This document is a draft template and must be reviewed by qualified counsel before launch. It does not constitute legal advice or a claim of legal compliance.
1. Information we collect
Account details (name, email), videos and URLs you submit, generated content, usage data, and billing information processed by our payment provider.
2. How we use information
To provide and improve the Service, process your videos, manage subscriptions, send service emails, and prevent abuse.
3. Anonymous traffic statistics
We count page openings and visits by day, page and general device type for private administration. These counters do not store IP addresses, account identifiers, query strings or persistent visitor identifiers. A new site load counts as a new visit, not a distinct person. Editor previews and administration pages are excluded; Global Privacy Control opt-outs are respected. We cannot identify visitors who do not register.
4. AI processing
Transcripts and content are sent to AI service providers solely to generate your output.
5. Service providers
Lovable Cloud provides account services, private storage and application hosting. Lovable AI processes audio, transcripts and content to produce articles and translations. Stripe processes subscription payments and receipts; we do not receive or store full payment-card numbers.
6. Promotional-credit protection
We use a persistent browser identifier and coarse browser, device and time-zone signals, then apply a keyed server hash to detect repeated use of free credits. This pseudonymous signal is not proof of identity and is not shared with other users. Account-linked associations are removed with your account. An unlinked promotional claim may remain for up to 90 days after deletion. Shared-device false positives can be appealed in Settings; clearing browser data can affect detection.
7. Payments
Payments are handled by a third-party payment processor. We do not store full card numbers.
8. Data retention
We keep your saved content while your account is active. Temporary audio is removed after successful processing or cancellation; failed or interrupted cleanup may require a retry. Account deletion removes active account data and private files after identity verification. Database backups follow Lovable Cloud retention and are not immediately erased by account deletion; storage files are not covered by database backups. Stripe may retain financial records for its legal obligations. Exact financial and security retention periods must be finalized before launch.
9. Security and accounting records
AI operation records store token usage, pricing and reservation states. Cached AI results are retained for up to 30 days for safe recovery; security alerts are retained for up to 90 days unless resolved earlier. Minimal invoice records exclude account name, email and user identifiers but invoice references remain linkable at Stripe. Their legally required retention period must be configured for the business jurisdiction before launch.
10. International processing
Hosting, AI and payment providers may process data outside your country. Applicable contractual safeguards, provider terms and legally required disclosures must be reviewed for the business's jurisdiction before launch. We do not promise that hashing makes device signals anonymous or that AI processing meets every legal requirement.
11. Your rights
Depending on where you live, you may have rights to access, correct, export, object to processing or delete your data. Signed-in users can submit a privacy request in Settings and export articles through the workspace.
12. Contact
Use the account-request form in Settings for privacy and account reviews. A public privacy contact address and business legal details must be finalized before commercial launch.