1. Who we are
Lovelix is operated by Veltrix Global, which acts as the controller of your data.
2. Data we collect
Account data: your email address and optional display name.
Subscription data: plan, status, period end and payment records returned by our payment provider. We never store full card details.
Licence data: a hashed lookup value and an encrypted copy of your licence key, plus plan, status and expiry.
Activation data: a device identifier and device label supplied by the extension, activation time and last-seen time, used solely to enforce the two-device limit.
3. What the extension sends
The extension sends your licence key and a device identifier to our verification endpoints so we can return an authoritative status.
It does not transmit your page content, source code or keystrokes to Lovelix servers.
4. How we use data
To provide and secure the service, verify entitlements, prevent licence abuse, process payments and provide support.
We do not sell your personal data and do not use it for third-party advertising.
5. Processors
We use a managed cloud database and authentication provider, and a payment provider for billing. Each processes data only to deliver their part of the service.
6. Retention
Account, subscription and licence records are retained while your account exists and for as long as needed for legal, tax and anti-abuse purposes.
Revoked device records are retained for a limited period to prevent activation-limit abuse.
7. Your rights
You may request access, correction, export or deletion of your personal data, and object to certain processing. Contact us through the contact page and we will respond within the period required by applicable law.
8. Security
Licence keys are stored hashed for lookup and encrypted at rest for retrieval. Privileged operations run server-side under strict access rules, and row-level security scopes every record to its owner.
9. Changes
We will publish updates to this policy on this page and note the revision date.