Privacy policy
What data we keep and why, who we share it with and what your rights are — in plain words.
Last updated: 21 September 2026
Who is responsible
Lofvy is run by Miranberitan SRL (KBO/BCE 1009.119.704, BTW/TVA BE1009119704, Excelsiorlaan 71, B-1930 Zaventem). We are the controller of your personal data. Questions and requests: support@lofvy.com.
What we collect
- Account details: your email address and password. Your password is stored only as a secure hash; we cannot see it. If you sign in with Google, we receive your name, email address and profile picture from Google.
- Billing details: your name or company name and your country; for company accounts also the VAT number and billing address.
- Your content: the product photos you upload, your logo and brand settings, and the images and videos created from them.
- Usage data: your credit movements and generation history.
- Technical data: your IP address and browser details, used for security and to prevent abuse (for example, at most ten sign-ups per hour from one connection).
We never see your card details; payments are handled by the payment provider.
Why we use it
- To provide the service: opening your account, creating images and videos from your photos, keeping your credits. Legal basis: contract (GDPR Art. 6(1)(b)).
- To invoice you and keep accounting records. Legal basis: legal obligation (GDPR Art. 6(1)(c)).
- For security, abuse prevention and improving the service. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
We send you service emails: confirmation codes, password resets, invoices and important changes. Marketing emails only go out with your consent, and you can opt out at any time.
We do not use your photos or generated images to train AI models, and we do not sell them.
Who we share it with
We only share your data with the following providers, who work on our behalf and under contract to deliver the service:
- Hosting, database and file storage providers — accounts, the website and your files
- AI processing providers — creating images and videos from your photos
- Google — only if you sign in with Google
- An email delivery service — confirmation and service emails
- Stripe — payments
Some of these providers are located outside the European Economic Area, mainly in the United States. These transfers rely on legal safeguards such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
You can request the current list of our providers by writing to support@lofvy.com.
We do not share your data with anyone else unless the law requires it.
How long we keep it
Your account details, photos and creations are kept while your account is open. When you delete a creation in the app, it is also deleted from our storage.
To close your account, write to support@lofvy.com; we delete your account and content within 30 days. It disappears from backups no later than 30 days after that.
Invoices and accounting records are kept for the period required by Belgian law (10 years).
Security logs are kept briefly and used only to prevent abuse.
Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to its processing, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.
Send your request to support@lofvy.com; we reply within one month at the latest.
If you have a complaint, you can contact the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.
Cookies
We only use cookies the site needs to work: two cookies that keep you signed in (ms_oturum, ms_yenile) and a 10-minute security cookie during Google sign-in (ms_pkce).
We use no advertising, analytics or tracking cookies, which is why we do not ask for cookie consent.
Your language choice and some app settings are stored in your browser and are not sent to us.
Security
Connections are encrypted (HTTPS). Session cookies cannot be read by scripts on the page. Passwords are never stored in plain text. Your data is only accessed as far as needed to run the service and provide support.
Changes
If we change this policy, we update the date at the top of this page and tell you about important changes by email.
