Privacy Policy

GLOU is the controller for the processing described here. Contact: hello@glou.dev.

For privacy questions or requests, email hello@glou.dev.

Project, contact and creative-brief forms for custom imagery, websites, web apps and digital experiences may collect your name, email address, phone or WhatsApp number, organisation or project details, budget, preferred timing, selected services, creative preferences, saved image references and anything you write in free-text fields.

Estimator and product-finder answers remain in your browser unless you submit a project request. Submitted enquiries are delivered to GLOU by email. The server also uses your IP address temporarily to limit spam and abuse.

We use this information to answer you, understand the requested work and prepare a proposal or take steps before entering a contract (GDPR Art. 6(1)(b)), and to protect the forms from abuse based on legitimate interests (Art. 6(1)(f)).

Newsletter and update forms collect your email address, optional name, selected interests, signup source and language value. We use them to send the updates described beside the form. The legal basis is your consent (Art. 6(1)(a)). You may withdraw it at any time by emailing hello@glou.dev.

A free-sample request collects your email address so GLOU can create a time-limited download link and email the sample. It is used to provide what you requested (Art. 6(1)(b)); requesting a free sample does not by itself subscribe you to marketing.

For membership subscriptions and earlier Shop orders, GLOU processes your email address, checkout and order references, plan or purchased products, prices, currency, payment and refund status, invoices, access entitlements and download history. Download logs can include the requested file, time, outcome, IP address and browser user-agent for secure delivery and misuse prevention.

Stripe processes card, billing, tax, fraud-prevention, refund and payment data under its own privacy notice. GLOU does not receive or store your full card number. We process subscription and historical order data to perform the relevant contract (Art. 6(1)(b)), comply with accounting and tax duties (Art. 6(1)(c)), and protect paid files and investigate abuse (Art. 6(1)(f)).

GLOU Membership is open with monthly and annual plans. We process account and subscription status to provide member access and private downloads. A request for email updates alone does not create a paid membership.

The website also retains records of earlier confirmed Shop purchases where needed for existing download rights, security, transaction records or legal obligations.

Saved images, projects, shot lists, moods, notes and motion ideas in the Library workspace are stored only in local storage on your device; GLOU does not receive them unless you separately submit related content through a form or AI feature.

The Art Director tool sends the brief you type, together with GLOU Library catalogue information, to GLOU's AI service to return an image selection. Match an Image sends a reduced-size copy of the reference image you choose to the AI service. GLOU does not save that uploaded reference image in the website database, although the AI service processes it to return the result.

Brand Edit fetches the public web address you provide, extracts limited visible text and colour information, and sends that material to the AI service. GLOU stores your submitted URL, the resulting brand summary, colour palette and selected Library image identifiers in your private Brand Edit record so it can be shown again. Do not submit confidential sites, personal data you are not entitled to use, or content belonging to another person without authority.

Member creative tools are available to signed-in members where enabled. Submitting a brief, reference image or public URL sends that input for the processing described above. AI results are automated creative suggestions and are not used to make legal or similarly significant decisions about you.

The site uses browser storage and authentication cookies for account sessions, security, cookie choices, temporary checkout recovery, saved order references, device-only Library workspace data and dismissed notices. See the Cookie Policy for the current list.

Servers also receive ordinary request information such as IP address, user-agent, requested URL and timestamps. This supports delivery, rate limiting, troubleshooting, fraud prevention and security (Art. 6(1)(f)).

Lovable provides website hosting, the managed database, authentication, private file storage, transactional email and the AI gateway used by member creative tools. An AI model provider available through that gateway processes submitted briefs, reference images and extracted public-site content to generate requested results.

Stripe processes membership and earlier Shop payments, invoices, refunds and fraud prevention: https://stripe.com/privacy. Resend delivers Studio, newsletter, waitlist and free-sample emails. GLOU correspondence may also be copied to an authorised Gmail/Google mailbox used by the business. RSS.app supplies the public Instagram feed when available; that feed request is made by GLOU's server rather than your browser.

Professional advisers and public authorities may receive information where reasonably necessary or legally required. GLOU does not sell personal data and does not use it for third-party advertising or behavioural profiling.

Enquiries and creative briefs are kept in the receiving business mailboxes while needed to respond, manage the relationship and establish or defend legal claims. Newsletter and waitlist records are kept until you withdraw consent or ask for deletion, subject to any minimal suppression record needed to honour the request.

Account and membership records, plus earlier order, payment, invoice and contract records, are kept only while needed for security and the periods required by applicable accounting, tax, payment and legal obligations. Download and security records are kept only while reasonably needed to protect paid content, prevent fraud, troubleshoot and establish or defend claims.

Brand Edit records remain associated with your account until replaced or you request deletion. Uploaded Match an Image references and Art Director briefs are not stored in GLOU's website database after the response. Service providers may retain operational logs under their own documented retention rules.

Some providers may process data outside Latvia or the EEA. Where required, the relevant provider or GLOU relies on an adequacy decision, Standard Contractual Clauses or another lawful transfer safeguard.

GLOU uses access controls, encrypted transport, restricted database access and signed, time-limited file links. No online service can guarantee absolute security.

Depending on the law that applies, you may request access, correction, erasure, restriction, objection or portability, and may withdraw consent without affecting earlier lawful processing. Email hello@glou.dev. We may need to verify your identity before acting on a request.

Where the GDPR applies, GLOU normally responds within one month. You may complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija) or another competent supervisory authority.

This policy may change when the website or its processing changes. The date above identifies the current version.