Legal
Privacy Statement
Last updated: 4 August 2026 - Lovelio Pty Ltd
This statement sets out what personal data we collect, the purposes for which it is processed, and how it is protected. It has been written in clear, accessible language while maintaining legal accuracy.
1. Who we are
Lovelio is operated by Lovelio Pty Ltd. We provide an AI-powered recruitment platform used by businesses to manage job postings, candidates, and hiring workflows.
For privacy-related queries, please contact us at hello@lovelio.ai.
2. Scope of this statement
This Privacy Statement applies to two categories of individuals:
Platform users - businesses and individuals who register for and use Lovelio to manage their recruitment processes.
Job applicants - individuals who submit applications through a Lovelio-powered careers page.
Where you are a job applicant, please be aware that the employer whose careers page you applied through is the data controller in respect of your application data. Lovelio Pty Ltd processes that data on the employer's behalf as a data processor. Queries regarding a specific application should be directed to the relevant employer.
3. Data we collect
3a. Platform users (businesses and teams)
| Data | Purpose |
|---|---|
| Name and email address | Account creation and management |
| Payment information | Processed by our payment provider for paid subscriptions (card details are not stored by us) |
| Usage data | Platform improvement and performance monitoring |
| IP address and device information | Security, fraud prevention, and analytics |
| Correspondence with us | Support and account management |
3b. Job applicants
| Data | Purpose |
|---|---|
| Name, email address, telephone number | Applicant identification and communication |
| CV, resume, and cover letter | Assessment of suitability for a role |
| Interview notes and evaluation scores | Supporting hiring decisions |
| Application status and history | Pipeline management and record-keeping |
Applicant data is controlled by the employer (the Lovelio customer). We process it on their behalf in our capacity as data processor.
4. How we use personal data
Personal data is used for the following purposes:
- Providing, maintaining, and improving the Lovelio platform.
- Processing payments and administering subscriptions.
- Sending transactional communications, including account confirmations, Magic Link sign-in emails, and billing notifications.
- Responding to support requests and enquiries.
- Analysing usage patterns to improve the product, using aggregated or anonymised data where possible.
- Fulfilling our legal and regulatory obligations.
We do not sell personal data to third parties, nor do we use it for advertising or marketing purposes without consent.
5. Legal bases for processing
Depending on your location and the nature of the data, we rely on the following legal bases for processing:
Performance of a contract - to deliver the services you have subscribed to.
Legitimate interests - to improve the platform, prevent fraud, and operate the business securely.
Legal obligation - where processing is required by law, such as the retention of financial records.
Consent - for optional communications such as product updates or marketing correspondence.
Users subject to GDPR or UK GDPR have additional rights. Please refer to our GDPR Statement for further details.
6. Third-party service providers
We engage the following categories of trusted third-party providers to operate Lovelio:
Payment processing - payments are handled by a third-party payment provider. Card details are submitted directly to that provider and are not stored by us.
Email delivery - a third-party provider is used to send transactional communications, including Magic Link sign-in emails and billing receipts.
Analytics - we use web analytics tools to monitor platform usage. This may involve the processing of IP address data and the use of cookies.
All third-party providers are subject to data processing agreements and are required to handle personal data securely and in accordance with applicable law.
7. Slack app and workspace data
When a business installs the Lovelio Slack app, we collect the workspace ID, workspace name, and Slack user IDs of team members who interact with Lovelio. We process messages sent directly to the Lovelio bot and messages posted in the designated Lovelio channel to deliver recruitment workflow functionality. We do not access or store messages outside of these interactions.
Message content may be processed by third-party AI services under data processing agreements. These providers do not use your data to train their models.
When the app is uninstalled, your workspace access token is revoked immediately and all interaction data is deleted within 30 days.
8. Cookies
We use cookies and similar tracking technologies to maintain authenticated sessions, retain user preferences, and gather anonymised usage data. Where analytics cookies are used, they may involve the collection of IP address and behavioural data.
Cookie preferences can be managed through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform.
9. Data retention
Personal data is retained for the duration of your account and for such period thereafter as may be required to fulfil outstanding obligations or comply with legal requirements. Financial and transactional records are retained for the period required by applicable tax legislation.
Employers using Lovelio are responsible for managing the retention of applicant data within their own accounts in accordance with applicable law.
10. International data transfers
Lovelio is a global platform serving users worldwide. Our infrastructure and third-party service providers may process personal data in jurisdictions outside your own.
Where personal data is transferred internationally, we ensure that appropriate safeguards are in place - including Standard Contractual Clauses where applicable - to protect your data in accordance with relevant privacy legislation.
11. Your rights
Depending on your jurisdiction, you may have the right to:
Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erasure of your personal data, subject to applicable legal obligations.
Restrict or object to certain processing activities.
Data portability - to receive your data in a structured, machine-readable format.
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at hello@lovelio.ai. We will respond within 30 days of receipt of your request.
12. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), passwordless Magic Link authentication, and role-based access controls.
Whilst no system can guarantee absolute security, we regularly review and update our security practices. In the event that you believe your account has been compromised, please contact us immediately at hello@lovelio.ai.
13. Amendments
This Privacy Statement may be updated from time to time to reflect changes in our practices or applicable law. The date of the most recent revision is displayed at the top of this page. Where changes are material, we will provide notice by email or via an in-platform notification prior to the changes taking effect.
14. Contact
For privacy-related queries or to exercise your rights, please contact:
Lovelio Pty Ltd
Email: hello@lovelio.ai