How we handle your data
The short version: we strip out your customers' details, use the rest only for your report, and delete your files within 30 days.
- 1
One purpose
We use your files only to produce your report.
- 2
No customer identities
Names, emails, phone numbers and links are stripped before anything is stored, and again before analysis.
- 3
No reuse or AI training
Your data is never sold, shared, combined with other clients' data or used to train AI.
- 4
Encrypted storage
Stored encrypted, with access limited to the founder.
- 5
Deleted within 30 days
Raw files are deleted within 30 days of delivery, and we confirm the deletion in writing.
Free samples follow the same rules: your file is used only for that sample, never shared, nothing about your brand is published without your written permission, and it's deleted within 30 days, confirmed in writing.
- 6
72-hour breach notice
If something goes wrong we tell you within 72 hours, and help you answer your customers' requests.
- 7
Where it's processed
Outside Canada, mainly in the United States. We support Quebec Law 25 privacy impact assessments.
Who handles your data
| Provider | What it does | Location |
|---|---|---|
| Lovable Cloud (built on Supabase) | Hosts the app, database and files | United States (AWS us-east-1, N. Virginia) |
| Anthropic (Claude) | Reads and labels cleaned feedback | United States |
| Google, via the Lovable AI gateway | Groups similar comments | United States |
| Microsoft 365 | Our email, if files arrive as attachments | Canada |
| Stripe | Invoices only; never sees feedback data | United States |
Our AI providers are contractually barred from training on your data.
What your report contains
Counts, trends and summaries in our own words. No quotes, names or order numbers.
Certifications
We don't hold SOC 2 or ISO 27001 yet. We'll complete your security questionnaire before you send any data.
Read the full privacy policy.