Security & privacy

Deployment evidence, not a certification

Lovable maintains the Trust Center for the currently published deployment. Its observations are separate from Lily Site’s owner-authored policies. Read the live evidence for the checks, their scope and evaluation time; omitted controls have no reported assurance. This is not a certification, a compliance attestation or a guarantee of security.

Security reporting guidance

Report suspected unauthorized access, exposed information or a vulnerability to our security and support contact.

• Include the affected page, when it happened and steps that reproduce the issue. Remove personal information from screenshots.
• Do not send passwords, private API keys, payment card details or other customers’ information.
• Do not access another person’s account or data, disrupt the service or test beyond your own authorized access.

This guidance does not authorize security testing or promise a response deadline, reward or legal safe harbor.

Privacy statement & policy status

Our privacy statement covers accounts, project content, AI processing, payments, support and visitor statistics. Privacy and personal-data requests can be sent to support@lilysite.com.

The privacy, terms and cookie documents remain working drafts requiring qualified legal review. This page does not add certification, compliance, encryption, retention or incident-response guarantees.