Lovable
Go from idea to done with Lovable in Slack. Just mention @Lovable to spin up a project, ship a change, or ask what’s going on across your apps and connected tools, all in a thread your team can jump into. You can also build your own agents in Lovable and deploy them straight to Slack.AI disclaimer: Lovable uses large language models (AI) to generate its responses and build software. AI-generated responses and outputs may not always be accurate — please review important results before relying on them. Slack's AI agent experience requires a paid Slack plan; @mentions and direct messages work on all Slack plans.
Lovable will be able to view:
Lovable will be able to do:
Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.
General
Developer
Lovable Labs Incorporated
Company headquarters location
Sweden
Terms of service
Privacy & data governance
Data retention policy
Lovable retains the conversations the app participates in (@mentions, threads it replies in, DMs, assistant threads) while the Slack workspace is connected, to provide multi-turn context and support. Copies are kept in our LLM-observability tooling for debugging and quality assurance. Per our privacy policy, customer data is retained up to 90 days after termination; log data up to 90 days.
Data archiving and removal policy
Uninstalling the app revokes its access and immediately deletes the installation record and OAuth tokens. Individual deletion requests via privacy@lovable.dev are processed within 30 days.
Data storage policy
Customer data is encrypted in transit (TLS 1.2+) and at rest, and stored in Google Cloud Platform in the EU (Netherlands).
Data center location(s)
Netherlands
Data hosting details
Cloud hosted (multi-tenant SaaS)
Data hosting company
Google Cloud Platform (edge/CDN: Cloudflare)
App/service has sub-processors
yes
Guidelines for sub-processors
App/service uses large language models (LLM)
yes
LLM model(s) used
Anthropic Claude, Google Gemini, and OpenAI GPT - routed through Lovable's AI gateway with automatic failover, so any listed model family may serve a given request.
LLM retention settings
Slack data is never used to train models. Our LLM providers operate under zero-data-retention arrangements. Lovable retains the app's own conversations per our data retention policy; deletion via privacy@lovable.dev.
LLM data tenancy policy
Multi-tenant SaaS; customer data logically isolated per workspace, enforced by Lovable's API permission layer. SOC 2 Type 2 and ISO 27001:2022 certified.
LLM data residency policy
Core platform (Slack tokens, account links, conversation store) runs in Google Cloud EU (Netherlands); observability traces in EU (eu-west-1). LLM inference runs on provider endpoints (Google Vertex AI, Anthropic, OpenAI) which may be in US or globally
Certifications & compliance
SOC attestation
ISO/IEC-27001 certification
GDPR commitment
Data deletion request procedure
Email privacy@lovable.dev - requests are processed within 30 days. Uninstalling the app immediately deletes its installation record and OAuth tokens.
HIPAA compliant
no
While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.
Security
Supports Single Sign On (SSO) with the following providers
Google and GitHub sign-in; SAML-based enterprise SSO.
Supports Security Assertion Markup Language (SAML)
yes
Has a dedicated security team
yes
Contact for security issues
security@lovable.dev
Has a vulnerability disclosure program
yes
Vulnerability disclosure program URL
Vulnerability disclosure program covers Slack app
yes
Has a bug bounty program
no
Requires third party authorization/connections
yes
Third party services used by this app
Google Cloud Platform, Cloudflare, Anthropic, Google Vertex AI, OpenAI, Braintrust (LLM observability). Full sub-processor list: https://trust.lovable.dev
Uses token rotation
no