Privacy Policy

§ 01Who We Are (Controller)

luv2h8 is operated by [Operating Entity — legal name, to be inserted] of [registered address, to be inserted], which is the data controller for personal data processed through the Platform. If we are required to appoint an EU/UK representative or data protection officer, their details will be published here. Contact us about privacy at [email protected].

§ 02Information We Collect

Information you provide

• Account: username, email, password (stored hashed by our auth provider), and optional profile details (display name, avatar);
• Optional demographics: country, age range, and gender, which you may provide to improve relevance;
• Your activity: votes, comments, suggestions, and follows;
• Communications: support requests and correspondence.

Information collected automatically

• Usage data: pages and features used, actions, and timestamps;
• Device & technical data: IP address, browser and operating system, and approximate location derived from IP;
• Log data: server logs of requests and errors;
• Cookies & similar technologies: as described in our Cookie Policy.

Information from third parties

• If you sign in with Google or Apple, we receive basic profile information (such as your email) as permitted by that provider;
• We use a third-party IP-geolocation service to suggest your country during sign-up (you can change it).

§ 03How We Use Your Information

• Operate, maintain, secure, and improve the Platform;
• Authenticate you and manage your account;
• Display your content and aggregate sentiment;
• Moderate content, including automated screening (see §6);
• Send service and, where you have opted in, notification or promotional emails;
• Detect and prevent fraud, abuse, and illegal activity;
• Comply with legal obligations and lawful requests.

§ 04Legal Bases (GDPR / UK GDPR)

If you are in the EEA or UK, our legal bases are:

Where we rely on consent, you may withdraw it at any time; where we rely on legitimate interests, you may object (see §9).

§ 05How We Share Information & Service Providers

luv2h8 does not sell your personal information. We share data with:

• Service providers (processors) who help us run the Platform under contract, including: Supabase (database, authentication, file storage), Vercel (hosting and delivery), Anthropic (AI-assisted content moderation and editorial generation), Resend (transactional and notification email), and an IP-geolocation provider (country suggestion). These providers may process data outside your country (see §11);
• Other users / the public: your username, avatar, votes, and comments are public by design;
• Legal authorities: when required by law, subpoena, or court order, or to protect rights, property, or safety;
• Business transfers: in a merger, acquisition, or sale of assets, with notice as required by law;
• With your consent in other cases.

§ 06Automated Moderation & AI

We use automated systems (including AI provided by Anthropic) to screen comments for prohibited content and to generate editorial summaries. Automated screening may delay or block a comment from appearing. These tools are not used to make decisions producing legal or similarly significant effects about you without human involvement; you can contact us to request review of a moderation decision at [email protected].

§ 07Data Retention

We keep personal data while your account is active and as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or anonymize your personal data within a commercially reasonable period, except where retention is required by law or for legitimate purposes such as fraud prevention or legal holds. Aggregated or anonymized data that no longer identifies you may be retained.

§ 08Data Security & Breach Notification

We use commercially reasonable technical and organizational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal-data breach is likely to result in a risk to your rights, we will notify the relevant supervisory authority and affected users as required by applicable law. You are responsible for safeguarding your account credentials.

§ 09Your Privacy Rights

Depending on where you live, you may have rights to:

• Access a copy of your personal data;
• Correct inaccurate or incomplete data;
• Delete your data (subject to legal limits);
• Port your data in a machine-readable format;
• Object to or restrict certain processing;
• Withdraw consent where processing relies on consent.

California (CCPA/CPRA)

California residents have rights to know, delete, and correct personal information, and to opt out of its "sale" or "sharing" for cross-context behavioral advertising. We do not sell or share personal information in this sense. We do not knowingly process the sensitive personal information of minors. You will not be discriminated against for exercising your rights.

To exercise any right, email [email protected]. We will respond within the time the law requires and may need to verify your identity. EEA/UK users may also lodge a complaint with their local data protection authority.

§ 10Children's Privacy

The Platform is for adults aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact [email protected] and we will delete it.

§ 11International Transfers

We and our service providers may process your data in countries other than yours, including the United States. Where required, we use appropriate safeguards (such as the European Commission's Standard Contractual Clauses and the UK Addendum) for such transfers. Contact us for more detail.

§ 12Third-Party Links

The Platform may link to or summarize third-party sites and news sources. We are not responsible for their privacy practices; review their policies before sharing information with them.

§ 13Changes to This Policy

We may update this policy. We will post the updated version with a revised effective date and, for material changes, provide notice where required by law. Continued use after changes take effect constitutes acknowledgment of the updated policy.