Privacy Policy

Last updated: January 2026

1. What We Collect

The Lovable Ejector ("we", "our", "the Service") collects only the minimum data required to perform migrations:

  • GitHub OAuth: Your public profile (username, email) and repository access to scan and patch code.
  • Supabase Token: Strictly ephemeral. Used only in memory during the migration process to provision resources. Never stored in our database.
  • Vercel Token: Strictly ephemeral. Used only in memory during the migration process. Never stored in our database.
  • Railway Token: Strictly ephemeral. Used only in memory during Railway ejections. Never stored in our database.
  • Payment Info: Processed by Stripe. We never see or store your card details.

2. How We Use Your Data

  • To authenticate you via GitHub OAuth.
  • To scan your repository for Supabase migrations and Edge Functions.
  • To provision infrastructure on your behalf (Supabase, Vercel, or Railway).
  • To process payments via Stripe.
  • To contact you regarding your account or support requests.

3. Data Retention

We store your account information (email, project history) indefinitely while your account is active. API tokens (Supabase, Vercel, Railway) are used only during the migration process and are not persisted to our database.

4. Third-Party Services

We integrate with:

  • GitHub: For authentication and repository access.
  • Supabase: For database and infrastructure provisioning.
  • Vercel: For frontend deployment (Standard Ejection).
  • Railway: For full-stack deployment (Railway Ejection).
  • Stripe: For payment processing.

Each service has its own privacy policy. Your use of the Ejector implies acceptance of those policies.

5. Your Rights

You may request deletion of your account and all associated data by contacting us at [email protected].

6. Contact

For privacy-related inquiries, email [email protected].