project retention schedule, subprocessors and data transfer safeguards, legal bases, age requirements and applicable regional rights. No working customer-support or privacy-request channel is offered yet; the owner must provide and verify one before commercial release. Rules vary by jurisdiction; qualified legal review is required. This draft is not a compliance attestation.