Privacy policy

What we collect

• Account data: name, email address, account name and role.
• Product data: project names, slice settings, template metadata and publish history.
• Integration data: Klaviyo private keys, encrypted at rest with AES-256-GCM.
• Operational logs: correlation IDs, timestamps, outcomes and error codes — no email bodies.

What we do not collect

We do not store your uploaded design images on our servers — slicing happens in your browser and the resulting images go directly to Klaviyo when you publish. We do not sell data or run advertising trackers.

Why we process it

To provide the service, enforce allowance limits, keep the platform secure and comply with legal obligations. Payment processing, once paid plans launch, will rely on a third-party payment provider acting as an independent controller for transaction data.

Retention

Account and product data are kept while the account is active and for 30 days after deletion is requested. Security and audit logs are kept up to 12 months.

Your rights

You can export everything your account holds at any time from Account settings, and you can request correction or deletion. Deletion requests are completed within 30 days.

Sub-processors

• Lovable Cloud — database, authentication and hosting infrastructure.
• Klaviyo — only when you connect a brand and publish.
• A payment provider — payments and invoicing (not yet connected; no payment data is collected today).