Privacy policy

The data controller for personal data processed through LushyChat is the entity operating the service and identified in product notices or in-product settings where required. For privacy requests, use the contact method we publish on this site or in the product.

Depending on how you use LushyChat, we may process:

• Account and authentication data — For example, if you sign in with a provider, identifiers and profile elements that provider shares with us under your consent and their terms.
• Profile and preferences — Information you choose to provide in onboarding or settings (such as display name or match preferences), as implemented in the product.
• Usage and technical data — Such as approximate location derived from IP (for routing or compliance), device and browser type, timestamps, session identifiers, and diagnostic logs used to operate and secure the service.
• Communications and safety data — Content or metadata needed when you report abuse, when we enforce policies, or when we are required to respond to lawful requests.

We do not use your personal information to sell lists of users to third parties for their independent marketing.

We process personal information to:

• Provide, maintain, and improve LushyChat;
• Authenticate users and prevent fraud or abuse;
• Operate matching, moderation, reporting, and blocking features;
• Comply with legal obligations and respond to lawful requests;
• Communicate with you about the service (for example, security notices);
• Analyze aggregate or de-identified usage to improve the product.

Where the EU/UK GDPR applies, we rely on appropriate bases such as: contract (providing the service you request), legitimate interests (security, fraud prevention, product improvement—balanced against your rights), consent where required (for example certain cookies or optional communications), and legal obligation.

We retain information only as long as necessary for the purposes above, including to resolve disputes, enforce agreements, and meet legal, accounting, or reporting requirements. Retention periods vary by data category; some security logs may be kept longer in aggregate or pseudonymous form.

We may share information with:

• Service providers who process data on our behalf under strict contracts (hosting, analytics, communication tools), only for the purposes we specify.
• Authorities when required by law or to protect rights, safety, and security.
• Corporate transactions — If we are involved in a merger or acquisition, information may be transferred subject to appropriate safeguards.

We do not sell your personal information in the conventional sense.

If we transfer personal data across borders, we use mechanisms recognized by applicable law (such as standard contractual clauses) where required.

Depending on your location, you may have rights to access, rectify, delete, restrict, or port your personal data, and to object to certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the channels we provide; we may need to verify your identity before responding.

LushyChat is not directed at children below the age required to use the service in their jurisdiction. We do not knowingly collect personal information from children in violation of applicable law.

We will post updates on this page and revise the effective date. Material changes may be communicated through the product or by email where appropriate.

For how we approach session security and product safety, see Security.