Privacy Notice

Last updated: May 17, 2026

1. Who we are

This Privacy Notice is issued by PWA Builder for Lovable ("we", "us"). We act as the data controller for personal data processed through our website and service.

2. Personal data we collect

• Account data: email address, hashed password or OAuth identifier, display name.
• Service data: URLs you submit, generated PWA configs, conversion history, welcome-screen content, publish settings.
• Support data: messages you send us and their metadata.
• Usage/telemetry: log data, device identifiers, IP address, browser, referrer, and error reports.

3. Purposes and legal basis

• Provide the service (contract): account creation, generating PWA prompts, storing conversions.
• Security and fraud prevention (legitimate interests): rate limiting, abuse detection, audit logs.
• Product improvement (legitimate interests): aggregated analytics, debugging.
• Customer support (contract / legitimate interests): responding to inquiries.
• Legal compliance (legal obligation): tax, accounting, and lawful requests.

4. Data sharing

• Service providers / subprocessors: hosting, database, authentication, and email infrastructure.
• Merchant of Record: Paddle.com Market Limited acts as our reseller and Merchant of Record. Paddle handles payment processing, billing, subscription management, tax compliance, invoicing, and refund handling. See Paddle's Privacy Policy.
• Professional advisers: legal, accounting, and auditors where necessary.
• Authorities: where required by law or to protect our rights.

5. Data retention

We keep personal data only as long as needed for the purposes above. Account and conversion data is kept while your account is active and deleted or anonymized within a reasonable period after account closure, subject to legal retention obligations (e.g. tax records).

6. Your rights

Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent. EEA/UK users have the right to lodge a complaint with their supervisory authority. To exercise these rights, contact us at the address on our site; we aim to respond within one month.

7. International transfers

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, and row-level security on our database.

9. Cookies

We use essential cookies and local storage for authentication and session management. Paddle may set cookies during checkout to process payments.

10. Changes

We may update this notice from time to time. Material changes will be communicated through the service.