Privacy Policy

This Privacy Policy explains how OnestoMedia B.V. ("Luvelano", "we", "us") collects and processes personal data when you use Luvelano Studio and the website at https://luvelano.com (the "Service"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

OnestoMedia B.V., registered with the Dutch Chamber of Commerce under number 90709063, Heerjansdampad 9, 6843 HT Arnhem, the Netherlands, is the controller for the processing described here. For any privacy question, contact nick@onestomedia.nl.

2. What we collect

• Account data — your name, email address and authentication details (including when you sign in with Google or Apple).
• Uploaded content — the product photos and brand materials you upload, and the AI models you compose.
• Generated content — the images and videos the Service produces, and related metadata (such as prompts, presets and quality scores).
• Billing data — subscription and payment status. Card details are handled directly by Stripe; we do not store full card numbers.
• Usage and technical data — log data, device and browser information, and how you interact with the Service, used to operate, secure and improve it.

3. Why we process it, and our legal bases

• To provide the Service (create your account, generate and store images) — performance of our contract with you.
• To take payment and manage subscriptions — performance of our contract and compliance with legal (accounting) obligations.
• To secure, maintain and improve the Service — our legitimate interest in a reliable, safe product.
• To communicate with you about service updates and support — performance of our contract and legitimate interest.
• For any optional marketing — only with your consent, which you can withdraw at any time.

4. Processors and sub-processors

We share personal data only with providers that process it on our behalf under a data processing agreement:

• Supabase — hosting, database, authentication and file storage.
• fal.ai — AI image and video generation (receives the product photos needed to generate Output).
• Stripe — payment processing and subscription billing.
• Anthropic — automated quality control of generated images (Claude vision).
• Vercel — hosting and delivery of the web application.

We do not sell your personal data.

5. International transfers

Some of these providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data.

6. How long we keep it

We keep account, uploaded and generated content for as long as your account is active, so the Service works for you. When you delete content or your account, we delete or anonymise the associated personal data within a reasonable period, except where we must retain certain records (for example invoices for tax purposes, typically seven years) or to establish or defend legal claims.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on our legitimate interests. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, contact nick@onestomedia.nl or use the controls in your account. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Cookies

We use a limited set of cookies and similar technologies. See our Cookie Policy for details.

9. Security

We take appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and database-level security rules. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the authorities of a breach where required.

10. Children

The Service is not intended for people under 18, and we do not knowingly collect their personal data.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide reasonable notice.

12. Contact

Questions about your privacy or this policy? Contact nick@onestomedia.nl.