Privacy Policy

We collect the following categories of information:

• Account information: your name, email address, organization name, team members you invite, and your preferences such as language and time zone.
• Billing information: subscription plan and payment status. Card details are collected and stored by our payment processor (Stripe); we do not store full card numbers.
• Content you provide: media you upload or import, prompts, messages and files you send to the AI agent, drafts, content plans, schedules, brand guidelines, workflow settings, and the notes the agent saves to your brand's memory (which you can see, edit and delete in Loopli).
• Loopli on WhatsApp: if you link your phone to Loopli or start Loopli by messaging its WhatsApp number, we keep your WhatsApp number, your WhatsApp profile name and the messages you exchange with Loopli's number, to answer you and to show the conversation in your account. Voice notes you send are transcribed to text (see section 6); we keep the text, not the audio. If you sign up there, the business name and email you send are used to create your account.
• Data from connected platforms (see sections 2 and 3).
• Technical information: IP address, browser and device type, log data and cookies needed to keep you signed in and to secure the Service.
• How you found us: on your first visit we store one first-party cookie (loopli_ft, kept 90 days) with the campaign tags in the link you followed (such as utm_source), the website that referred you and the first page you saw. If you sign up, it is saved with your account so we know which channels bring new customers. It is not shared with advertisers or other third parties.
• Usage analytics: we use Google Analytics on loopli.io and in the app to understand how people use them (pages viewed, the link or campaign that brought them, device and approximate location). It sets its own cookies (such as _ga), and Google processes this data for us under its data processing terms. Email addresses, tokens and other values are removed from page addresses before they are sent, and Google's optional data sharing is turned off. You can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout.

When you connect your Facebook Pages, Instagram professional accounts or Meta ad accounts using Facebook Login, you choose which assets Loopli may access, and Meta shares data with us according to the permissions you grant. Depending on those permissions, this may include:

• Basic profile and asset information: your Facebook user ID and name, the Pages, Instagram accounts and ad accounts you selected, and their names, IDs and profile pictures.
• Content: posts, photos, videos, Reels and Stories published by your accounts, and the content you publish through Loopli.
• Engagement: comments, replies and mentions on your content, including the public username and text of the people who wrote them.
• Messages: direct messages sent to your Page or Instagram account, so you can read and answer them in Loopli.
• Insights: account and content metrics such as views, reach, interactions, follower counts and aggregated audience demographics.
• Advertising data: campaigns, ad sets, ads, creatives, budgets, performance metrics and lead form submissions for ad accounts you connect.

If you connect Google Drive, the connection is made through our integration provider, Composio, and Google asks for your consent. Loopli uses that access to list your files' names, types, sizes and thumbnails so you can browse them, and to copy the files you select into your media library. If you ask the AI agent to work with your Drive (for example, to find a file), it uses the same connection, and anything that would create or change files needs your OK in the chat first.

We do not use data from Google APIs for advertising or to train AI models, and we do not sell it. Loopli's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time from your Google Account's third-party connections.

• To provide the Service: publish and schedule content you approve or put on autopilot, show your inbox and analytics, manage the ads you approve or put on autopilot, and run the AI agent on your behalf.
• To generate drafts, images, videos and suggestions with AI models when you ask the agent to do so.
• To keep the Service secure, prevent abuse and debug problems.
• To communicate with you about your account, billing and changes to the Service.
• To comply with legal obligations.

• We do not sell your personal information or your Meta Platform Data.
• We do not use data obtained from Meta, or content from your connected accounts, to train AI models.
• We do not use Meta Platform Data for advertising profiling, and we do not share it with data brokers.
• We do not publish, reply, send messages or spend ad budget unless a person on your team approves it, or a brand manager on your team has turned on autopilot for that action in the Service.

To generate text, images and video, the content of your request and the relevant context (for example a caption draft or an image you uploaded) is sent to third-party AI model providers acting as our service providers. They process it only to return a result to us, under agreements that do not allow them to use it to train their models.

When you ask, the agent can search the web through a search provider and read public web pages or documents you point it to; only the search query or the address is sent for that. To find relevant notes in your brand's memory, their text is converted into numerical representations (embeddings) by an AI model provider. A voice note you send Loopli on WhatsApp is sent to an AI model provider to be transcribed; only the text is kept.

We share information only as needed to provide the Service:

• With Meta, when you instruct Loopli to publish content, reply, send messages or manage ads on your connected accounts.
• With service providers that host and operate the Service on our behalf, such as cloud hosting and storage (Amazon Web Services), payment processing (Stripe), email delivery (Postmark), error monitoring, AI model providers (including through OpenRouter), app integrations such as Google Drive (Composio) and web search (SerpAPI). They may use the information only to provide services to us.
• With other members of your organization, according to the roles you assign.
• When required by law, or to protect the rights, safety and security of our users, the public or Loopli.
• In connection with a merger, acquisition or sale of assets, subject to this policy.

We keep your information while your account is active and as needed to provide the Service. When you disconnect a Meta asset, we stop accessing it and delete the related Platform Data within 30 days, except where we must keep limited records to comply with law, resolve disputes or enforce our agreements. When you close your account, we delete or anonymize your data within 30 days, except for backups, which expire within a further 30 days, and billing records we are required to keep.

You can ask us to delete your data at any time. See our Data Deletion page at loopli.io/en/data-deletion for instructions, including how to remove Loopli from your Facebook settings.

We protect information with encryption in transit (TLS), encryption at rest for access tokens and credentials, access controls limited to staff who need it, and separation of each customer's data. No system is perfectly secure; if a security incident affects your data, we will notify you and the relevant authorities as required by law.

Depending on where you live — including under the EU/UK GDPR, Brazil's LGPD and US state privacy laws — you may have the right to access, correct, delete or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us. We will respond within the time required by law. You may also complain to your local data protection authority.

Loopli is based in the United States, and we and our service providers may process information in the United States and other countries. Where required, we use appropriate safeguards such as standard contractual clauses.

The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

We may update this policy. If we make material changes, we will notify you by email or in the Service before they take effect. The date at the top shows when it was last updated.

Loopli, Inc. · hello@loopli.io