Privacy Policy

Luvian ("Luvian", "we", "us", or "our") operates luvian.io and the Luvian application (collectively, the "Service"). This Privacy Policy explains what information we collect when you visit our marketing site or join our waitlist, how we use it, who we share it with, and the rights you have over it.

This is a first-draft policy intended to give you a clear, plain-language description of our current data practices. If you have any questions, contact us at luvsupport@luvian.io.

1. Information we collect

We collect only the information you choose to provide, plus a minimal amount of technical data:

• Waitlist signups. When you submit the waitlist form on this site, we collect your first name, last name (optional), work email address, and company name (optional).
• Technical metadata. Our serverless waitlist endpoint logs your IP address for abuse prevention and rate limiting (maximum 3 submissions per IP per 15 minutes). IP addresses are held in short-lived in-memory state and are not persisted to long-term storage.
• Email correspondence. When you email luvsupport@luvian.io, we retain your message and contact information so we can respond.

We do not use cookies, analytics trackers, advertising pixels, or session-replay tools on this marketing site at this time. If we add analytics in the future, this policy will be updated and the change disclosed.

2. How we use your information

We use the information you provide for the following purposes only:

• To add you to the Luvian waitlist and notify you when access becomes available.
• To send transactional product updates related to your waitlist status.
• To respond to support inquiries you initiate.
• To detect, prevent, and mitigate abuse of the signup form.

We do not sell your personal information, and we do not use it for third-party advertising.

3. How and where your data is stored

When you submit the waitlist form, your information flows through the following systems:

• Vercel hosts this site and runs the serverless waitlist endpoint. Request metadata may appear in Vercel access logs subject to Vercel's own retention policies.
• Supabase stores your name and email as a pre-provisioned but disabled account that we activate manually once you are approved off the waitlist. The Supabase project is hosted in a region we select for our deployment.
• Slack receives a real-time notification of new signups via an internal webhook so our team can review and approve them. The notification contains the same fields you submitted on the form.

Each of these subprocessors maintains its own security and privacy posture. We restrict access to your information to Luvian personnel who need it to operate the Service.

4. Retention

We retain waitlist information for as long as your account is pending or active. If you ask us to remove you from the waitlist, we will delete the corresponding Supabase record and remove your information from our active systems within 30 days. Backup copies and immutable logs may persist for a limited additional period before being overwritten.

5. Your rights

Depending on where you live, you may have rights under laws such as the GDPR (EU/UK) or the CCPA/CPRA (California), including the right to access, correct, delete, or port your personal data, and the right to object to or restrict certain processing. To exercise any of these rights, email luvsupport@luvian.io and we will respond within a reasonable timeframe.

6. Security

Traffic to and from luvian.io is served over HTTPS. Access to Supabase and Slack is restricted to authorized Luvian personnel using strong authentication. No method of transmission or storage is 100% secure, but we work to apply commercially reasonable safeguards.

7. Children's privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. International transfers

Luvian operates internationally, and your information may be processed in countries other than the one in which you reside. When required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

9. Changes to this policy

We may update this Privacy Policy as our Service evolves. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will provide additional notice (for example, an email to waitlist members).