Privacy Policy

1. Introduction

Welcome to Lovely ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at lovelydesign.in.

2. Information We Collect

2.1 Information You Provide

When you create an account or use our services, we may collect:

• Account Information: Email address, name, profile picture (if using Google OAuth)
• Project Content: Text, images, and other content you add to your projects
• Payment Information: Payment details are processed securely through Razorpay; we do not store your full card details

2.2 Information Collected Automatically

When you use Lovely, we automatically collect:

• Usage Data: Pages visited, features used, time spent on the platform
• Device Information: Browser type, operating system, device type, screen resolution
• IP Address: Your IP address for security, analytics, and fraud prevention purposes
• Analytics Data: Anonymous visitor counts and interaction data for your published projects

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process payments and send transaction confirmations
• Send important updates about your account or projects
• Provide analytics for your published projects
• Respond to your inquiries and provide customer support
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Responses on Published Pages

A Lovely page is made to be opened by someone. When a person opens a published page, we record what they did on it and show it to the person who created that page, in their project's Responses tab. This is the point of the product: the creator made something and wants to know how it landed.

What is recorded

• What they did: which screens or sections they reached, what they tapped, which option they chose, whether audio or video was played, how far they scrolled
• What they wrote: if the page asks them to type a reply, the reply itself is recorded and shown to the creator
• How long they stayed: time spent on the page and on each screen, and whether they came back later
• Basic context: device type, operating system and browser, screen size, language and timezone, approximate country, and which app or site the link was opened from (for example WhatsApp or Instagram)
• An anonymous device identifier stored in the visitor's browser, so repeat visits from the same device can be grouped together

What is never recorded

• Passwords, one-time codes, card details, or any field that looks like a secret — these are excluded, including their length
• Individual keystrokes. Only the final contents of a field are kept, once the visitor moves on from it
• The visitor's IP address in readable form. It is converted into an irreversible hash used only to tell visits apart; the readable address is never stored
• Anything about the visitor from outside that page. We do not follow visitors across other websites, and we do not build advertising profiles

How it works

Activity is held in the visitor's own browser while they read, and sent to us once, when they leave the page. Nothing is transmitted continuously as they interact.

Who can see it

Only the person who created that page, and only for their own pages. Responses are not shared with other users, not sold, and not used for advertising. Visitors do not need an account, and we do not ask them for their name, email or phone number.

The creator can also replay a visit: we reload their own page and re-perform the taps that were recorded, so they can watch how it was explored rather than only read a list. This shows nothing we did not already record and already show them — it is the same information, presented as a picture instead of a list. It is not a recording of the visitor's screen, and we never capture one.

If you are the visitor

If you opened someone's Lovely page and want the record of your visit removed, write to hello@lovelydesign.in with the page link and roughly when you opened it, and we will delete it. You do not need an account to ask.

If you create pages: you are responsible for what you do with what people send you. If your page asks someone to write something back, please be straight with them that you will read it.

5. Information Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third parties who help us operate our platform (e.g., Supabase for authentication, Razorpay for payments, Cloudinary for image hosting)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly agree to share information

6. Data Security

We implement industry-standard security measures to protect your information:

• Secure HTTPS encryption for all data transmission
• Secure authentication via Supabase
• Payment processing through PCI-DSS compliant Razorpay
• Regular security audits and updates

How We Protect Your Media

Photos and audio you add to your projects are protected by the following measures:

• All media is transmitted exclusively over encrypted HTTPS connections
• Media is stored with our hosting provider (Cloudinary), where assets are encrypted at rest at the infrastructure level (AES-256 storage encryption)
• Uploads require an authenticated account and are rate-limited
• Images are processed on upload, which removes embedded metadata such as GPS location (EXIF) from stored copies
• Media URLs are long, randomly generated, and not guessable or enumerable

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Account Data: Retained until you delete your account
• Project Data: Retained until you delete the project or account
• Response Data: The detailed record of an individual visit (the taps, screens and replies described in section 4) is deleted 90 days after that visit. Summary counts — how many people opened the page, how long they stayed, the answers given — are kept for as long as the project exists, so a creator does not lose their keepsake
• Payment Records: Retained as required by law (typically 7 years)

Media Retention & Deletion

Uploaded media (photos and audio) is retained while the associated project exists. When a project or account is deleted, the associated media is deleted from our storage provider.

Removal requests — including from individuals who appear in uploaded photos — can be sent to hello@lovelydesign.in and are honored promptly.

8. Your Rights

You have the following rights regarding your personal information, including rights under the Digital Personal Data Protection Act, 2023:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Erasure: Request deletion of your account and data
• Objection: Object to certain processing of your data
• Grievance: Raise a grievance about how your data is handled and receive a response

To exercise these rights, please contact us at hello@lovelydesign.in

9. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you signed in to your account
• Remember your preferences
• Analyze how our service is used

On published pages we also use your browser's own storage (not cookies) to hold the anonymous device identifier described in section 4, and to hold a visit in progress until it can be sent. Clearing your browser data removes both, and the next visit simply starts fresh.

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our service.

10. Third-Party Services

We use the following third-party services:

• Supabase: Authentication and database (Privacy Policy at supabase.com)
• Razorpay: Payment processing (Privacy Policy at razorpay.com)
• Cloudinary: Image hosting and optimization (Privacy Policy at cloudinary.com)
• Vercel: Website hosting (Privacy Policy at vercel.com)

11. Children's Privacy

Lovely is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

12. International Data Transfers

Your information may be stored and processed in countries other than your own. By using Lovely, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: