Privacy Policy

Age screening

Participation is for people aged 13 and older. We check your entered birth date and retain an age group, screening time and notice version, not your full birth date. Self-declaration does not verify identity. Under-13 users must not create accounts, send personal details or upload content. Teen contracts and payout services may require additional guardian involvement.

Information used by the service

Accounts use email and authentication information. Creator profiles include names and supplied social details. Campaigns include business details, contacts and images. Applications, videos, reviews, messages, callback numbers and payment preferences are used to operate campaigns, support requests and manual payouts.

Campaign briefs and supplied campaign links and images are public when published. Campaign owners can view creators' applications and submitted videos. Administrators can access information needed to manage the service. Public rankings show abbreviated creator names and accrued posted-video earnings; those are not proof of money paid out.

Services and browser storage

Lovable Cloud supports hosting, authentication and storage. Stripe supports retained campaign payment processing. Apple, Google and Lovable support existing-account sign-in and may share account identifiers and email information according to your provider settings. Payouts are handled manually through the chosen payment service. Browser storage remembers welcome choices and account sessions. Short-lived age-screen cookies support eligibility checks; a refusal cookie discourages immediate retries. A browser cookie and a hashed browser/email key support the password-attempt pause; passwords are not stored in that attempt table. Hosting and service providers may process network and operational information.

Why information is processed

Information is used to operate accounts and campaigns, review submissions, arrange payments, answer support requests, protect the service and address applicable legal obligations. Where regional law requires a lawful basis, that basis depends on the purpose and the relevant jurisdiction; optional processing may require consent. The operator’s location and served countries must be confirmed before a complete regional disclosure can be provided.

Sharing and international processing

Published campaign details are visible to visitors; private contacts and payment preferences are restricted to authorized users and administrators. Service providers process information needed for hosting, sign-in, storage and payments. Information may also need to be disclosed to comply with law or protect rights. Providers may process information in other countries under their own arrangements. Provider locations, contractual safeguards and any sale, sharing or targeted-advertising disclosures still require an operational review; this draft does not assert that no tracking occurs.

Retention and security

Full birth dates entered for screening are not retained in the screening tables; age bands and screening records are retained. Expiring screening tokens and login-attempt records support short-lived safeguards. Account, campaign, uploaded-content, support and payment records have different operational and possible legal retention needs. A category-specific retention and deletion schedule, including backup handling, still needs to be finalized. Account removal does not necessarily erase campaign or accounting history. Access controls and private file storage reduce exposure, but no service can guarantee absolute security.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete or receive a copy of your information, object to or restrict processing, withdraw consent, or complain to a privacy regulator. Verification and lawful exceptions may apply. Use “Report an issue” to request review; do not submit identity documents unless a secure, necessary verification process has been arranged. Browser settings can limit stored data, although doing so may affect sign-in and eligibility safeguards. A direct privacy contact and regional request procedures remain to be supplied.

Privacy or child-data concerns

Use “Report an issue” to ask about access, correction, deletion, or suspected collection of a child's information. A parent or guardian should send that request, without including unnecessary child details. Requests must be reviewed; campaign and payment records may have legal retention obligations.

Policy completion

The operator's legal business identity, jurisdiction, direct privacy contact, retention schedule, vendor arrangements and applicable regional rights still require confirmation and legal review. This notice does not claim COPPA certification or guaranteed legal compliance.