Privacy Policy

This policy explains what information loving collects, why we collect it, who processes it, and how you can manage it. It applies to merchants and their staff using the loving platform, to visitors of our website, and to shoppers who use storefronts hosted by loving.

Where loving processes shoppers' data on behalf of a merchant's store, the merchant is the controller of that data and this policy describes our role as processor; the Data Processing Addendum governs that relationship in detail.

Information we collect

Account information. Your name, email address and sign-in identifiers (a Google account or one-time email codes). Optional profile details you add, such as a photo or preferred language.

Store and commerce data. The products, collections, orders, customers, inventory, shipping configuration, media, pages and settings you create while running your store. Orders include shipping and billing addresses and contact details of the buyer.

Prompts and AI interactions. The messages, files and images you send to loving's AI features — the store builder, image editor, writing assistant, translation and the shopping assistant — and the output they produce.

Messages and reviews. Support conversations between shoppers and a store (including attachments), and product reviews with any photos attached.

Usage and device information. Logs, approximate location derived from your IP address, browser type and language preference, used to operate and secure the service. loving runs no analytics or advertising trackers (see the Cookie Policy).

How we use information

We use your information to provide and improve the platform: building and hosting your storefront, processing orders and payments, sending transactional emails (order confirmations, shipment updates, invoices, staff invites and sign-in codes), metering AI usage for billing, preventing fraud and abuse, and providing support.

We do not sell your personal information, we do not use your store's private data to advertise to third parties, and we send no marketing email.

AI features and model providers

loving's AI features are powered by third-party model providers: Anthropic (the agent that designs and manages your store) and OpenAI (image editing, writing assistance, translation and the storefront shopping assistant). The content you submit to an AI feature — prompts, files, images and relevant store context — is sent to the relevant provider to generate the response. Providers process this data under our agreements with them; we do not permit them to use it to train their models where the provider offers that control.

Sub-processors

We use a small set of service providers to operate the platform — payment processing, email delivery, shipping, printing, media storage and hosting. The current list, and what each processes, is maintained at Sub-processors.

Merchants and their customers

When shoppers create an account, place an order, write a review, chat with a store's assistant or contact its support, that data belongs to the merchant's store. loving processes it to run the storefront: accounts, carts, checkout, order history and tracking, reviews, favorites and support conversations.

Merchants are responsible for complying with the privacy laws that apply to their own customers, including publishing accurate store policies (loving seeds editable defaults). Shoppers should direct requests about a store's data to that store first; we assist merchants in answering them.

Payments

Payments are processed by Stripe. loving never sees or stores full card numbers — we record only transaction metadata (amounts, status, the card's brand and last four digits) needed for orders, refunds, disputes and fees. Merchant payouts run through the merchant's own Stripe account. Stripe processes payment data as an independent controller under its own privacy policy.

Cookies and browser storage

We use a small number of first-party cookies and browser-storage entries: session cookies for merchant sign-in, and preference entries that remember your language, your last-used store, your cart and your storefront sign-in. We set no third-party advertising or analytics cookies. The full inventory is in the Cookie Policy.

Data retention and deletion

Your data is retained while your account or store is active. Deleting a store starts a 30-day recovery window, after which the store and its data — catalog, orders, customers, media, conversations and builder history — are permanently deleted from our systems. Some records (for example invoices and payment ledger entries) may be retained longer where required for tax, accounting or legal obligations.

International transfers

Our infrastructure and sub-processors may store and process data in countries other than your own, including the United States. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

Security

Data is encrypted in transit. Sensitive credentials such as carrier and printer API keys are encrypted at rest. Gift card codes are stored only as hashes. Access to production data is restricted and audited.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to or restrict certain processing. You can exercise most of these directly from your dashboard (merchants) or your storefront account (shoppers); for anything else, contact us and we will respond within the timelines required by applicable law. If you are a shopper, your request may be handled together with the merchant who controls your data.

Children

loving is not directed to children under 16, and we do not knowingly collect their personal information as account holders.

Changes to this policy

We may update this policy as the product evolves; material changes will be announced in the dashboard before they take effect, and the "Last updated" date above will change.

Contact

Questions or requests: reach us from your dashboard, or reply to any email loving has sent you.