initial

2026-02-02 13:41:43 +02:00
commit 6c65691b2e
@@ -0,0 +1,254 @@
+# Lovable - Enterprise Compatibility Evaluation
+
+## Tool Overview
+**Name:** Lovable (formerly GPT Engineer)
+**Website:** https://lovable.dev
+**Category:** AI-Powered No-Code App Builder
+**Date Evaluated:** 2026-02-02
+**Status:** UPDATED
+
+---
+
+## Privacy & Enterprise Use
+
+### Commercial/Enterprise Use Permission
+**Status:** ✅ APPROVED FOR COMMERCIAL USE
+
+**Key Findings:**
+- No-code AI app builder designed for company use
+- Free, Pro, Business, and Enterprise tiers available
+- All tiers support commercial app development
+- Private projects now default across all plans (important privacy update)
+
+### Model Training on User Data
+**Status:** 🚨 **USES DATA FOR TRAINING BY DEFAULT - OPT-OUT AVAILABLE**
+
+**From Lovable's Documentation:**
+- **Free/Pro Plans:** Customer data **CAN be used to fine-tune Lovable's AI unless you manually opt out**
+- **Business/Enterprise Plans:** Workspace-level switch to opt out of training data usage (enabled by default for Enterprise)
+- Must contact support to opt out on Free/Pro plans
+- Personally identifiable information (PII) never used directly - anonymized if aggregated
+
+**Key Findings:**
+- ⚠️ **Default behavior: data CAN be used for training on Free/Pro**
+- ⚠️ **Manual opt-out required** (must contact support on lower tiers)
+- ✅ **Business/Enterprise: opt-out enabled by default**
+- Raw PII not used for training (anonymized only)
+- Proprietary code and projects at risk on Free/Pro without opt-out
+
+**Enterprise Consideration:**
+- Free/Pro: Must request opt-out before using with proprietary code
+- Business/Enterprise: Safer defaults, workspace controls
+- Similar risk profile to Uizard (tiered data usage model)
+- Opt-out must be explicitly enabled/requested
+
+### Data Retention Policies
+**Status:** ⚠️ NOT PUBLICLY DETAILED
+
+**Key Findings:**
+- App artifacts stored in Lovable's cloud
+- Private projects now default (previously some were public)
+- Retention period not specified
+- Likely retains data while workspace is active
+- Deletion policies not transparent
+
+### Data Sharing Practices
+**Status:** ⚠️ TIER-DEPENDENT
+
+**Third-Party Sharing:**
+- Cloud infrastructure providers (AWS/GCP likely)
+- Underlying AI models (OpenAI, Anthropic, etc.)
+- Code hosting/deployment services
+- Without opt-out: anonymized data may be used internally for training
+
+**Infrastructure:**
+- Cloud-based SaaS platform
+- Private projects by default (recent improvement)
+- Workspace isolation for Business/Enterprise
+- Single-tenant available for Enterprise
+
+**Privacy Update:**
+- ✅ Private projects now default across all plans
+- Previously, some projects were public by default
+- Important confidentiality improvement
+
+### IP & Confidentiality Concerns
+**Status:** ✅ USER OWNS CODE (with training concerns on Free/Pro)
+
+**Intellectual Property:**
+- You retain rights to your app artifacts and generated code
+- Private projects by default (major improvement)
+- No IP claims by Lovable on your work
+- Enterprise includes enhanced security options
+
+**Confidentiality:**
+- Free/Pro: Code may be used for training without opt-out (⚠️)
+- Business/Enterprise: Better controls, opt-out by default
+- Private projects help confidentiality
+- Enterprise can include custom agreements/NDAs
+
+---
+
+## Pricing & Plans
+
+### Pricing Model
+**Structure:** Credit-based subscriptions
+
+### Free Tier
+**Availability:** ✅ YES
+
+**Features Included:**
+- 5 daily AI credits
+- Maximum 30 credits per month
+- Private projects by default
+- Basic app development features
+- No-code interface
+
+**Limitations:**
+- ⚠️ **Data may be used for training (must manually opt out)**
+- Very limited credits (5/day, 30/month)
+- Must contact support to disable training usage
+- Not suitable for proprietary work without opt-out
+
+### Paid Plans
+
+#### Pro Plan - $25/month
+**Features:**
+- ~100 AI credits per month
+- Private projects
+- Enhanced features
+- Priority generation
+
+**⚠️ Warning:** Data may be used for training - must request opt-out
+
+#### Business Plan - $50/month
+**Features:**
+- ~100 AI credits per month
+- ✅ **Workspace-level opt-out switch for training**
+- SSO support
+- Team collaboration
+- Better data controls
+- Private projects
+
+#### Enterprise Plan - Custom Pricing
+**Features:**
+- Custom credit allocations
+- ✅ **Opt-out enabled by default**
+- Enhanced security (single-tenant options)
+- Custom agreements/SLAs
+- Dedicated support
+- On-premises options potentially available
+- Advanced team management
+
+### Usage Limits
+- **Free:** 5 credits/day, 30 credits/month
+- **Pro:** ~100 credits/month
+- **Business:** ~100 credits/month + team features
+- **Enterprise:** Custom allocations
+- Credits reset monthly
+
+---
+
+## Enterprise Compatibility Assessment
+
+### Strengths ✅
+- Private projects by default (recent improvement)
+- User retains IP ownership of generated code
+- Business/Enterprise tiers have opt-out controls
+- No-code approach accessible to non-developers
+- Rapid app prototyping capabilities
+- Enterprise tier offers single-tenant deployment
+- Workspace-level privacy controls on Business+
+
+### Concerns 🚨
+- **MAJOR:** Free/Pro tiers use data for training by default
+- **Manual opt-out required** on lower tiers (must contact support)
+- Not opt-out by default on Free/Pro (violates best practices)
+- Credit limits may be restrictive for heavy usage
+- Data retention policies not transparent
+- PII handling relies on anonymization (not zero collection)
+
+### Red Flags
+- ⚠️ **DO NOT USE FREE/PRO TIERS FOR PROPRIETARY APPS WITHOUT OPT-OUT**
+- Default behavior allows training on customer code
+- Opt-out process requires manual support contact (not self-service on Free/Pro)
+- Risk of proprietary code/logic entering training dataset
+
+### Recommendations
+
+**⚠️ APPROVED WITH SIGNIFICANT CAVEATS - BUSINESS/ENTERPRISE PREFERRED**
+
+**For Enterprise Use:**
+- **MINIMUM:** Business tier with opt-out enabled
+- **PREFERRED:** Enterprise tier (opt-out by default, enhanced security)
+- **CRITICAL:** If using Free/Pro, MUST request opt-out before uploading code
+- Verify opt-out confirmation in writing from support
+- Ensure workspace-level switch is disabled for training
+
+**Best For:**
+- Rapid no-code app prototyping
+- Hackathon MVPs and demos
+- Teams without coding expertise
+- Quick web app generation
+- Internal tools and prototypes
+
+**Not Recommended For:**
+- Free/Pro usage with proprietary code (without confirmed opt-out)
+- Highly sensitive IP without Enterprise tier
+- Organizations requiring zero data usage for training (without manual verification)
+- Production apps with sensitive business logic
+
+**Comparison to Alternatives:**
+- **UX Pilot:** Does NOT train by default (safer default policy)
+- **Uizard:** Similar tiered model (training on Free/Pro)
+- **GitHub Copilot Business:** No training on customer code (better default)
+
+**For Hack Days:**
+- ⚠️ CAN be used IF opt-out is requested and confirmed FIRST
+- Business tier safer for team hackathons
+- DO NOT use Free/Pro for proprietary hackathon projects without opt-out
+- Consider time-boxed Business subscription for event
+- Alternative: Use GitHub Copilot or Continue.dev for code generation with safer defaults
+
+---
+
+## Sources & References
+
+1. **ChatGPT Evaluation Report** - Lovable Documentation analysis (C:\source\repos\ai_tools_evaluation\chatGPT_report.md)
+2. **Lovable Website:** https://lovable.dev
+3. **Lovable Docs** (referenced in ChatGPT report)
+4. **Privacy Update:** Private projects now default across plans
+
+---
+
+## Notes
+- Last Updated: 2026-02-02
+- Evaluator: Claude Code based on ChatGPT findings
+- **Critical Finding:** Lovable uses tiered opt-out model - Free/Pro require manual opt-out request
+- **Important Update:** Private projects now default (previously some were public)
+- **Action Required:** Request and confirm opt-out before using with proprietary code on Free/Pro
+- **Similar Profile:** Comparable to Uizard's tiered privacy approach
+
+---
+
+## ⚠️ PROCUREMENT ALERT
+
+**This tool requires opt-out verification due to data training policy.**
+
+Before using Lovable:
+1. Determine if default training usage is acceptable
+2. **If using Free/Pro:** Contact support to request opt-out BEFORE uploading code
+3. Get written confirmation of opt-out from support
+4. **Business tier minimum recommended** (workspace-level opt-out switch)
+5. **Enterprise tier preferred** (opt-out by default + enhanced security)
+6. Verify opt-out setting is enabled in workspace settings
+7. Consider alternatives with safer defaults (UX Pilot, GitHub Copilot)
+
+**Recommended Tier:** Business (minimum) or Enterprise (preferred)
+
+**Pre-Deployment Checklist:**
+- □ Opt-out requested and confirmed (if Free/Pro)
+- □ Written confirmation received
+- □ Workspace opt-out switch verified (Business/Enterprise)
+- □ Team trained on private project settings
+- □ Alternative tools evaluated (UX Pilot, Copilot)