Privacy policy
Last updated: October 13, 2026
Loopaa signs in to the user's product and clicks through it, so security has to be part of the design rather than a matter of trust. This policy explains what data is used, why, and how it is protected.
1. Controller
The data controller is [LEGAL ENTITY], located at [ADDRESS]. For any privacy question, contact [CONTACT EMAIL].
2. What data is used
Depending on how Loopaa is used, it processes:
- Waitlist: the work email entered in the form.
- Account: name, email and billing details.
- Product access: the URL and the demo account credentials.
- Product content: screenshots and text from the screens the agent walks through, needed to explore and write the script.
- Usage: activity within Loopaa, credits used and technical data to keep the service running.
3. Why it is used
Data is used to provide the service (exploring the product, drafting the plan, recording and re-recording videos), bill the plans, provide support, share early access updates and improve how Loopaa works.
4. How product access is protected
- A demo account is required. If Loopaa detects signs of a production account, it warns before exploring.
- Credentials are stored encrypted and used only inside the recording browser. They are never displayed or sent to the AI model.
- Navigation is limited to the domains of the user's app.
- Loopaa won't delete, pay, message third parties, change passwords or permissions, or invite users without the user's confirmation.
- If sensitive data shows up in a video, Loopaa flags it and the user chooses whether to blur it.
5. Providers
To provide the service, Loopaa works with providers of AI models, voice synthesis, infrastructure and payment processing. Each one receives only the data its task requires. Screenshots and on-screen text are sent to AI models to explore and write the script; credentials never are.
What the model sees of the product is never used to train models.
6. Retention and deletion
Data is kept while the account is active. Deleting a product deletes its credentials, its videos and its saved walkthrough. When an account is closed, its data is deleted within [PERIOD] days, except what the law requires keeping (for example, billing records).
7. Rights
Anyone can request access to, correction, deletion or portability of their data, or object to its processing, by writing to [CONTACT EMAIL]. Requests are answered within 30 days.
8. Cookies and local storage
This site uses no advertising cookies. It only stores the light or dark theme preference in the browser.
9. Changes to this policy
If this policy changes materially, users are notified by email before the change takes effect.