ai_tools_analysis/evaluation_design_lovable_updated.md

# Lovable - Enterprise Compatibility Evaluation

## Tool Overview
**Name:** Lovable (formerly GPT Engineer)
**Website:** https://lovable.dev
**Category:** AI-Powered No-Code App Builder
**Date Evaluated:** 2026-02-02
**Status:** UPDATED

---

## Privacy & Enterprise Use

### Commercial/Enterprise Use Permission
**Status:** ✅ APPROVED FOR COMMERCIAL USE

**Key Findings:**
- No-code AI app builder designed for company use
- Free, Pro, Business, and Enterprise tiers available
- All tiers support commercial app development
- Private projects now default across all plans (important privacy update)

### Model Training on User Data
**Status:** 🚨 **USES DATA FOR TRAINING BY DEFAULT - OPT-OUT AVAILABLE**

**From Lovable's Documentation:**
- **Free/Pro Plans:** Customer data **CAN be used to fine-tune Lovable's AI unless you manually opt out**
- **Business/Enterprise Plans:** Workspace-level switch to opt out of training data usage (enabled by default for Enterprise)
- Must contact support to opt out on Free/Pro plans
- Personally identifiable information (PII) never used directly - anonymized if aggregated

**Key Findings:**
- ⚠️ **Default behavior: data CAN be used for training on Free/Pro**
- ⚠️ **Manual opt-out required** (must contact support on lower tiers)
- ✅ **Business/Enterprise: opt-out enabled by default**
- Raw PII not used for training (anonymized only)
- Proprietary code and projects at risk on Free/Pro without opt-out

**Enterprise Consideration:**
- Free/Pro: Must request opt-out before using with proprietary code
- Business/Enterprise: Safer defaults, workspace controls
- Similar risk profile to Uizard (tiered data usage model)
- Opt-out must be explicitly enabled/requested

### Data Retention Policies
**Status:** ⚠️ NOT PUBLICLY DETAILED

**Key Findings:**
- App artifacts stored in Lovable's cloud
- Private projects now default (previously some were public)
- Retention period not specified
- Likely retains data while workspace is active
- Deletion policies not transparent

### Data Sharing Practices
**Status:** ⚠️ TIER-DEPENDENT

**Third-Party Sharing:**
- Cloud infrastructure providers (AWS/GCP likely)
- Underlying AI models (OpenAI, Anthropic, etc.)
- Code hosting/deployment services
- Without opt-out: anonymized data may be used internally for training

**Infrastructure:**
- Cloud-based SaaS platform
- Private projects by default (recent improvement)
- Workspace isolation for Business/Enterprise
- Single-tenant available for Enterprise

**Privacy Update:**
- ✅ Private projects now default across all plans
- Previously, some projects were public by default
- Important confidentiality improvement

### IP & Confidentiality Concerns
**Status:** ✅ USER OWNS CODE (with training concerns on Free/Pro)

**Intellectual Property:**
- You retain rights to your app artifacts and generated code
- Private projects by default (major improvement)
- No IP claims by Lovable on your work
- Enterprise includes enhanced security options

**Confidentiality:**
- Free/Pro: Code may be used for training without opt-out (⚠️)
- Business/Enterprise: Better controls, opt-out by default
- Private projects help confidentiality
- Enterprise can include custom agreements/NDAs

---

## Pricing & Plans

### Pricing Model
**Structure:** Credit-based subscriptions

### Free Tier
**Availability:** ✅ YES

**Features Included:**
- 5 daily AI credits
- Maximum 30 credits per month
- Private projects by default
- Basic app development features
- No-code interface

**Limitations:**
- ⚠️ **Data may be used for training (must manually opt out)**
- Very limited credits (5/day, 30/month)
- Must contact support to disable training usage
- Not suitable for proprietary work without opt-out

### Paid Plans

#### Pro Plan - $25/month
**Features:**
- ~100 AI credits per month
- Private projects
- Enhanced features
- Priority generation

**⚠️ Warning:** Data may be used for training - must request opt-out

#### Business Plan - $50/month
**Features:**
- ~100 AI credits per month
- ✅ **Workspace-level opt-out switch for training**
- SSO support
- Team collaboration
- Better data controls
- Private projects

#### Enterprise Plan - Custom Pricing
**Features:**
- Custom credit allocations
- ✅ **Opt-out enabled by default**
- Enhanced security (single-tenant options)
- Custom agreements/SLAs
- Dedicated support
- On-premises options potentially available
- Advanced team management

### Usage Limits
- **Free:** 5 credits/day, 30 credits/month
- **Pro:** ~100 credits/month
- **Business:** ~100 credits/month + team features
- **Enterprise:** Custom allocations
- Credits reset monthly

---

## Enterprise Compatibility Assessment

### Strengths ✅
- Private projects by default (recent improvement)
- User retains IP ownership of generated code
- Business/Enterprise tiers have opt-out controls
- No-code approach accessible to non-developers
- Rapid app prototyping capabilities
- Enterprise tier offers single-tenant deployment
- Workspace-level privacy controls on Business+

### Concerns 🚨
- **MAJOR:** Free/Pro tiers use data for training by default
- **Manual opt-out required** on lower tiers (must contact support)
- Not opt-out by default on Free/Pro (violates best practices)
- Credit limits may be restrictive for heavy usage
- Data retention policies not transparent
- PII handling relies on anonymization (not zero collection)

### Red Flags
- ⚠️ **DO NOT USE FREE/PRO TIERS FOR PROPRIETARY APPS WITHOUT OPT-OUT**
- Default behavior allows training on customer code
- Opt-out process requires manual support contact (not self-service on Free/Pro)
- Risk of proprietary code/logic entering training dataset

### Recommendations

**⚠️ APPROVED WITH SIGNIFICANT CAVEATS - BUSINESS/ENTERPRISE PREFERRED**

**For Enterprise Use:**
- **MINIMUM:** Business tier with opt-out enabled
- **PREFERRED:** Enterprise tier (opt-out by default, enhanced security)
- **CRITICAL:** If using Free/Pro, MUST request opt-out before uploading code
- Verify opt-out confirmation in writing from support
- Ensure workspace-level switch is disabled for training

**Best For:**
- Rapid no-code app prototyping
- Hackathon MVPs and demos
- Teams without coding expertise
- Quick web app generation
- Internal tools and prototypes

**Not Recommended For:**
- Free/Pro usage with proprietary code (without confirmed opt-out)
- Highly sensitive IP without Enterprise tier
- Organizations requiring zero data usage for training (without manual verification)
- Production apps with sensitive business logic

**Comparison to Alternatives:**
- **UX Pilot:** Does NOT train by default (safer default policy)
- **Uizard:** Similar tiered model (training on Free/Pro)
- **GitHub Copilot Business:** No training on customer code (better default)

**For Hack Days:**
- ⚠️ CAN be used IF opt-out is requested and confirmed FIRST
- Business tier safer for team hackathons
- DO NOT use Free/Pro for proprietary hackathon projects without opt-out
- Consider time-boxed Business subscription for event
- Alternative: Use GitHub Copilot or Continue.dev for code generation with safer defaults

---

## Sources & References

1. **ChatGPT Evaluation Report** - Lovable Documentation analysis (C:\source\repos\ai_tools_evaluation\chatGPT_report.md)
2. **Lovable Website:** https://lovable.dev
3. **Lovable Docs** (referenced in ChatGPT report)
4. **Privacy Update:** Private projects now default across plans

---

## Notes
- Last Updated: 2026-02-02
- Evaluator: Claude Code based on ChatGPT findings
- **Critical Finding:** Lovable uses tiered opt-out model - Free/Pro require manual opt-out request
- **Important Update:** Private projects now default (previously some were public)
- **Action Required:** Request and confirm opt-out before using with proprietary code on Free/Pro
- **Similar Profile:** Comparable to Uizard's tiered privacy approach

---

## ⚠️ PROCUREMENT ALERT

**This tool requires opt-out verification due to data training policy.**

Before using Lovable:
1. Determine if default training usage is acceptable
2. **If using Free/Pro:** Contact support to request opt-out BEFORE uploading code
3. Get written confirmation of opt-out from support
4. **Business tier minimum recommended** (workspace-level opt-out switch)
5. **Enterprise tier preferred** (opt-out by default + enhanced security)
6. Verify opt-out setting is enabled in workspace settings
7. Consider alternatives with safer defaults (UX Pilot, GitHub Copilot)

**Recommended Tier:** Business (minimum) or Enterprise (preferred)

**Pre-Deployment Checklist:**
- □ Opt-out requested and confirmed (if Free/Pro)
- □ Written confirmation received
- □ Workspace opt-out switch verified (Business/Enterprise)
- □ Team trained on private project settings
- □ Alternative tools evaluated (UX Pilot, Copilot)