Privacy Policy

This Privacy Policy explains how Loop (“Loop,” “we,” “us”) collects, uses, and protects information when you use our website and the Loop application (the “Service”). By using the Service, you agree to the practices described here.

[Placeholder: confirm your legal entity name, registered address, and governing jurisdiction, and have this reviewed by counsel before publishing.]

Information we collect

Account information

When you create an account we collect your name, email address, and team or organization details. Because Loop uses passwordless sign-in, we do not store passwords.

Connected-source content

When you connect a source — such as Discord, Slack, Intercom, or a support inbox — Loop ingests the messages, threads, and metadata you authorize so it can generate signals and evidence. Access is read-only; Loop does not post or modify content in your connected tools.

Usage and device data

We collect standard log and usage data (such as pages viewed, actions taken, browser type, and IP address) to operate and improve the Service.

How we use information

• To provide, maintain, and improve the Service;
• To generate signals, evidence, and summaries from your connected sources;
• To authenticate you and secure your account;
• To respond to support requests and communicate with you;
• To detect, prevent, and address fraud, abuse, or security issues.

How we share information

We do not sell your personal information. We share data only with:

• Service providers (subprocessors) who help us run the Service — including cloud hosting, our database provider, and the AI model provider used to analyze content. These providers process data on our behalf under contract.
• Legal and safety recipients, where required by law or to protect rights, property, or safety.
• Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this Policy.

[Placeholder: maintain a current list of subprocessors and link it here.]

Data retention

We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your data as described below.

Security

We use technical and organizational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at [email protected]. We will respond consistent with applicable law (including the GDPR and CCPA where they apply).

International transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for such transfers.

Children

The Service is not directed to children and is not intended for anyone under the age of 16. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Policy from time to time. We will post the updated version here and revise the “Last updated” date above. Material changes will be communicated where appropriate.

Contact

Questions about this Policy? Email [email protected].