LoveShow

Privacy Policy

Last updated: 9/9/2026

1. Data Controller

The data controller for this Service is: - Name: LoveShow (individual/sole trader) - Privacy Contact Email: noreply@loveshow.life - Data Protection Officer: Not applicable

2. Personal Information We Collect

We collect the following types of personal information:

  • Account Information: name, email address, password (encrypted storage), phone number (optional), WeChat ID (optional), profile image.
  • Payment Information: transaction amount, payment status, Stripe customer ID, subscription information, points balance and transaction history. We do not store complete card numbers — card data is processed by our payment processor (see Section 5).
  • AI Generation Data: prompts, uploaded images, AI-generated images and audio, lyrics, couple photo inputs and outputs, emotional analysis data, love memoir content.
  • Communication Records: emails, tickets, and feedback you send to customer support.
  • Device and Network: IP address, device model, operating system, browser type, timezone, User-Agent.
  • Usage Behavior: page visits, feature usage, operation logs, session duration.
  • Session Data: session tokens, IP addresses, and User-Agent information for active sessions (7-day validity).
  • Third-Party Login: basic profile information obtained when logging in via WeChat OAuth.

3. How We Use Your Information

We use your personal information for the following purposes:

  • Providing and maintaining the Service (Legal basis: Contract performance)
  • Billing and payment processing (Legal basis: Contract performance)
  • Customer support (Legal basis: Contract performance / Legitimate interest)
  • Service notifications — billing, security, policy updates (Legal basis: Legitimate interest)
  • Security and fraud prevention (Legal basis: Legitimate interest)
  • Product optimization and analytics (Legal basis: Legitimate interest)
  • Legal compliance (Legal basis: Legal obligation)
  • Content moderation — scanning prompts and generated content for prohibited material (Legal basis: Legitimate interest)

4. Cookies and Tracking Technologies

We use the following types of cookies and tracking technologies:

  • Strictly Necessary: maintaining login sessions and core functionality. Cannot be disabled.
  • Functional: language preferences and personalized settings. Can be disabled via browser settings.
  • Analytics: anonymous usage statistics and product optimization via PostHog (https://posthog.com/privacy). Can be disabled via browser settings.

5. Sharing and Disclosure of Information

We do not sell your personal information, including as defined by applicable laws such as the CCPA. We only share your information in the following circumstances:

  • Service Providers: cloud computing, payment, customer support, and analytics vendors, all bound by confidentiality agreements. Payment card data is exclusively processed by our PCI-DSS compliant payment processor, Waffo Pancake, and is not stored on our servers.
  • AI Model and Safety Providers: OpenAI, Google Gemini, Suno, and Waffo Pancake process prompts and generation requests to provide AI features and pre-generation content-safety checks. Waffo's prompt scan is stateless and does not retain the original prompt after returning a verdict; each provider's own privacy policy also governs its processing.
  • Storage Providers: Cloudflare R2 and Volcano Engine TOS store user-uploaded and AI-generated content.
  • Legal and Regulatory Requirements: as required by law, court order, or lawful request from competent authorities.
  • Business Transactions: in the event of a merger, acquisition, or similar transaction, with advance notice and continued protection obligations.
  • With Your Consent: for other purposes with your explicit prior consent.

6. Data Security Measures

We implement the following security measures to protect your personal information:

  • Transmission Encryption: TLS/HTTPS for all data in transit.
  • Storage Security: passwords and sensitive data are encrypted or hashed (scrypt).
  • Access Control: principle of least privilege; employees bound by confidentiality agreements.
  • Content Moderation: all AI generation prompts and textual generation intents are scanned before processing with the Waffo Pancake Content Safety scan-prompt API. Generation proceeds only after an explicit allow verdict; review, block, or an unavailable moderation service prevents generation.

7. Data Retention Periods

We retain personal information for the following periods:

  • Account Information: during account validity; deleted or anonymized within 90 days after account deletion.
  • Transaction Records: retained for 5 years as required by tax and accounting regulations, then deleted or archived.
  • AI Generation Data (images, audio, prompts): retained for the duration of account validity; deleted upon account deletion.
  • Session Data: active sessions retained for 7 days; expired sessions automatically deleted.
  • Content Moderation Logs: retained for 12 months for security audit purposes, then securely deleted.
  • Customer Support Records: retained for 2 years, then securely deleted.

8. Your Data Rights

To exercise any of the following rights, please contact us. We will respond within 30 calendar days.

  • Right to Know: understand what data we collect and how we use it.
  • Right of Access: obtain a copy of your personal information.
  • Right to Correction: correct inaccurate or incomplete information.
  • Right to Deletion: request deletion of your data under certain conditions.
  • Right to Restrict Processing: pause data processing in specific circumstances.
  • Right to Data Portability: obtain your data in a machine-readable format.
  • Right to Object: object to processing based on legitimate interest or marketing.
  • Right to Withdraw Consent: withdraw consent for processing based on consent.

9. Marketing Communications and Opt-Out

With your consent, we may send marketing information related to new features, promotions, and service updates via email or in-app notifications. You may opt out at any time by clicking the "unsubscribe" link in emails, disabling marketing notifications in account settings, or contacting us. Opting out does not affect service-essential notifications such as billing and security alerts.

10. International Data Transfers

Our servers and service providers may be located in China, the United States (Cloudflare), and other jurisdictions. When transferring data across borders, we ensure data security through the following measures: signing data processing agreements incorporating EU Standard Contractual Clauses (SCCs); transferring only to recipients with equivalent levels of protection; and complying with applicable data transfer regulations.

11. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect information from children under 18. If you believe your child has provided us with information, please contact us immediately and we will delete it as soon as possible.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This policy applies only to information we collect directly. We are not responsible for the data practices of third parties and recommend reviewing their policies before use.

13. Changes to This Policy

If material changes are made, we will notify you at least 15 days in advance through platform announcements or your registered email, and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance.

14. Contact Us

- Privacy Contact Email: noreply@loveshow.life - Customer Support Email: noreply@loveshow.life - Service Hours: Monday to Friday, 09:00–18:00 UTC+8 This Privacy Policy is for reference only and does not constitute legal advice. We recommend having it reviewed by qualified legal professionals in your target market before formal publication. LoveShow · https://loveshow.life

Privacy Policy · LoveShow 520