Privacy Policy

Loop ("Loop", "CreatorLoopHQ", "we", "us", or "our"), operating at creatorloophq.com, provides a Facebook and Instagram DM automation and audience intelligence platform. This Privacy Policy explains what we collect, how we use it, and the rights you have over your data.

Questions? Email privacy@creatorloophq.com.

1. Information We Collect

• Account information (name, email, password hashes, billing details).
• Facebook Page and Instagram account data you authorize via Meta OAuth.
• Subscriber information and email addresses captured through your automations.
• DM interaction data, conversation history, and engagement metrics.
• Payment information processed by Stripe — we never see or store your card number.
• Usage logs, device information, and IP addresses for security and analytics.
• Email delivery events (sends, bounces, unsubscribes) for messages you send through Loop.
• Web push subscription endpoints, if you opt into push notifications.

2. How We Use Your Information

• Operate, maintain, and improve the Loop platform.
• Send and process automated DMs and replies on your behalf.
• Process subscriptions, billing, and customer support.
• Detect abuse, prevent fraud, and enforce our Terms.
• Communicate product updates and transactional notifications.

3. Third-Party Services

Loop relies on the following processors. Their use of your data is governed by their own policies:

• Facebook / Meta Graph API (Facebook & Instagram integration)
• Stripe (payments)
• Supabase (database, auth, storage)
• Lovable AI Gateway (Google Gemini models) — AI copy and reply generation
• Mailgun (transactional email and creator broadcasts, sent from send.creatorloophq.com)
• Web push services (Apple, Google, Mozilla) — delivery of push notifications you opt into

4. Data Retention

We retain your data for as long as your account is active. Your data is deleted on request; backups are purged within 30 days.

5. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request export of your data in a portable format.
• Request deletion of your data at any time — see our Data Deletion page for the three ways to do this (in-app, via Facebook, or by email).
• Correct inaccurate information.
• Withdraw consent and disconnect Meta integrations.

To exercise these rights, email privacy@creatorloophq.com or use the Data Deletion page.

6. GDPR (EU/UK Users)

If you are located in the European Economic Area or the United Kingdom, you have rights under the GDPR including access, rectification, erasure, restriction of processing, data portability, and the right to object. Loop acts as a data controller for account data and as a data processor for subscriber data you collect through your automations. Our lawful bases for processing are contract performance, legitimate interest, and consent.

7. CCPA (California Users)

California residents have the right to know what personal information we collect, to request deletion, to opt out of the "sale" of personal information (we do not sell your data), and to be free from discrimination for exercising these rights. Submit requests to privacy@creatorloophq.com.

8. Unsubscribe & Opt-Out

Recipients of automated DMs sent through Loop can reply STOP at any time to be permanently removed from all future messaging across the sending account.

9. Children

Loop is not intended for users under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

10. Security

We use industry-standard encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. No system is perfectly secure — please use a strong, unique password.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-product notice prior to taking effect.

12. Contact

Loop (CreatorLoopHQ) — privacy@creatorloophq.com