What we store, and why.

When you join the Pro waitlist we store your email address, the plan you picked (monthly or yearly), the page you signed up from, and the consent text you agreed to with the time you agreed. We use it only to email you once when Pro opens, and we delete it after launch or sooner when you ask.

Your email address, name and sign-in method, and the content you create: releases, roadmap items, comments, settings and team invitations. We keep it while your account exists. Deleting a workspace in Settings removes its content.

Subscribers give us their email address so we can send release emails; every email has an unsubscribe link. The widget counts views, opens and badge clicks per changelog together with the website it runs on. It sets no cookies; it remembers which releases you've seen in your own browser. Votes and comments on a public roadmap store the name you enter.

For the MCP server, the public API and our discovery documents we count calls per day: which tool or endpoint, whether an API key was used, the result, and the client name and user agent an agent sends — after removing anything that looks like an email address, IP address or id. We never store IP addresses for this. These counts are kept 400 days.

To enforce rate limits we use a salted, one-way hash of your network address, which we keep for about two hours. API keys are stored only as a one-way hash.

Stripe handles payments, tax and receipts. We store your plan, its renewal date, your card brand, last four digits and expiry date, and your invoices. We never see full card numbers.

• Lovable Cloud — hosting, database, sign-in and file storage.
• Stripe — payments, tax and invoices.
• Lovable AI — drafts release notes from your GitHub activity, only for workspaces that connect a repository.

You can see, change or delete your data from the dashboard, unsubscribe from any changelog email, and ask us to remove a waitlist entry or send you a copy of what we hold about you. See also our press page for who we are.