Privacy policy

A Lovy holds some of the most personal things people share — their words, photos and voice. We treat that with care. This policy explains what we collect, why, and the choices you have. It applies to Lovy (the website and its letters).

What we collect

• What you put in a letter: names, your message, photos, captions, an optional voice note, dates, and an optional secret question and answer.
• Replies and reactions from the recipient (for example their answer to your question), shown to the sender on their private page.
• Payment information is collected and processed by Razorpay. We receive confirmation of payment, the amount, method type (e.g. UPI or card) and a transaction reference — never your card number, UPI PIN or bank credentials.
• Usage information: anonymous events such as which steps of the creator were used, whether a letter was opened, and which parts were viewed; an approximate country and city, and the type of device (to show the right price and understand where Lovy is used — never your exact location); your IP address (to prevent abuse); and a random identifier stored in your browser. We do not create accounts or profiles.
• Your email, if you choose to give it: used only to send you your letter's links (and again if you ask on the “Lost your link?” page). Never shown to the recipient, never used for marketing, never shared or sold.
• Your browser's storage keeps your draft and the links of letters you've sent, on your device only. We don't use advertising cookies.
• Visitor statistics: we count page visits with Vercel Web Analytics, which uses no cookies and records only the page type, country, device and where the visit came from — never the address of your letter or your private key.

How we use it

• To create, store and show your letter to whoever has its link.
• To take payment, prevent fraud and abuse, and handle refunds and support.
• To understand, in aggregate, how Lovy is used so we can improve it. Our internal dashboards show outcomes, not the contents of letters.

We never sell your data, and we never use your letters for advertising.

Who can see your letter

Letters are private by default: anyone who has the link can open it, so share it only with the person it's for. You can add a secret question so only they can open it. Letters are not listed or indexed by search engines.

Service providers

We use trusted providers to run Lovy, who process data only to provide their service to us:

• Razorpay — payments.
• Vercel — hosting and file storage (photos and voice notes).
• Neon — database.
• An AI provider via the Vercel AI Gateway — only if you choose the optional writing help, and only for the text you give it.

Some of these providers may store data outside India.

How long we keep it

Sealed letters are kept so they can be reopened. Unpaid drafts that were created on our servers may be deleted after 90 days. Payment records are kept as long as required by law. You can ask us to delete a letter at any time.

Your choices and rights

You can ask us to access, correct or delete the data in a letter you sent, or a letter you received. Write to lovy.letters [at] gmail.com with the letter's link. Please only upload photos and voice recordings you have the right to share, and that the people in them are comfortable with.

Children

Lovy is meant for people aged 18 and over. We don't knowingly collect data from children.

Security

Data is sent over encrypted connections, letters live behind unguessable links, and photos and voice notes are kept in private storage. No system is perfectly secure, but we work hard to protect what you share.

Grievance officer

For any privacy concern or grievance, email lovy.letters [at] gmail.com. We acknowledge grievances within 48 hours.

Changes

If we change this policy, we'll update the date above. See also our Terms.