Trust
Trust & Privacy
This page is maintained by the Content Workflow Builder team to answer common security and privacy questions. It describes our current practices and is not an independent certification.
Data we collect
The workflow builder runs primarily in your browser. The inputs you type (topic, audience, goals) are sent to our AI provider to generate a workflow and are stored in your browser's sessionStorageso the results page can render them. We do not require an account.
AI processing
Generation and inline chat are routed through the Lovable AI Gateway to an underlying model provider. Prompts are processed to produce a response and are not used by us for training. Avoid sending personal or confidential information in prompts.
Endpoint protections
Our chat endpoint enforces strict input validation, message and payload size limits, and same-origin checks to reduce abuse. Traffic is served over HTTPS.
Cookies & analytics
We do not set marketing or advertising cookies. The app may use essential storage (such as sessionStorage) needed for core functionality.
Retention & deletion
Workflow inputs and results stored in your browser are cleared when you close the tab or clear site data. We do not maintain a server-side user database for this app.
Security contact
Found a security issue? Please report it via the About page contact details. We aim to acknowledge reports promptly.
Shared responsibility: the Lovable platform provides hosting, transport security, and infrastructure controls. The practices above describe what the app owner controls and configures. This page is editable content maintained by the app owner.