Privacy policy
This is a draft text. It still has to be reviewed legally and is not binding. The Dutch version prevails.
AI
AI drafting is optional: after confirmation, Lovable AI and the selected model service process only your typed instruction. PDFs, addresses and account details are not automatically sent. Avoid sensitive data and check the draft before saving or sending.
2. Only what your letter needs
We process the recipient’s name and postal address, document or template and only fields used in the letter. Email and phone are not recipient address fields. Merge values are not stored again as separate letter data. You determine content, recipients, purpose and lawful basis. Do not supply unnecessary or sensitive data.
3. Your instructions
We process data only on your documented instructions: prepare, print, place in an envelope and hand over to bpost. No sale, reuse or AI training on letter content. We notify you of instructions we believe breach data protection rules.
4. Retention and deletion
By default, PDFs, name, address, reference and merge data are erased 30 days after recorded hand-over. Choose 7 to 90 days in Settings. Daily cleanup may take up to 24 hours after that deadline. Unposted letters remain necessary for processing. Status history, letter number and financial records remain. Your templates and account details remain until deletion or account closure. Database backups may contain earlier data for approximately 14 days; storage files are not part of those backups.
5. Access and security
Files are private and isolated by customer. Temporary download links expire after 10 minutes. Production staff access only what their task requires and are bound by confidentiality. Traffic uses HTTPS. Exact at-rest file encryption, hosting region and underlying processors still need written confirmation; no unverified guarantee is made here.
6. Other providers
Lovable Cloud provides sign-in, storage and service hosting. bpost receives the paper letter and address for delivery. Google receives technical connection data when webfonts load. You may use an available sign-in provider. Your own webhook receives status data only if you configure it. Direct CRM imports and AI account access are not active. The complete subprocessor list and possible transfers still need confirmation. We notify you before adding a subprocessor and allow objections.
9. Visits to this site
Lovable collects for us pages visited, referrals, country, browser, operating system, device type, time on site, page speed, errors and clicks on buttons and links. Without a consent banner these are recorded for every visitor. It uses no cookies, stores nothing on the visitor’s device, retains no IP addresses and identifies nobody. Detailed data lasts 90 days and daily summaries one year. Lovable’s privacy policy explains its handling. Sign-in does store your session in your browser and your language choice is stored locally.