1. Who is responsible
This notice describes WinningAura's current product data flows. The operator's legal identity, address and privacy contact have not yet been supplied. They must be added before this notice is finalised; no unverified contact details are presented here.
2. Information you provide
Inputs can include a name, business description, audience, style and budget choices, selected domain endings, reference images and voice recordings. An account involves email and sign-in information; Google sign-in also involves information supplied by that provider. Selected name records are saved when you use Shortlist.
3. Why information is processed
Inputs are used to generate suggestions, assess names, transcribe speech, check domains and create brand concepts. Account information supports sign-in and syncing favourites. Technical processing also supports service operation and security. Do not share confidential plans or sensitive personal information in naming prompts or reference media.
4. Legal bases where applicable
Where data protection law requires a legal basis, delivering a requested service may involve contract-related processing; security and service reliability may involve legitimate interests subject to balancing and your rights. Consent is required where applicable, including for non-essential tracking if introduced. The operator must confirm the appropriate bases and any local requirements before final publication.
5. Services receiving information
Lovable Cloud provides hosting, account authentication and saved account data. Submitted text and images, and recordings for transcription, are processed through Lovable's AI gateway and its model providers. Domain strings are queried through public registry sources or a DNS resolver. Google is involved if you choose Google sign-in, and Google Fonts receives requests to load the site's typography.
These providers may process technical information such as network addresses and request metadata. Their retention and processing rules are separate from the favourites saved by WinningAura. This notice does not claim that providers never retain inputs or use them for any other purpose; provider contracts and settings require verification.
6. Local and account storage
Guest favourites are stored in this browser on this device, using local storage for selected name records, not account data. When you sign in, those selections can merge with account favourites. Authentication also uses browser session storage mechanisms. Sign-in syncs favourites, not a library of uploaded references, reports or studio projects.
7. Retention and deletion
Guest favourites remain until you remove them or clear browser site data; private browsing may discard them sooner. Account favourites remain until removed, subject to service backups and operational requirements. Signing out does not delete stored records.
A verified account-retention schedule, backup deletion periods, input/log retention and processor retention have not yet been supplied. No fixed deletion time is promised. The operator must document these periods and provide an account deletion process before this notice is finalised.
8. Your choices and rights
You can use the service without an account, type instead of speaking, avoid uploads and remove saved favourites. Browser settings can revoke microphone permission or clear local site data. Depending on your location, you may have rights to access, correction, deletion, portability, restriction or objection, and to complain to your local data protection authority.
No self-service account deletion or data export is currently available. A verified privacy-request contact and identity-verification process must be added by the operator. Do not send personal documents or credentials to an unverified address.
9. International processing and security
Providers may process information outside your country. The operator must verify destinations and legally required transfer safeguards, including contractual protections where applicable. No specific residency guarantee is made here. Security measures reduce risk but cannot guarantee absolute security; use a strong password and keep sign-in links private.
10. Children and automated assessments
The service is not directed to children who cannot lawfully consent or enter an agreement in their jurisdiction. AI name reports support your choice; they are not decisions about your eligibility, credit or legal rights. Review their recommendations critically.
11. Changes to this notice
A revised notice should explain material changes to processing and carry an updated date. New uses, tracking or paid services may require additional notices and consent. The draft date below identifies this version, not a claim of verified global compliance.