This Privacy Policy explains how LoveEnvelope handles personal data. The service is operated by Outis (CNPJ 66.187.833/0001-11), a Brazilian operator, so the Brazilian General Data Protection Law (LGPD) may apply alongside privacy rights available in your location.

1. Controller and Contact

Outis (CNPJ 66.187.833/0001-11) is the controller responsible for deciding how personal data is used in LoveEnvelope. Privacy and data-rights requests can be sent to support@loveenvelope.com.

2. Data We Collect

• Account data, such as email address and name.
• Gift content you provide, such as photos, messages, names, dates, music and links.
• Order data, such as order status, price, Stripe checkout identifiers and support history.
• Payment data processed by Stripe. We do not store full card numbers.
• Technical data, such as IP address, browser, device, cookies, logs and analytics events.

3. Why We Use Data

• To create, host, edit and deliver your LoveEnvelope.
• To authenticate your account and keep it secure.
• To process purchases, refunds, disputes and customer support.
• To send transactional emails, including login codes and gift-ready notices.
• To prevent fraud, debug errors, improve performance and understand product usage.
• To comply with legal, tax, accounting, security and payment obligations.

Where LGPD applies, the legal bases may include contract performance, legitimate interest, legal obligation, consent for optional cookies or marketing, and regular exercise of rights.

4. Service Providers

We do not sell personal data. We share data only as needed with service providers such as Cloudflare for hosting, database and storage, Stripe for payments, Cloudflare Email Service for transactional emails, and analytics or error-monitoring providers when enabled. We may also share data if required by law, payment network rules, security investigations or valid legal requests.

5. International Transfers

Your data may be processed in Brazil, the United States and other countries where our providers operate. When LGPD applies, we use contractual, technical and organizational safeguards intended to protect international transfers.

6. Retention and Deletion

We keep data for as long as needed to provide the service, maintain your envelope, resolve support issues, prevent fraud and meet legal or accounting requirements. You can request deletion of your account or envelope content by contacting support, subject to legally required retention.

7. Your Rights

Depending on your location and the laws that apply, you may request access, correction, deletion, portability, information about sharing, objection or restriction of processing, and withdrawal of consent. Under LGPD, you may also petition the Brazilian National Data Protection Authority (ANPD).

To exercise rights, email support@loveenvelope.com.

8. Cookies and Analytics

We use essential cookies for account access, security and service operation. Optional analytics and advertising pixels load only after consent where our consent banner is shown. You can block cookies in your browser, but some service features may stop working.

9. Security

We use technical and administrative safeguards to protect personal data, including access controls, provider security controls and encrypted transport. No online service can guarantee absolute security.

10. Children

LoveEnvelope is not directed to children under 13. Do not use the service to collect or share personal data from children without the consent and authority required by law.

11. Changes

We may update this Privacy Policy as the service, providers or legal requirements change. The latest version will be posted on this page.