Lovable

Independent Sources

Shown for context — not merged with USAComplaints' own numbers.

Contacts & Payment

• Official website: https://lovable.dev/
• Support email (help center: paid-plan users use the support form first and email only if the form is: [email protected]
• Support form (log-in required; paid workspaces only, per the help center): https://lovable.dev/support
• Cancel, change plan, invoices and payment method: Workspace settings, Plans and credit usage (log-in: https://lovable.dev/settings/billing
• Privacy requests and AI-training or advertising opt-outs when you cannot log in: [email protected]
• Data Protection Officer: [email protected]
• Trust and Safety: abuse reports, project takedown appeals, disabled-account appeals, DMCA and tradem: https://lovable.dev/abuse
• Report a security vulnerability in Lovable itself (HackerOne program or email): https://lovable.dev/security-issues
• Vulnerability disclosure (instructions are sent on request): [email protected]
• Trust Center (compliance badges, sub-processors, security contact): https://trust.lovable.dev/
• Service status page: https://status.lovable.dev/

Searching for Lovable? Credits, refunds, cancelling, support and your data

Lovable (lovable.dev) is an AI app-building service with free and paid plans: users describe a website or web app in chat and the platform builds and hosts it. Its pricing page says "Starting to build on Lovable is free" and lists Free, Pro ($25 per month for 100 credits), Business ($50 per month for 100 credits) and Enterprise plans. Below are the company's own published routes and terms for the questions people most often search, each from a page opened on 2026-10-03.

• Charged and want money back: the Terms of Service (last updated August 28, 2026) say "Except where required by applicable law, all fees are non-refundable" and add that "Nothing in this section limits any statutory refund, cancellation, or withdrawal rights you may have as a consumer." Lovable's help center says: "If you believe you were charged in error, for example a subscription that renewed after you canceled, contact support with your workspace name and the charge in question. The support team reviews billing errors." The help center names the support form at lovable.dev/support (log-in required, paid workspace) and says that if the form is unavailable you can email [email protected] from the account email. For plans bought inside the iOS app, the support policy says Apple handles receipts and refunds. If a charge is disputed with a card issuer, that is a separate route outside Lovable's pages.
• Cancelling: the help center says to go to Workspace settings, Plans & credit usage, select Manage on the plan card, then Downgrade to free; the plan "stays active until the end of the current billing period." It also says "Lovable has no separate cancel action and no email address for cancellation requests," and that the mobile app has no cancel option, so on a phone cancel from lovable.dev in a browser. Plans bought in the iOS app work differently: each purchase "covers one month and does not renew automatically." The Terms say paid plans "renew automatically unless you cancel before the renewal date in your account settings."
• Credits used up, expired or consumed by an unsatisfactory result: the Terms say Credits "are consumed by each AI action based on the effort and resources used, regardless of the outcome, and are non-refundable and non-restorable even where the AI Output is erroneous, incomplete, or must be regenerated, except where applicable law requires otherwise." The pricing page says monthly plan credits expire two months after issue and top-up credits twelve months after purchase; the help center says a message's cost is shown under "Credits used" in the More options menu under each response, and that when a plan is cancelled the unused monthly and rollover credits are "frozen rather than refunded." The pricing page says a paid balance "can be used flexibly to cover building, Cloud, and AI features in user apps," and that apps "that reach significant visitor traffic and/or size may start incurring cost on top of the included grant, which is covered by your credit balance." The Terms say credits may be bought through Stripe or another processor and that "You may also enable auto-reload so that your balance is automatically replenished when it falls below a threshold you select"; the auto-reload setting is therefore worth checking in the billing settings. The help center lists top-ups at $15 per 50 credits on Pro and $30 per 50 credits on Business, billed as one-time Stripe payments and valid 12 months from the purchase that added them, and lets you set a monthly spend limit on auto top-up or leave it at "No limit." On what happens to credits after cancelling, two company pages read differently: the Terms say "Paid Credits may be used only while your subscription is active" and that rolled-over credits are "frozen and remain available for reactivation until their expiry," while the help center says "Top-up credits you purchased while subscribed and any bonus credits can still be used on Free until they expire." The Terms' "Credit Forfeiture" paragraph adds that if Lovable terminates an account for the user's material breach, or for fraud or abuse, remaining Credits are forfeited "except where applicable law requires otherwise," that "If you cancel, your remaining Credits remain available until the end of the then-current billing period," and that if Lovable terminates for a reason not attributable to the user, remaining Credits are applied to fees owed through the effective date of termination and then expire. The help center also says that when a workspace upgrades from Pro to Business, Lovable automatically pauses auto top-up "because the per-credit top-up price changes," and that it can be re-enabled at the new Business price. The help center also calls the current chat pricing, including the daily chat allowance, a "temporary offering" that applies through October 31, 2026; Build mode, Plan mode, image and video generation, Cloud and AI usage follow their standard pricing.
• Do not want your content used for AI training: the Privacy Policy (effective September 15, 2026) says you can opt out "at any time in your account settings, on any plan, at no cost," that the opt-out applies going forward, and that it "does not retract content from training datasets assembled, or models trained, before you opted out." The same section of the policy says "Trained members of our team may review this content to check model quality and diagnose failures," under the access safeguards it describes. The help center gives the path Account settings, Preferences, AI model training. If you cannot log in, email [email protected]. The help center says Business and Enterprise workspace data is excluded from training by default.
• Privacy request denied, or account suspended by an automated system: for U.S. state-law privacy requests the Privacy Policy says "You may appeal by replying to our decision," that Lovable will respond "within the time your state's law requires," and that "if we deny it you may contact your state Attorney General." For an automated decision that significantly affects you, such as an account suspension, it says you can request human review and appeal by contacting [email protected]. For people in the EEA, UK or Switzerland, the Privacy Policy says they may complain to their supervisory authority (for Lovable: Integritetsskyddsmyndigheten (IMY) in Sweden, the UK ICO or the FDPIC); IMY's page "Complain about incorrect processing of your personal data" (imy.se) lists its requirements, including that the complaint concerns your own personal data, that the data controller is identifiable and that you give your contact details.
• Deleting your account: the help center's Delete account page says deletion is scheduled for 30 days after you confirm, that during those 30 days you can log back in and click Keep my account to cancel it, and that "Active workspace subscriptions continue billing," so subscriptions you do not want to be charged for should be cancelled separately. It also says that as of September 9, 2026 deletion stops your content from being included in AI training data assembled after your request takes effect, and does not retract content from earlier datasets or models.
• Taking your project or data with you: the help center says paid-plan users with edit access can download a project as a .zip file with Download codebase, that on any plan Git sync keeps a repository in step with the project, and that a Lovable Cloud database is exported separately under More, Cloud, Overview, Advanced settings, Export project data, which "does not include stored files, Edge Function code, or secrets." The Privacy Policy says you can ask for a copy of your personal data in a portable format, or for correction or deletion along with your account, through account settings or [email protected].
• Project taken down, account disabled, or a site on a lovable.app address you want to report: Trust & Safety handles these through the forms at lovable.dev/abuse (abuse report, takedown appeal, disabled-account appeal, DMCA, trademark); the support policy says appeals are not handled through the support form. The Terms describe lovable.app as subdomains on which users deploy their own apps, so a site on such an address is published by its builder, not by Lovable itself.
• Found a security flaw in Lovable itself: lovable.dev/security-issues points to Lovable's HackerOne program or [email protected]. For a problem in an app someone built with Lovable, the Privacy Policy says the person or organization that built it is responsible for that app's data and that privacy requests about it go to them.
• Response times: the support policy says the team responds "within 24 hours, mainly on weekdays," as a time to first reply and not to resolution; Free-plan users are directed to the docs, the status page and Discord.
• Regulator route: the FTC's ReportFraud site (reportfraud.ftc.gov), on its landing page opened on 2026-10-03, invites people to report a company, fraud or an unwanted call and says "We can't resolve your individual report."

Company background

Who operates it. The Terms of Service (last updated August 28, 2026; effective August 15, 2026) name Lovable Labs Incorporated as the contracting company and apply Delaware law, with Delaware state and federal courts as the exclusive forum, disputes "on an individual basis and not as a plaintiff or class member," and a jury-trial waiver. The Privacy Policy names Lovable Labs Sweden AB, Regeringsgatan 25, 111 53 Stockholm, as the entity responsible for personal data and says its "main establishment is in Stockholm, Sweden." The Data Processing Agreement says Lovable Labs Incorporated is "registered at 1 Lincoln St, Boston, MA 02111" and separately lists Glory Francke as Data Protection Officer, giving the address as "Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden." The DPA does not describe that address as a registered or mailing address, and the sources checked do not state how the U.S. and Swedish companies are related, and no company registry record was opened.

Terms and policy changes. Lovable's Legal Change Log lists, among other entries, a September 16, 2026 entry for Provider Rules ("Added the Provider Rules for Add-on Services") and a September 15, 2026 entry for the Privacy Policy ("Section 11 now states the legal basis for direct marketing emails about our own services").

Name history and launch. Lovable's blog says it rebranded from GPT Engineer to Lovable, and its funding posts refer to its launch in November 2024.

Funding and news (company announcements). Lovable says it raised $200 million at a $1.8 billion valuation in a Series A led by Accel (July 17, 2025), $330 million at $6.6 billion in a Series B led by CapitalG and Menlo Ventures' Anthology fund (December 18, 2025), and $400 million at $13.3 billion in a Series C led by Menlo Ventures and co-led by the Scaleup Europe Fund managed by EQT (August 12, 2026). In that post the company says people have created more than 60 million projects and that Lovable-built apps get over 900 million visits a month; these are the company's figures. On September 18, 2026 Lovable announced that it acquired Sutro, whose team, per the post, built a language, compiler and backend platform; the post does not give terms.

Enterprise agreement. A separate General Terms and Conditions page for enterprise customers (lovable.dev/terms-of-service, "Effective: Feb 2026") lists two Lovable entities in its entity table: Lovable Labs Inc. (notices to 1 Lincoln St, Boston, MA 02111; Delaware law) and Lovable Labs AB (notices to Regeringsgatan 25, 111 53 Stockholm; Swedish law). It says that, unless an order form provides otherwise, "payment obligations are non-cancellable and paid fees are non-refundable," and that subscriptions are prolonged automatically for 12-month periods unless a party gives at least three months' written notice. Its dispute clause for the Delaware entity includes arbitration administered by JAMS, and for the Swedish entity arbitration administered by the SCC Arbitration Institute. These terms are for enterprise orders; the consumer Terms quoted above do not mention arbitration.

Other company announcements (company blog). Lovable says it acquired Molnett on November 25, 2025. A June 13, 2026 post about billing says it was moving to one credit balance for building and running apps, and that the plan price, the cost of credits, the rate of credit consumption and the way credits expire were not changing. On August 5, 2026 it announced a trust-center page for every published app, and on September 24 and 28, 2026 it announced free chatting within the daily chat allowance and a Microsoft integration for running apps inside a company's Microsoft tenant. These are the company's own descriptions.

Pricing and plan terms (company pages). Free: no card needed, with daily build credits (5 per day, up to 30 per month), monthly Cloud credits (20, per the pricing page) and community support. Pro starts at $25 per month (annual billing $250) for 100 credits and adds custom domains, code editing and email support. Business starts at $50 per month for 100 credits. Enterprise is volume-priced. The help center lists higher monthly credit tiers for Pro and Business. The pricing page lists Lovable for students ("up to 50% off Lovable Pro"), Lovable for campus and Lovable for kids (in partnership with imagi); lovable.dev/students says students receive 50 percent off the Pro 100-credit monthly plan, or a discount of $12.50 per month on other plans, "valid for up to 12 months," and that a cancelled subscription loses the discount. Payments are processed through Stripe, and domain registrations through Lovable are processed by Name.com under separate domain terms that say renewal fees "are non-refundable" once a domain is renewed.

Other Terms provisions that affect customers. The Terms ask users not to upload protected health information, financial account numbers, payment card data, government identifiers or biometric data unless their plan or a separate agreement permits it. They say Lovable may reclaim lovable.app subdomains and that it "will generally provide" seven days' notice. They say the user owns the Customer Data and AI Output as between the parties, and that Lovable may use Customer Data to train models, with the opt-out described above.

Security and compliance claims. The company's Trust Center page displays badges for AIUC-1, SOC 2 Type I, SOC 2 Type II, ISO 27001:2022 and GDPR, and links the reports behind a request-access form; this page has not seen the reports. Lovable's security page says a basic security scan runs automatically each time a project is published.

Security and data-exposure notices. Three security matters appear in the sources checked: two are described in notices Lovable published, and one is a CVE record whose description Lovable disputes. Each is summarized as the company or the cited source describes it.

April 2026: chat history and source code of public projects. In a post published April 22, 2026, Lovable says that "Between February 3, 2026 and April 20, 2026 public project chat history and source code could potentially be accessed by any Lovable user provided they had a project link," that "Private projects and Lovable Cloud were never impacted," and that "We shipped a fix within two hours, but both our product and initial external response missed the mark." The post says backend changes in February 2026 re-enabled access that had been removed during 2025, that researchers' reports filed through HackerOne starting February 22, 2026 were closed without escalation because of outdated triage documentation, and that "Our first public response was dismissive." Lovable says it made all historically public projects private except its official templates, was retraining its HackerOne triage, and was still reviewing which public projects were viewed by users other than their owners and would contact those owners. A researcher quoted by The Register (April 21, 2026) described the issue as a "mass data breach"; Lovable's statement quoted there was "We did not suffer a data breach." In the same post Lovable explains that it has two independent visibility settings: project visibility (editor access, covering source code and chat history) and website access (who can visit the published URL), and says "Publishing your app does not change who can access your project in the editor." The sources checked do not give a count of affected projects or users. The California Attorney General's public data-breach list returned no entry for "lovable" when searched on 2026-10-03.

2025: CVE-2025-48757 (database row-level security). The CVE record (published May 30, 2025) describes "an insufficient database Row-Level Security policy in Lovable through 2025-04-15" that allowed reading or writing database tables of generated sites, and carries the note that "this is disputed by the Supplier because each individual customer of the Lovable platform accepts a responsibility over protecting the data of their application." The researcher's write-up (published May 29, 2025) says a scan completed March 21, 2025 found 303 endpoints across 170 of 1,645 analyzed projects (about 10.3 percent) with inadequate row-level security settings and describes the cause as Lovable-generated apps querying the database directly from the browser and relying on those policies.

September 2026: TanStack Start vulnerability (CVE-2026-102989). Lovable's post and the TanStack project's own notice, both dated September 30, 2026, concern a flaw TanStack describes as "a critical reflected cross-site scripting (XSS) vulnerability in TanStack Start's server-function response handling." Lovable says its security team found it on September 14, 2026, reported it to TanStack that day, put firewall rules in place for hosted apps, and "We have not found evidence of exploitation in the logs we have reviewed." It says affected projects are updated the next time the owner makes a change, or at no credit cost from the project's Security page, that "Not all Lovable projects were impacted," and that owners of affected projects will be contacted by email. Apps hosted elsewhere need the upstream update applied by their owners.

Platform-safety statement. In an August 18, 2025 post Lovable says its automated system blocks about 1,000 unique projects a day for policy violations and that its safety team took down over 300 sites in the preceding two weeks. These are company statements.

Complaint and review record: what was found

All figures below are as displayed on 2026-10-03 and are kept in this section and the External profiles block; they are different measures from different sources and are not combined.

• Trustpilot shows the Lovable profile as claimed, with a paid Trustpilot subscription, 4.2 out of 5 from 1,757 reviews (1,042 in the last 12 months), and says the company invites customers to review and replied to 34 percent of negative reviews. In a keyword count of the first 20 reviews displayed under the one-star filter on 2026-10-03, 11 mention credits and 6 mention refunds; the excerpts read included complaints that purchased credits were not added, that credits expired, and about support responses. This is a small sample of unverified reviewer statements, not a rate.
• BBB lists Lovable Labs Incorporated at a Dover, Delaware address as not accredited and not rated, with 2 complaints in the last 3 years (both closed in the last 12 months) and 0 customer reviews. BBB's stated reasons for the missing rating include that the Delaware address "is a registered agent only and not the location of the business" and that BBB does not process complaints on companies based outside its service area.
• ComplaintsBoard: site searches for "lovable" and "lovable.dev" on 2026-10-03 returned pages for unrelated pet businesses; no Lovable profile was identified in the results.
• Our database: USAComplaints has no approved complaint about Lovable as of 2026-10-03; older posts matching the word "Lovable" concern unrelated businesses and are not linked to this page.

A CFPB database search was not run because Lovable is not described in the sources checked as a financial-services company.

Court records

The CourtListener RECAP search for "Lovable Labs" run on 2026-10-03 returned one case, listed below. RECAP covers only filings uploaded by users of its extension and does not search state courts, so this is a record of what was found, not a complete docket search. No consumer class action naming Lovable Labs appeared in that search.

Separately, the Terms require disputes to be brought "on an individual basis and not as a plaintiff or class member in any purported class, consolidated, or representative proceeding," with Delaware courts and a jury-trial waiver; the Terms do not mention arbitration.

Is Lovable Legitimate?

Lovable Labs Incorporated is the company named as the contracting party in Lovable's Terms of Service (August 28, 2026 version), and Lovable Labs Sweden AB, Stockholm, is named in its Privacy Policy as the data controller. Lovable publishes support, privacy, abuse and security contact channels, a Trust Center, and its own published notices about security issues (see the security notices in the company background section). Lovable Labs Incorporated has a BBB file (opened May 5, 2026) that is not accredited and not rated, and a 4.2 Trustpilot score from 1,757 reviews, as described in the complaint-record section. In the sources checked on 2026-10-03 no government enforcement action naming Lovable was identified, and the one court case found was a trademark case between two companies that ended in a voluntary dismissal.

Not checked or not verifiable here: Delaware and Swedish company-registry records, U.S. trademark ownership, the contents of the SOC 2, ISO 27001 and AIUC-1 reports, and any state-court cases. Lovable's pricing, credit and refund terms are as quoted above, and readers should rely on the current text of the Terms when deciding whether a charge is disputable.

Court & Public Records

Frequently Asked Questions