Last updated: August 2026
LovePaper is run by Enzo Falvo and Jean Marcel, two individuals based in Brazil — an independent two-partner project, not an incorporated company. Both are the controllers of the data described here. For anything related to this policy, including requests about your data, the contact is in section 7.
When you create a letter, we collect what you write: sender name, recipient name, the occasion you pick, and the letter content. To create a letter we do not ask for a phone number or any identification document.
At payment, the checkout collects your email and billing country, which are stored alongside the letter so we can send the receipt with your link and handle support requests. If you buy the Instagram opening notification, we also store the email or WhatsApp number you provide, used only for that notification.
For security and abuse prevention, we store an irreversible hash of your IP address and your browser user-agent.
Payments are processed by Stripe (cards) and Mercado Pago (PIX and other methods). We do not have access to and do not store your credit or debit card details.
We use functional cookies to remember your language preference.
We also use third-party measurement tools to understand how the site is used: Google Analytics, DataFast, Vercel Analytics and Vercel Speed Insights. They record pages visited, traffic source and performance, and Google Analytics sets its own cookies. You can block these cookies in your browser settings or with a blocking extension — the site keeps working normally.
We do not sell, rent or trade your data. We share only with the services LovePaper needs to run, and only what each one needs: Supabase (database), Vercel (hosting), Stripe and Mercado Pago (payments), Resend (email delivery), Google Analytics and DataFast (usage measurement).
Letters are only reachable through the unique link generated after payment — no letter is listed publicly or indexed by search engines.
Data is stored on secure servers, encrypted in transit (TLS) and at rest.
You may request access, correction, portability or deletion of your data, and withdraw consent at any time. For that — including deleting a letter you already created — write to enzo.fvo@gmail.com. We reply within 5 business days.
This policy may be updated periodically. The date of the last update is at the top of this page.