LOVELEEDAY
Client portal

Privacy

Last updated 4 October 2026

This page covers the LOVELEEDAY client portal at portal.loveleedaystudios.com. Our marketing site has its own privacy page. This is a plain-language draft that is being reviewed.

What the portal holds about you

  • Your email address and a password (stored as a one-way hash by our authentication provider, never in readable form).
  • Your second factor: an authenticator-app secret and backup codes, used only to sign you in.
  • Which company you belong to and your role there (owner, admin, member or viewer).
  • The files you or LOVELEEDAY upload, and the deliverables, contracts and workstream records prepared for your company.
  • An access history for your company: who uploaded, downloaded, shared or deleted a document, and every time LOVELEEDAY staff opened access. Entries cannot be edited from the portal.
  • If your company connects a platform such as a point-of-sale or email system, the connection details needed to read it.

Who can see your company's information

Members of your company see that company's information according to their role. Nobody in another company can see it. LOVELEEDAY staff have no standing access to client accounts. A staff member must open a time-limited grant with a stated reason, your company's owners and admins are emailed when it opens, and the grant appears in your access history.

Who handles data for us

  • Supabase hosts the portal database and the sign-in system.
  • Fly.io runs the portal application.
  • Resend delivers the portal's security emails: invitations, one-time codes and staff-access notices.
  • Stripe handles card payments if your company has billing set up. We do not store card numbers.

Cookies

The portal sets only the cookies it needs to keep you signed in and to remember which company you are working in. It does not use advertising or tracking cookies.

Sharing outside your company

If your owner turns outside sharing on, a member can create a link to one document. The recipient proves their email address with a one-time code, links expire, and each share is recorded in the access history. Your owner can turn sharing off at any time.

Your choices

Ask us to correct or delete your information, or your company's, by writing to hello@loveleedaystudios.com. Uploaded documents can be deleted in the portal by the people your company allows to do so.