Privacy Policy — ZYQELVO

This Privacy Policy explains what personal data ZYQELVO collects, how we use it, who we share it with, and the choices you have.

1. Data we collect

Account data: email address, authentication identifier, and — if you sign in with Google — the basic profile information Google returns (name, avatar).
Content you create: prompts you submit and the plans generated for you, plus versions and edits you save.
Billing data: when you subscribe, our payment processor (Stripe) processes your payment. ZYQELVO stores only a subscription record (plan, status, period). We never see or store your full card number.
Technical data: IP address, browser type, and pages visited. Used to operate and secure the Service.

2. How we use data

To provide, maintain, and improve the Service.
To authenticate you and secure your account.
To generate AI plans using the prompts you submit.
To process payments and manage subscriptions.
To communicate service, security, and billing notices.

3. Subprocessors

ZYQELVO uses the following categories of subprocessors:

Lovable Cloud (Supabase): authentication, database, and hosting infrastructure.
Lovable AI Gateway: AI model access for content generation.
Stripe: payment processing and subscription management (only for paid users).
Error monitoring (optional): if configured, sanitized error events may be sent to a monitoring provider to help us diagnose failures. Prompts and generated content are excluded from monitoring payloads.

4. AI processing

Prompts you submit are transmitted to AI providers via the Lovable AI Gateway solely to produce your requested plan. We do not use your prompts or plans to train third-party models beyond what is necessary to fulfill your request.

5. Retention

Account and content data are retained while your account is active. When you delete your account, your projects, prompts, and versions are deleted. Some records (billing, security logs) may be retained for a limited period where required by law.

6. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. To exercise these rights, contact privacy@example.com. You may also delete your account from the Account settings.

7. Security

Data is transmitted over TLS. Access to production systems is limited to authorized personnel. Row-level security policies isolate each user's projects. No online service can be 100% secure; you use the Service at your own risk.

8. International transfers

Data may be processed in the United States or the European Union, depending on the infrastructure region assigned to the Service.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

Material changes will be announced by email or in-app notice.

11. Contact

Privacy questions: privacy@example.com.