Your Account, Your Data, and How to Delete It

• Identity — the email address you signed up with, or the one your Google account provided, and a display name.
• Acceptance record — the date, version and origin of your confirmation that you are 18 or over and accept the policies.
• Conversations — the messages exchanged with each companion, and the durable facts distilled from them so she can remember you.
• Generated media — the photographs and videos produced for you, and the companions you created.
• Usage and entitlements — free allowances used, credits, and the period any purchased access runs for.

What it does not hold: card numbers, and raw IP addresses. Addresses are converted in-request into a country code or a keyed hash and the original is not stored.

Deletion is self-service and immediate. From your dashboard, choose to delete the account; there is no ticket to open, no email exchange and no reason to give.

What is erased, in the same operation:

• your profile and sign-in account;
• every conversation, including the memory distilled from it;
• the images and videos generated for you, as stored files and not merely as references;
• the companions you created;
• your usage counters, credits and subscription records;
• your affiliate data and referral records.

Erasure is immediate in the active databases and complete in any case within 30 days, as required by Art. 17 GDPR.

Two categories survive deletion. Both are disclosed in the Privacy Policy, and neither contains your conversations or your media.

• Content-moderation records. Logs of blocked prohibited-content attempts and the related metadata, retained as abuse and CSAM evidence under Art. 17(3)(b) and (e) GDPR. These exist so that a pattern of attempts cannot be erased by deleting an account and opening another.
• Transaction and billing records. Retained for 10 years to comply with Italian fiscal and accounting law (D.P.R. 600/1973). This is a legal obligation and is not waivable by request.

Where an enforcement decision affected a paying customer, an internal case file may be kept for as long as the transaction it concerns: it holds the account identifier, references to the records above and our own dated notes, and no conversation content, media or contact details.

• Account data — for the life of the account.
• Conversations and generated media — while the account is active, so your chats continue where you left them; erased on deletion.
• Analytics — up to 14 months, then deleted automatically.
• Server logs — up to 90 days, for security.

Data that is never collected cannot be leaked, subpoenaed or sold, so the shortest section of a privacy document is often the most useful one. Lovora does not ask for, and has no field for:

• Your legal name. A display name is whatever you type; it is never verified.
• An identity document. Age is confirmed by your own affirmation at sign-up, not by an ID upload. Nothing on this service asks you to photograph a passport.
• A phone number. There is no SMS verification and no number field.
• Your address. Nothing is shipped and no billing address is collected.
• Card details. They never reach this service at all — see section 6.
• Contacts, camera or microphone access outside a call. The browser asks for a microphone only if you start a voice call, and only for the duration of it.

Nothing is deleted automatically. An abandoned account keeps its conversations exactly as they were, and they remain readable when you sign back in — which is the behaviour most people want, and the opposite of what most people assume. If you want the data gone, deletion is the action that does it, and it is the one described in section 2. Access that was paid for still lapses on its own; see Billing.

If you are in the EU or EEA you may exercise, by emailing info@lovora.ai:

• Access (Art. 15) — a copy of your personal data.
• Rectification (Art. 16) — correction of inaccurate data.
• Erasure (Art. 17) — deletion, which you can also perform yourself from the dashboard.
• Restriction and objection (Arts. 18 and 21).
• Portability (Art. 20) — your data in a machine-readable form.

Where an automated decision has affected you — a suspension, for instance — you can ask for it to be reviewed by a person: see Safety and enforcement and the appeal form.

Card details never reach Lovora. A payment is completed inside Telegram or on a payment gateway's own page, and what is recorded here is the transaction reference, the amount, the plan and the provider's charge identifier — never the instrument. This is also why a refund is processed through the provider rather than by us re-charging anything. See Billing.

Data protection requests and questions: info@lovora.ai. The full, binding text is the Privacy Policy.