Privacy Policy

1. Introduction

Foundational Creations ("Company," "we," "us," or "our"), a company registered and operating in India, respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, and safeguard your information when you access and use the LoveVerse application, website located at loveverse.cc, and all related services, features, and functionality (collectively, the "Service").

This Privacy Policy applies to all users of the Service, including visitors, registered users, and subscribers, regardless of how they access the Service (whether through our website, mobile applications, APIs, or any other means). Please read this Privacy Policy carefully and in its entirety. By accessing or using our Service, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your information as described in this Privacy Policy.

If you do not agree with any part of this Privacy Policy, you must not access or use the Service. This Privacy Policy should be read in conjunction with our Terms of Service, Refund Policy, End User License Agreement (EULA), Cookie Policy, and GDPR Compliance page.

We comply with applicable data protection laws and regulations, including but not limited to the Information Technology Act, 2000 (India), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 (India), the General Data Protection Regulation (EU) 2016/679 (GDPR), and other applicable privacy and data protection laws in the jurisdictions where our users are located.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you use the Service, including:

• Account Information: When you create an account using Google Sign-In, Apple Sign-In, or other authentication methods, we receive your name, email address, and profile picture from the authentication provider. You may also provide additional profile information such as a display name or preferences.
• Story Content: Personal stories, memories, descriptions, emotions, names, dates, and other narrative content you provide for the purpose of generating personalized songs. This content is used as input for our AI generation systems.
• Song Preferences: Your selections regarding music genre, mood, tempo, language, vocal style, and other creative preferences that guide the AI generation process.
• Photographs and Media: Images, photographs, and other media files you upload for use in photo collage and video creation features.
• Payment Information: When you make a purchase, payment details are processed by our third-party payment processors (Razorpay, Stripe, Apple, Google). We receive transaction confirmation details such as transaction ID, amount, date, and payment status, but we do not store your full credit card number, CVV, debit card details, or bank account information on our servers.
• Communications: Messages, feedback, support requests, bug reports, and any other communications you send to us via email, in-app messaging, or other channels.
• Love Letters and Poems: Content you provide or generate through our love letter and poem creation features.

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

• Device Information: Device type, model, manufacturer, operating system and version, unique device identifiers (such as advertising ID, device ID), screen resolution, and hardware specifications.
• Usage Data: Features accessed, pages viewed, buttons clicked, interaction patterns, frequency and duration of sessions, content generated, songs created, and user journey within the Service.
• Log Data: Internet Protocol (IP) address, browser type and version, browser language, referring and exit pages, access times and dates, crash reports, and system activity logs.
• Location Data: General geographic location derived from your IP address (country, region, city level). We do not collect precise GPS location data.
• Performance Data: Page load times, app performance metrics, error rates, API response times, and other technical performance indicators.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, local storage, and similar technologies. Please see our Cookie Policy for comprehensive details.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Authentication Providers: When you sign in using Google or Apple, we receive basic profile information authorized by you during the sign-in process.
• Payment Processors: Transaction status, payment confirmation, and billing details from Razorpay, Stripe, Apple, and Google payment systems.
• Analytics Services: Aggregated and anonymized usage data from analytics providers such as Google Analytics and Firebase Analytics.
• Advertising Partners: Information about your interactions with our advertisements on third-party platforms, if applicable.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision and Operation

• Create, maintain, and manage your user account
• Generate personalized songs, lyrics, music, and vocals based on your stories and preferences using AI technology
• Process your payments and manage your credit balance and purchase history
• Create photo collages and videos using your uploaded media
• Generate love letters, poems, and other content based on your inputs
• Store and deliver your generated content, including songs, lyrics, and media files
• Provide customer support and respond to your inquiries, feedback, and complaints
• Send transactional communications such as purchase confirmations, credit notifications, and account updates

3.2 Service Improvement and Development

• Analyze usage patterns, trends, and user behavior to identify areas for improvement
• Improve and optimize the performance, quality, and reliability of our AI models and generation algorithms (using anonymized and aggregated data where possible)
• Identify, diagnose, and fix bugs, errors, and technical issues
• Develop, test, and implement new features, products, and services
• Conduct research and analysis to enhance the user experience
• Monitor and analyze the effectiveness of our Service and content

3.3 Communication

• Send transactional emails, including purchase receipts, account verification, and password reset notifications
• Respond to your support requests, feedback, and inquiries
• Send marketing and promotional communications about our Service, new features, and special offers (only with your consent, and you may opt out at any time)
• Notify you of important updates to our Service, Terms of Service, Privacy Policy, and other legal documents
• Send service-related announcements, such as maintenance windows, security alerts, and policy changes

3.4 Legal, Security, and Compliance

• Comply with applicable legal obligations, regulatory requirements, and governmental requests
• Enforce our Terms of Service, EULA, and other legal agreements
• Detect, prevent, and address fraud, abuse, security threats, and unauthorized access
• Protect the rights, property, safety, and security of Foundational Creations, our users, and the public
• Resolve disputes and enforce our legal rights
• Maintain audit trails and records as required by applicable law

4. Legal Basis for Processing (GDPR and Applicable Law)

For users in the European Economic Area (EEA), United Kingdom (UK), and other jurisdictions that require a legal basis for processing personal data, we process your data based on the following legal grounds:

• Contract Performance (Article 6(1)(b) GDPR): Processing necessary to provide the Service you have requested, including account creation, song generation, payment processing, content delivery, and customer support.
• Legitimate Interests (Article 6(1)(f) GDPR): Processing for our legitimate business interests, including service improvement, analytics, fraud prevention, security, and marketing of our services (where such interests are not overridden by your rights and freedoms). We have conducted Legitimate Interest Assessments for each of these purposes.
• Consent (Article 6(1)(a) GDPR): Processing based on your explicit, informed, and freely given consent, including for marketing communications, non-essential cookies, and optional analytics. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Legal Obligation (Article 6(1)(c) GDPR): Processing necessary to comply with legal obligations, including tax and financial reporting, responding to lawful requests from authorities, and maintaining required records.

For users in India, we process your personal data in accordance with the Information Technology Act, 2000, the IT (Reasonable Security Practices) Rules, 2011, and the Digital Personal Data Protection Act, 2023, including obtaining your consent where required by these laws.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

5.1 Service Providers and Processors

We share information with third-party service providers who perform services on our behalf, subject to contractual obligations to protect your data and use it only for the purposes we specify:

• Cloud Infrastructure: Google Cloud Platform for application hosting, data storage, and computing resources.
• AI Services: OpenAI, Anthropic, and similar providers for natural language processing, text generation, and AI-powered content creation. We share your story content and preferences with these providers to generate your personalized songs.
• Voice Generation: ElevenLabs and similar providers for AI-powered vocal synthesis and text-to-speech services.
• Payment Processing: Razorpay, Stripe, Apple, and Google for secure payment processing and transaction management.
• Analytics: Google Analytics and Firebase Analytics for usage insights, performance monitoring, and service optimization.
• Media Storage: Cloudflare R2 for secure storage and delivery of generated audio files, images, and media content.
• Email Services: Email delivery providers for transactional and marketing communications.
• Stock Images: Pexels and similar royalty-free image providers whose images may be incorporated into the Service interface, backgrounds, and graphics.

5.2 Legal Requirements and Protection of Rights

We may disclose your information when required or permitted by law, including to:

• Comply with any applicable law, regulation, legal process, subpoena, court order, or governmental request
• Enforce our Terms of Service, EULA, and other agreements
• Protect the rights, property, safety, and security of Foundational Creations, our users, and the public
• Detect, prevent, or address fraud, security, or technical issues
• Respond to claims that any content violates the rights of third parties
• Cooperate with law enforcement or regulatory authorities in connection with investigations of illegal activity or violations of our policies

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, dissolution, or sale of all or a portion of our assets, your information may be transferred to the acquiring entity or successor. We will notify you of any such transfer and any choices you may have regarding your information through email and/or a prominent notice on our Service.

5.4 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so. You may withdraw your consent at any time by contacting us at support@loveverse.cc.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law. Our specific retention periods are:

• Account Data: Retained for as long as your account is active. Upon account deletion, your account data will be permanently deleted within thirty (30) days, subject to backup removal schedules.
• Generated Content (Songs, Lyrics, Media): Retained for as long as your account is active or as needed to provide the Service. Upon account deletion, generated content will be deleted within thirty (30) days.
• Story Content and Inputs: Processed immediately for song generation purposes. Raw story content is not permanently stored after the generation process is complete, though anonymized derivatives may be retained for service improvement.
• Payment Records: Retained for as long as required by applicable tax, accounting, and financial reporting laws, typically seven (7) years in India.
• Usage Data and Analytics: Identifiable usage data retained for up to two (2) years. Aggregated and anonymized analytics data may be retained indefinitely.
• Communication Records: Support tickets and correspondence retained for up to three (3) years after resolution for quality assurance and legal purposes.
• Log Data: Server logs retained for up to ninety (90) days for security and troubleshooting purposes.

When personal data is no longer needed for the purposes for which it was collected, or when you request deletion, we will securely delete or anonymize the data in accordance with our data destruction procedures.

7. Your Rights and Choices

7.1 Rights Available to All Users

Regardless of your location, you have the following rights:

• Access: You may request a copy of the personal data we hold about you.
• Correction: You may request correction of inaccurate or incomplete personal data.
• Deletion: You may request deletion of your account and associated personal data, subject to our legal obligations to retain certain data.
• Opt-Out of Marketing: You may unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us at support@loveverse.cc.
• Cookie Preferences: You may manage your cookie preferences through our cookie consent banner or your browser settings.

7.2 Additional Rights for EEA/UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you have additional rights under the GDPR:

• Data Portability: You may request your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller.
• Restriction of Processing: You may request that we restrict the processing of your personal data in certain circumstances.
• Right to Object: You may object to the processing of your personal data based on our legitimate interests.
• Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
• Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

For detailed information about your GDPR rights, please visit our GDPR Compliance page.

7.3 Rights for Indian Residents

Under the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000, residents of India have rights including:

• Right to Access: You may request information about your personal data being processed and a summary thereof.
• Right to Correction and Erasure: You may request correction of inaccurate data and erasure of personal data that is no longer necessary.
• Right to Grievance Redressal: You may file a complaint with our Grievance Officer or with the Data Protection Board of India.
• Right to Nominate: You may nominate another individual to exercise your rights in the event of your death or incapacity.

7.4 Rights for California Residents (CCPA/CPRA)

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information.
• Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
• Right to Opt-Out of Sale: We do not sell your personal information. If this changes, we will provide a clear opt-out mechanism.

To exercise any of these rights, please contact us at support@loveverse.cc with the subject line "Privacy Rights Request." We will respond to your request within the timeframe required by applicable law (typically thirty (30) days, extendable in complex cases).

8. Data Security

We implement comprehensive technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, destruction, loss, and other forms of unlawful processing:

8.1 Technical Measures

• Encryption of data in transit using TLS 1.3 (Transport Layer Security)
• Encryption of data at rest using AES-256 (Advanced Encryption Standard)
• Secure authentication protocols and session management
• Regular security assessments, vulnerability scans, and penetration testing
• Intrusion detection and prevention systems (IDS/IPS)
• Web Application Firewall (WAF) protection
• Secure cloud infrastructure with SOC 2 compliance
• Regular software updates and security patch management
• Secure API design with authentication, rate limiting, and input validation

8.2 Organizational Measures

• Data protection and security awareness training for all team members
• Access controls based on the principle of least privilege
• Multi-factor authentication for administrative access
• Background checks for employees handling sensitive data
• Incident response procedures and breach notification protocols
• Vendor due diligence and security assessment for third-party service providers
• Regular policy reviews and updates
• Data Processing Agreements with all sub-processors

While we strive to protect your personal information using commercially reasonable measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security, and you acknowledge that you transmit data to us at your own risk. If you become aware of any security breach affecting your account, please notify us immediately at support@loveverse.cc.

9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including India and the United States, where our servers, service providers, and AI processing systems are located. These countries may have data protection laws that differ from the laws of your jurisdiction.

We ensure appropriate safeguards for international data transfers, including:

• Standard Contractual Clauses (SCCs): We use European Commission-approved Standard Contractual Clauses with our service providers located outside the EEA.
• Data Processing Agreements (DPAs): We have entered into DPAs with all service providers that process personal data on our behalf, ensuring compliance with applicable data protection laws.
• Adequacy Decisions: Where applicable, we rely on adequacy decisions issued by the European Commission for transfers to countries deemed to provide an adequate level of data protection.
• Technical Safeguards: All data transferred internationally is encrypted in transit and at rest.
• Supplementary Measures: Where required, we implement additional technical and organizational measures to ensure the protection of transferred data.

10. Children's Privacy

Our Service is not intended for or directed at children under the age of thirteen (13) years (or sixteen (16) years in the EU/EEA). We do not knowingly collect personal information from children below the applicable minimum age. If we become aware that we have inadvertently collected personal information from a child below the applicable minimum age without proper parental consent, we will take immediate steps to delete such information from our records.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at support@loveverse.cc, and we will promptly delete the information from our systems.

For users between the ages of thirteen (13) and eighteen (18) (or sixteen (16) and eighteen (18) in the EU/EEA), parental or guardian consent is required to use the Service. We may request verification of parental consent at any time.

11. Third-Party Links and Services

Our Service may contain links to, or integrations with, third-party websites, applications, and services that are not owned or controlled by Foundational Creations. These include but are not limited to Google, Apple, Razorpay, Pexels, social media platforms, and other external services.

We are not responsible for the privacy practices, content, or security of any third-party websites, applications, or services. This Privacy Policy does not apply to any third-party websites or services, and we encourage you to review the privacy policies and terms of any third-party services before providing them with any personal information or allowing them access to your data.

Our use of stock images from Pexels and similar providers is governed by their respective license agreements. The presence of such images on our Service does not imply any data sharing between us and these image providers beyond what is necessary for image delivery.

12. AI Processing and Your Data

The Service uses artificial intelligence and machine learning to generate personalized content. It is important that you understand how your data is used in this process:

• Input Processing: Your story content, preferences, and other inputs are sent to AI processing systems (including third-party AI providers) to generate your personalized songs. This processing is essential to provide the Service.
• Model Training: We may use anonymized and aggregated data derived from user interactions to improve our AI models and service quality. We do not use your identifiable personal stories or content to train AI models without your explicit consent.
• Third-Party AI Providers: Your inputs may be processed by third-party AI providers (such as OpenAI, Anthropic, ElevenLabs) under their respective data processing agreements with us. These providers are contractually obligated to process your data only for the purpose of providing their services to us and to maintain appropriate security measures.
• Automated Decision-Making: Our AI systems do not make automated decisions that produce legal effects or similarly significant effects on you. The AI generates creative content based on your inputs, and you have full control over whether to use, share, or discard the generated content.

13. Grievance Officer (India)

In accordance with the Information Technology Act, 2000, and the rules made thereunder, and the Digital Personal Data Protection Act, 2023, we have designated a Grievance Officer to address any concerns or complaints regarding the processing of your personal data:

• Grievance Officer: Foundational Creations Data Protection Team
• Email: support@loveverse.cc
• Subject Line: Grievance - [Your Concern]

The Grievance Officer will acknowledge your complaint within twenty-four (24) hours of receipt and will endeavor to resolve the complaint within thirty (30) days. If you are not satisfied with the resolution provided, you may escalate your complaint to the Data Protection Board of India or the appropriate regulatory authority in your jurisdiction.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our website with a new "Last Updated" date
• Sending an email notification to the address associated with your account for material changes
• Displaying a prominent notice within the Service

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the changes, you must discontinue using the Service and may request deletion of your account and data.

15. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy, our data practices, or if you wish to exercise any of your data protection rights, please contact us:

• Company: Foundational Creations
• Registered Location: India
• Support & Privacy Inquiries: support@loveverse.cc
• General Inquiries: hello@loveverse.cc
• Website: https://loveverse.cc

We will acknowledge receipt of your inquiry within forty-eight (48) hours and will respond substantively within thirty (30) days, or within the timeframe required by applicable law. For complex requests, the response period may be extended, and we will inform you of any such extension and the reasons for the delay.