Privacy policy

This policy explains what personal data Luvo processes when you use luvo.no, why we do it, and what rights you have.

Data controller

Luvo is run by Suksessklubb AS (org. no. 932 684 306), Tangen 24, 4608 Kristiansand, Norway. We are the data controller for the data described here. Send privacy questions to kontakt@luvo.no.

What data we process

• Account details: your email address, and your name if you log in with Google.
• Brand kit: the name of your shop, logo, colors, fonts, tone of voice and website address that you enter.
• Content you upload and create: product images, generated images, ads and copy.
• Subscription: plan, status and how your credits have been used. Company name, address and organisation number you enter at checkout are stored by Stripe and used on receipts.
• Technical data: your login session and language choice (cookies), and technical logs such as IP address and error messages, for operations and security.

Why we process it

• To provide the service you ordered (contract, GDPR Art. 6(1)(b)): account, login, storing your brand kit and content, generating images and copy, and your subscription.
• To meet legal requirements (Art. 6(1)(c)): accounting records under the Norwegian Bookkeeping Act.
• For operations, security and fixing errors (legitimate interest, Art. 6(1)(f)).

We don’t sell your data, and we don’t use it for advertising.

Service providers we use

These providers process data on our behalf, following our instructions, to run Luvo:

• Supabase: database, login and file storage (servers in Ireland).
• Railway: hosting of the website (servers in the Netherlands).
• Stripe: payments and subscriptions.
• Google: Gemini creates images, plus Google login if you use it.
• OpenAI: creates images if Google doesn’t respond.
• Photoroom: removes the background from product images.
• Anthropic: Claude writes ad copy and social media captions.

When you create images or copy, your product image, brand kit details and instructions are sent to the provider that creates the content.

Transfers outside the EEA

Some providers are based in the United States. Transfers there are based on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep data

• Your account, brand kit and content are kept for as long as you have an account. You can delete images, ads and copy yourself. If you ask us to delete your account, we delete it and your content within 30 days.
• Accounting records such as receipts and invoices are kept for 5 years, as required by Norwegian law.
• Technical logs are deleted on a rolling basis, normally within a few weeks.

Cookies

Luvo only uses cookies that are needed for the service to work: to keep you logged in and remember your language. We don’t use cookies for tracking or advertising. Stripe uses its own cookies on the checkout page.

Your rights

You have the right to access the data we hold about you, and to have it corrected, deleted or handed over in a machine-readable format. You can also ask us to restrict or object to the processing. Write to kontakt@luvo.no and we will reply within 30 days. If you believe we process data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

Changes

We update this policy when needed. Significant changes are announced by email.