1. Who we are
Fideria ("we", "us", "our") provides the AI Investment Overview platform. For data submitted through our website and product, Fideria acts as the data controller for our own marketing, sales and support data, and as a data processor for customer data inside the Fideria platform.
2. Data we collect
- Contact and account data, name, business email, company, role.
- Messages, anything you send us through the contact form or email.
- Product usage, pages viewed, features used, performance and error logs.
- Customer data, content you and your team store in Fideria workspaces.
3. How we use it
We use personal data to deliver the service, respond to inquiries, improve the product, secure the platform, and meet legal obligations. We do not sell personal data, ever.
4. Legal bases (GDPR)
- Contract, to provide the service you signed up for.
- Legitimate interests, to improve, secure and market the product.
- Consent, for non-essential cookies and certain communications.
- Legal obligation, to comply with applicable law.
5. Sharing
We share data with the sub-processors listed at /sub-processors (hosting, authentication, AI processing and email). Contractual protections differ by provider. No data processing agreement is in force between Fideria and Lovable, which operates the platform, AI gateway, mailbox relay and email service.
Fideria notifies customers without undue delay after it has itself been notified of a sub-processor addition or replacement. The customer's objection period starts with Fideria's notification and is never shorter than the objection period available to Fideria from its upstream provider. For upstream changes, notice is given as soon as Fideria knows, not a fixed number of days in advance. Customers may object on reasonable data-protection grounds. If an objection cannot be resolved, the customer may terminate the affected part of the Service in accordance with the master agreement.
6. Retention
We keep personal data for as long as your account is active, then for the time needed to meet legal and accounting obligations, after which it is deleted or anonymized.
Fideria deletes the customer's records from the live database. Backup copies age out according to a retention period that Lovable does not publish. Selective deletion of a customer's records from backups is not possible.
Lovable's platform-level deletion operates per project or account: data first becomes inaccessible, then is permanently removed, including from backups, after a retention period Lovable does not publish. This is not the same as Fideria deleting one customer's records in a shared live database.
7. Your rights
You can request access, correction, deletion, restriction, portability, or object to certain processing. You can also withdraw consent at any time. Contact privacy@fideria.ai.
8. Security
Data is encrypted in transit and at rest. Access is least-privilege and logged. We test our systems regularly and have an incident response process.
9. International transfers
Storage and processing happen in different places. The application database and its backups are stored in Stockholm, Sweden. AI prompt content, including text extracted from invoice emails, is sent to Google and OpenAI endpoints and processed in the United States. Lovable states that these transfers rely on the mechanisms in its own Privacy Policy, including clauses it has entered with its service providers. Those clauses are Lovable's, not an agreement between Fideria and Lovable.
10. Contact
For privacy questions, email privacy@fideria.ai. You also have the right to lodge a complaint with your local data protection authority.