Privacy for businesses
You remain the owner of your data. We process only what is needed to print and send your letters.
Data processing agreement, version 2026-11-12
1. Parties and service
This agreement is between your business as controller and Goedkoopverzenden BV, Provincieweg 360, 9550 Herzele, BE 1021.672.591, as processor for Envelopify. It covers the service and agreed retention period. Accept this version on behalf of your business in the portal. Contact: post@envelopify.be.
2. Only what your letter needs
We process the recipient’s name and postal address, document or template and only fields used in the letter. Email and phone are not recipient address fields. Merge values are not stored again as separate letter data. You determine content, recipients, purpose and lawful basis. Do not supply unnecessary or sensitive data.
3. Your instructions
We process data only on your documented instructions: prepare, print, place in an envelope and hand over to bpost. No sale, reuse or AI training on letter content. We notify you of instructions we believe breach data protection rules.
4. Retention and deletion
By default, PDFs, name, address, reference and merge data are erased 30 days after recorded hand-over. Choose 7 to 90 days in Settings. Daily cleanup may take up to 24 hours after that deadline. Unposted letters remain necessary for processing. Status history, letter number and financial records remain. Your templates and account details remain until deletion or account closure. Database backups may contain earlier data for approximately 14 days; storage files are not part of those backups.
5. Access and security
Files are private and isolated by customer. Temporary download links expire after 10 minutes. Production staff access only what their task requires and are bound by confidentiality. Traffic uses HTTPS. Exact at-rest file encryption, hosting region and underlying processors still need written confirmation; no unverified guarantee is made here.
6. Other providers
Lovable Cloud provides sign-in, storage and service hosting. bpost receives the paper letter and address for delivery. Google receives technical connection data when webfonts load. You may use an available sign-in provider. Your own webhook receives status data only if you configure it. Direct CRM imports and AI account access are not active. The complete subprocessor list and possible transfers still need confirmation. We notify you before adding a subprocessor and allow objections.
7. Rights, incidents and audits
We assist with access, correction and deletion requests, incidents and necessary assessments. We report confirmed breaches without undue delay with available information. We provide evidence of our obligations and cooperate with reasonable audits. Privacy actions record date, actor and action without letter contents.
8. End of service
We delete or return personal data on your instruction at the end of service, except records required by law. Contact post@envelopify.be. This agreement does not change your responsibility for the lawful basis of your mailings.
9. Visits to this site
Lovable collects for us pages visited, referrals, country, browser, operating system, device type, time on site, page speed, errors and clicks on buttons and links. Without a consent banner these are recorded for every visitor. It uses no cookies, stores nothing on the visitor’s device, retains no IP addresses and identifies nobody. Detailed data lasts 90 days and daily summaries one year. Lovable’s privacy policy explains its handling. Sign-in does store your session in your browser and your language choice is stored locally.