Legal
Privacy Statement
Last updated: 28 August 2026 - Lovelio Pty Ltd ACN 701 461 298
This statement sets out what personal data we collect, the purposes for which it is processed, and how it is protected. It has been written in clear, accessible language while maintaining legal accuracy.
1. Who we are
Lovelio is operated by Lovelio Pty Ltd ACN 701 461 298. We provide an AI-powered recruitment platform used by businesses to manage job postings, candidates, and hiring workflows.
For privacy-related queries, please contact us at hello@lovelio.ai.
2. Scope of this statement
This Privacy Statement applies to:
Platform and developer users - people who register for or use Lovelio, its APIs, integrations, extension, or developer portal.
Candidates and talent-pool members - people who apply through Lovelio, are imported or sourced by a customer, join a talent pool, or otherwise enter a customer's recruitment records.
Other recruitment contacts - client contacts, referees, interviewers, call participants, and people whose details are recorded as part of a recruitment workflow.
Prospective customers - people who request a demo, contact us, or opt into product news.
For customer-controlled recruitment records, the Lovelio customer that collected or uploaded the record normally determines why and how it is used and acts as data controller. Lovelio Pty Ltd processes that data on the customer's behalf as data processor. Queries about a specific application or customer-held record should normally be directed to that customer first.
3. Data we collect
3a. Platform users (businesses and teams)
| Data | Purpose |
|---|---|
| Name and email address | Account creation and management |
| Payment information | Processed by our payment provider for paid subscriptions (card details are not stored by us) |
| Usage data | Platform improvement and performance monitoring |
| IP address and device information | Security, fraud prevention, and analytics |
| Correspondence with us | Support and account management |
3b. Job applicants
| Data | Purpose |
|---|---|
| Name, email address, telephone number, location, and public professional profile details | Identification, sourcing, matching, and communication |
| CV, resume, and cover letter | Assessment of suitability for a role |
| Interview recordings or transcripts where enabled, notes, forms, references, assessments, matching results, and evaluation scores | Supporting recruitment workflows and customer decisions |
| Application status and history | Pipeline management and record-keeping |
Customer recruitment data is controlled by the Lovelio customer. We process it on their behalf in our capacity as data processor.
3c. Other contacts and prospective customers
| Data | Purpose |
|---|---|
| Name, work contact details, role, company, and correspondence | Recruitment workflows, responding to enquiries, sales follow-up, and support |
| Marketing preference and unsubscribe history | Sending optional product news only where the person has opted in, and respecting later opt-outs |
4. How we use personal data
Personal data is used for the following purposes:
- Providing, maintaining, and improving the Lovelio platform.
- Processing payments and administering subscriptions.
- Sending transactional communications, including account verification, sign-in and password recovery messages, recruitment communications, and billing notifications.
- Responding to support requests and enquiries.
- Analysing usage patterns to improve the product, using aggregated or anonymised data where possible.
- Fulfilling our legal and regulatory obligations.
We do not sell personal data to third parties, nor do we use it for advertising or marketing purposes without consent.
5. Legal bases for processing
Depending on your location and the nature of the data, we rely on the following legal bases for processing:
Performance of a contract - to deliver the services you have subscribed to.
Legitimate interests - to improve the platform, prevent fraud, and operate the business securely.
Legal obligation - where processing is required by law, such as the retention of financial records.
Consent - for optional communications such as product updates or marketing correspondence.
Users subject to GDPR or UK GDPR have additional rights. Please refer to our GDPR Statement for further details.
6. Third-party service providers
We engage the following categories of trusted third-party providers to operate Lovelio:
Payment processing - payments are handled by a third-party payment provider. Card details are submitted directly to that provider and are not stored by us.
Email delivery - a third-party provider is used to send transactional communications, including verification, sign-in, password recovery, recruitment, and billing messages.
AI, voice, and communications - providers may process the content needed for CV parsing, embeddings and matching, drafting, transcription, voice screening, video calls, email, and WhatsApp features.
Operations and security - hosting, database, caching, background processing, error monitoring, and payment providers process the limited data needed to deliver and secure the service.
We select providers with appropriate security and privacy controls. Where required for the processing, our provider terms include data-protection obligations and international-transfer safeguards.
Our current provider list and the purpose of each provider are published on the Lovelio Sub-Processors page.
7. Slack app and workspace data
When a business installs the Lovelio Slack app, we collect the workspace ID, workspace name, and Slack user IDs of team members who interact with Lovelio. We process messages sent directly to the Lovelio bot and messages posted in the designated Lovelio channel to deliver recruitment workflow functionality. We do not access or store messages outside of these interactions.
Message content may be processed by third-party AI services under data processing agreements. These providers do not use your data to train their models.
When a workspace disconnects the app, Lovelio stops using its workspace access token. Recruitment records or audit information already created through Slack follow the same retention rules as records created through the web app.
8. Add to Lovelio Chrome extension
The Add to Lovelio Chrome extension connects recruitment work in the browser to the user's own Lovelio account. The extension asks for consent before it reads or sends page information.
8a. Information the extension handles
User-invoked capture. When a user clicks the extension or one of its right-click actions, it may read the current page URL, title, visible page content, profile details, job-ad details, and text selected by the user. It uses these details to prefill a candidate, contact, business-development lead, or job draft.
LinkedIn recognition. After the user gives consent, the extension reads visible profile, search-result, and company-page details on LinkedIn. It compares those details with the user's Lovelio account to show known people, client off-limits warnings, candidate fit, company history, and sourcing information. It does not click, type, submit, message, or navigate on the user's behalf.
Authentication. Requests use the user's existing Lovelio browser session. The extension does not read or store passwords, authentication tokens, or session-cookie values.
Local extension storage. The extension stores the user's consent, Lovelio region, active sourcing job, sourcing-panel state, preferences, and short-lived lookup caches in Chrome's local extension storage. It does not use this information for advertising.
8b. How extension information is used and retained
Lovelio uses page information only to provide the extension features described above. Raw page content used for classification, summarisation, matching, or assessment is discarded after that processing. When a user explicitly saves something, Lovelio keeps the resulting recruitment record, extracted fields, professional summary, note, structured candidate sighting, or selected-text job draft in that user's Lovelio account. The normal account retention and deletion rules in this statement then apply.
Unknown LinkedIn profiles may be compared with Lovelio records, but Lovelio does not keep a record of the person from that lookup. Structured sightings are stored only for candidates who already exist in the user's Lovelio account.
8c. Service providers
The extension sends information only to the user's regional Lovelio service over HTTPS. Lovelio's infrastructure providers, including Vercel and Supabase, process the information needed to run and store the service. Anthropic may process page content for classification, professional summaries, matching, and candidate-fit assessments. Deepgram processes audio only when the user chooses Dictate. Google Maps Platform processes location searches entered in the location field. These providers process information for Lovelio under contractual data-protection terms and do not receive it for advertising.
8d. Chrome Web Store Limited Use
Lovelio's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Lovelio does not sell extension data, use it for personalised advertising, or allow people to read it except with the user's specific consent, for security, to comply with law, or after aggregation and anonymisation for internal operations.
9. Cookies
We currently use cookies and similar local storage that are necessary to maintain authenticated sessions, route an account to the correct region, retain user choices, and protect the service. Disabling these technologies may prevent parts of Lovelio from working.
If we introduce non-essential analytics or advertising cookies, we will request any consent required by applicable law before placing them and provide a way to change that choice.
10. Data retention
Personal data is retained for the duration of your account and for such period thereafter as may be required to fulfil outstanding obligations or comply with legal requirements. Financial and transactional records are retained for the period required by applicable tax legislation.
Employers using Lovelio are responsible for managing the retention of applicant data within their own accounts in accordance with applicable law.
11. International data transfers
The customer's primary recruitment database and stored files are hosted in the region selected at signup: Sydney, London, or the United States. Limited account-routing records are kept centrally so sign-in can reach the correct region. Billing, security logs, support, and the service providers needed for a chosen feature may also process data outside the selected hosting region.
Where personal data is transferred internationally, we ensure that appropriate safeguards are in place - including Standard Contractual Clauses where applicable - to protect your data in accordance with relevant privacy legislation.
12. Your rights
Depending on your jurisdiction, you may have the right to:
Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erasure of your personal data, subject to applicable legal obligations.
Restrict or object to certain processing activities.
Data portability - to receive your data in a structured, machine-readable format.
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at hello@lovelio.ai. We will respond within 30 days of receipt of your request.
13. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), password and passkey protections, email verification and recovery controls, role-based access controls, and regional tenant separation.
Whilst no system can guarantee absolute security, we regularly review and update our security practices. In the event that you believe your account has been compromised, please contact us immediately at hello@lovelio.ai.
14. Amendments
This Privacy Statement may be updated from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is displayed at the top of this page. Where changes are material, we will provide notice by email or via an in-platform notification prior to the changes taking effect.
15. Contact
For privacy-related queries or to exercise your rights, please contact:
Lovelio Pty Ltd
ACN 701 461 298
Email: hello@lovelio.ai