Privacy Policy

This Privacy Policy explains how LoveYouMake collects, uses, and protects personal data.

Data controller:

• Legal entity: SARL INTERSTELLAR
• Legal form: SARL
• Registered address: 10 RUE DE PENTHIÈVRE, 75008, PARIS
• Contact email: [email protected]

1. Data We Process

1.1 Account and Identity Data

• name;
• email address;
• profile image;
• account identifiers;
• email verification status.

1.2 Session and Security Data

• session token identifiers;
• session expiration timestamps;
• IP address;
• user-agent string.

1.3 Letter and Content Data

• letter title;
• sender name;
• letter content fields;
• design and personalization settings (font, color, sticker, envelope, media);
• selected paid features and credits spent.

1.4 Payment and Transaction Data

• purchased credit pack identifier;
• payment amount and currency;
• payment intent/session/event references (e.g., Stripe metadata);
• wallet balances and credit transaction logs.

1.5 Technical and Usage Data

• service logs and diagnostics necessary for reliability and fraud prevention.

1.6 Cookies and Tracking Technologies

We use strictly necessary cookies for authentication, session continuity, and security.

When enabled, analytics tags (for example via Google Tag Manager) are used to measure traffic and improve the service. Where required by law, non-essential tracking technologies are activated only after user consent.

2. Purposes and Legal Bases

We process personal data for:

1. service delivery and account management;
2. transaction processing and fraud prevention;
3. support, security monitoring, and abuse handling;
4. legal compliance and accounting obligations.

Applicable legal bases (GDPR) include:

• performance of a contract (account services, letter features, purchase fulfillment);
• legal obligations (accounting, tax, legal claims, anti-fraud obligations);
• legitimate interests (service security, abuse prevention, platform reliability);
• consent (where required for optional analytics or similar technologies).

3. Recipients and Processors

Data may be shared with:

• hosting and infrastructure providers, including Hetzner Online GmbH;
• authentication providers, including Google sign-in services where used;
• payment processors, including Stripe;
• subcontractors strictly necessary to operate the service.

4. International Transfers

Where providers process data outside the EEA, transfers are protected by appropriate safeguards, such as Standard Contractual Clauses and equivalent legal mechanisms where required.

5. Retention

Unless a longer period is required by law or legal necessity:

• account data is retained while your account is active, then archived or deleted within 36 months after closure;
• session/security logs are retained up to 12 months;
• payment and transaction records are retained up to 10 years for accounting and legal obligations;
• support and abuse records are retained up to 24 months after closure of the request;
• letter content is retained until deletion by the user or account closure, then removed from active systems within 90 days (subject to backups).

6. Data Subject Rights

Depending on applicable law, you may request access, rectification, erasure, restriction, portability, and objection.

You may also lodge a complaint with your local data protection authority.

We respond to privacy-rights requests within 30 days, subject to legal extensions when justified.

7. Security Measures

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, alteration, or loss, including:

• role-based access control;
• encrypted transport over HTTPS/TLS;
• monitoring and fraud-prevention controls;
• secure backups and incident response procedures.

8. Children's Data

The service is not intended for children under 16 years old without parental or legal guardian authorization where required by law.

If we learn that data has been collected in violation of this rule, we will take reasonable steps to delete it.

9. Policy Updates

We may update this Privacy Policy. Material changes are communicated through the website and/or user interface.

10. Contact

For privacy requests or complaints:

• Email: [email protected]
• Postal address: 10 RUE DE PENTHIÈVRE, 75008, PARIS