Loopsuite
  • Home
  • Pricing
  • Try Loopi

Privacy Policy

Last updated: February 2026

Contents

  1. Who We Are
  2. What This Policy Covers
  3. What Data We Collect
  4. How We Use Your Data
  5. AI Processing
  6. Email Outreach and LoopGen (Lead Generation)
  7. Third-Party Processors
  8. International Data Transfers
  9. Data Retention
  10. Your Rights (UK GDPR)
  11. Data Security
  12. Children
  13. Cookies
  14. California Residents (CCPA/CPRA)
  15. Supervisory Authority
  16. Google Workspace Integration
  17. WhatsApp Business Integration
  18. Changes to This Policy
  19. Contact Us

1. Who We Are

Loopsuite is a trading name of Trovelogic Ltd, a company registered in England and Wales.

  • Registered address: 1 Hurley Lane, Norton Canes, Atherstone, Staffordshire, CV9 2JJ, United Kingdom
  • Data protection contact: [email protected]
  • Website: https://loopsuite.ai

We are the data controller for the personal data we collect about our customers. Where our customers use Loopsuite to contact third-party leads, we act as a data processor on behalf of our customers, who are the controllers of that outreach.

2. What This Policy Covers

This policy explains how we collect, use, store, and protect personal data when you:

  • Visit our website (loopsuite.ai)
  • Create a Loopsuite account
  • Use the Loopsuite platform and its features (the "Service")
  • Communicate with us

It also explains the rights of individuals whose publicly available business contact information is found through our LoopGen (lead generation) feature.

3. What Data We Collect

3.1 Account Information

When you sign up, we collect:

  • Name and email address
  • Password (stored securely hashed — we never see or store your plaintext password)
  • Business name, website URL, and industry
  • Google account data (if you sign up via Google OAuth — name and email only)

3.2 Business Profile Data

During onboarding and ongoing use, we collect and analyse:

  • Your business website content (scraped from your publicly available website to understand your brand)
  • Brand voice, tone, and style preferences
  • Target audience and ideal customer descriptions
  • Services, products, and pricing information you provide
  • Social media account connections (via OAuth — you explicitly grant access)
  • Google Ads and Meta Ads account connections (via your own ad accounts)
  • Google Workspace connections (Gmail, Calendar, Drive — via OAuth)
  • WhatsApp Business connection (company phone number linked for business messaging)

3.3 WhatsApp Business Data

If you connect your company WhatsApp number to Loopsuite, we collect and process:

  • WhatsApp message content sent and received through your business number
  • Contact phone numbers of message recipients
  • Message delivery and read status
  • WhatsApp authentication credentials (stored securely on your isolated container)

Important: Loopsuite does not access your personal WhatsApp messages. We only process messages sent or received through the business WhatsApp connection you explicitly set up.

3.4 Chat Conversations

All conversations with your AI teammate (Loopi) are stored to provide context and continuity across sessions, improve responses based on your preferences, and maintain a record of instructions and decisions.

3.5 Usage Data

We track how you use the platform, including features used, content generated, LoopGen (lead generation) activity, and subscription events.

3.6 LoopGen Lead Data (Publicly Available Business Information)

When you use our LoopGen (lead generation) feature, we find potential business contacts on your behalf by searching the public web. We collect:

  • Business name and website URL
  • Publicly listed email addresses
  • Publicly listed phone numbers
  • Business address (if publicly available)
  • Industry and service descriptions

Important: We find this information exclusively through web search. We do not scrape LinkedIn or social media, scrape directories or databases, purchase data lists, access private databases, or collect personal (non-business) contact information.

3.7 Payment Information

We use Stripe to process all payments. We never see, handle, or store your full card details. Stripe provides us with last four digits of your card, card expiry date, billing address, and Stripe customer identifiers.

3.8 Technical Data

We automatically collect IP address, browser type and version, device information, pages visited, and referring website.

3.9 Cookies

We use minimal cookies: authentication tokens (essential) and preferences (functional). We do not use advertising or third-party tracking cookies.

4. How We Use Your Data

PurposeData usedLegal basis (GDPR)
Provide the ServiceAccount info, business data, conversationsContract performance (Art. 6(1)(b))
Process paymentsAccount info, payment dataContract performance (Art. 6(1)(b))
Generate leadsBusiness profile, target criteriaLegitimate interest (Art. 6(1)(f))
Send outreach emailsLead data, email contentLegitimate interest (Art. 6(1)(f))
Post to social mediaBusiness profile, social connectionsContract performance; OAuth consent
Send WhatsApp messagesContact phone numbers, message content, WhatsApp connectionContract performance (Art. 6(1)(b)); your instruction as controller
Manage your adsBusiness profile, ad account connectionsContract performance; OAuth consent
Improve the ServiceUsage data, aggregated analyticsLegitimate interest (Art. 6(1)(f))
Prevent fraudAccount info, technical dataLegitimate interest (Art. 6(1)(f))
Legal obligationsAccount and billing recordsLegal obligation (Art. 6(1)(c))

5. AI Processing

5.1 How AI Is Used

Loopsuite uses artificial intelligence to power your AI teammate (Loopi), analyse your business, generate content, find and research leads, optimise advertising, and provide business insights.

5.2 How Your Data Is Processed

Your chat messages and business context are sent to AI models for processing. Each customer has an isolated AI container — your data is never mixed with other customers' data. AI providers process data under their data processing terms and do not use your data to train their models.

5.3 No Automated Decision-Making

We do not use AI to make decisions that produce legal effects or similarly significantly affect you.

6. Email Outreach and LoopGen (Lead Generation)

All outreach emails are sent from your business identity, contain a clear unsubscribe link, are professional and introductory, are limited in volume, respect opt-out requests immediately, and include your business details.

Legal basis: For UK/EU recipients, we rely on legitimate interest for B2B communications. For US recipients, emails comply with CAN-SPAM. For Canadian recipients, we rely on the implied consent exception for publicly available business information.

Your responsibilities: When using LoopGen (lead generation), you are the data controller for the leads found and contacted. Loopsuite acts as your data processor.

6b. WhatsApp Business Messaging

If you connect your company WhatsApp number to Loopsuite, your AI teammate can send and receive WhatsApp messages on your behalf. This includes:

  • Appointment reminders sent to your customers before scheduled bookings
  • Review requests sent after completed jobs
  • Follow-up messages sent to leads or enquiries
  • Customer support replies when customers message your business number

How it works: Messages are sent from your company WhatsApp number, not from a Loopsuite number. Recipients see your business name and number as the sender.

Data processed: We process the recipient's phone number, message content, delivery status, and read receipts. This data is stored within your isolated Loopsuite account.

Your responsibilities: You are the data controller for WhatsApp messages sent via Loopsuite. You are responsible for ensuring you have appropriate consent or legal basis to contact recipients. Loopsuite acts as your data processor. You must comply with WhatsApp's terms of service and applicable messaging regulations (UK PECR, EU ePrivacy Directive).

Opt-out: If a recipient asks to stop receiving messages, we will mark them and prevent further WhatsApp outreach. You can disconnect your WhatsApp Business connection at any time by asking your AI teammate or contacting support.

7. Third-Party Processors

ProviderPurposeLocation
StripePayment processingUSA (EU-US DPF)
Google (Gemini API)AI processingUSA (EU-US DPF)
SupabaseDatabase hostingEU/USA
Fly.ioAI container hostingMultiple regions
MailgunEmail deliveryUSA/EU
Meta (WhatsApp)WhatsApp Business messagingUSA/EU (EU-US DPF)

Social media and advertising platforms are only involved when you explicitly connect your accounts. We do not sell your personal data to anyone.

8. International Data Transfers

Where personal data is transferred internationally, we rely on the UK/EU-US Data Privacy Framework, Standard Contractual Clauses (SCCs), and adequacy decisions as appropriate.

9. Data Retention

Data typeRetention period
Account and business profileDuration of account + 30 days
Chat conversationsDuration of account + 30 days
Lead dataDuration of account; deleted on closure
Email outreach recordsDuration of account + 6 months
WhatsApp message recordsDuration of account; deleted on closure
Opt-out/unsubscribe listsIndefinitely (for compliance)
Payment/billing records7 years (UK tax requirements)
Technical/server logs90 days

10. Your Rights (UK GDPR)

You have the right to: access, rectification, erasure, restriction, portability, object to processing, withdraw consent, and lodge a complaint with the ICO.

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

Rights of lead recipients: If your business contact information has been found through our LoopGen (lead generation) service, you can opt out, request deletion, or request to know what data we hold.

11. Data Security

  • Encryption in transit (TLS) and at rest
  • Isolated containers per customer
  • Row-level security on database
  • Secure password hashing
  • Stripe handles payments (PCI DSS Level 1)

12. Children

Loopsuite is a business tool and is not intended for use by anyone under 18. We do not knowingly collect data from children.

13. Cookies

CookiePurposeTypeDuration
Authentication tokenKeeps you logged inEssentialSession / 30 days
PreferencesRemembers settingsFunctional1 year

We do not currently use any third-party advertising or tracking cookies. If we introduce analytics cookies in the future, we will update this policy and implement a cookie consent banner.

14. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights: right to know, right to delete, right to correct, right to opt out of sale/sharing. We do not sell or share your personal information.

15. Supervisory Authority

You may lodge a complaint with the UK Information Commissioner's Office (ICO):

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Tel: 0303 123 1113
https://ico.org.uk

16. Google Workspace Integration

If you connect your Google Workspace account to Loopsuite, the following applies to how we access and handle your Google user data:

16.1 Scopes and Data Accessed

Google ServiceAccess LevelHow We Use It
Google CalendarRead & WriteLoopsuite syncs marketing campaign milestones, content deadlines, and publication dates with your Google Calendar. We create, update, and remove calendar events on your behalf. We also read your calendar to detect scheduling conflicts and suggest optimal content times.
Google DocsRead-onlyYou can select a Google Doc to import as a draft blog post, email newsletter, or content brief within Loopsuite. Your AI teammate Loopi can analyse a selected document to suggest headlines, social media excerpts, and SEO improvements. We only read documents you explicitly select — we do not scan or index all documents.
Google ContactsRead-onlyYou can import contacts into Loopsuite's CRM to use as recipients for email campaigns, outreach, or lead nurturing workflows. We use contact data (name, email, company, job title) to segment audiences for targeted campaigns.
Google SheetsRead & WriteYou can import marketing data from Sheets (e.g., product catalogues, lead lists, content calendars) and export campaign performance reports and analytics summaries back to Sheets for sharing with your team.

16.2 Data Handling

  • All Google user data is transmitted over HTTPS/TLS and stored encrypted at rest.
  • Google data is stored within your isolated Loopsuite account and is never shared with other customers or third parties.
  • Google data is not used to train generalised AI models. Your AI teammate Loopi uses Google data solely to provide personalised features within your Loopsuite account.
  • Google data is not sold, rented, or used for advertising purposes.

16.3 Revoking Access

You can disconnect your Google account at any time from your Loopsuite settings. You can also revoke access directly from your Google Account permissions page. Upon disconnection, we stop accessing your Google data. Previously imported data (e.g., contacts imported into your CRM) remains in your Loopsuite account until you delete it or close your account.

16.4 Limited Use Disclosure

Loopsuite's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

17. WhatsApp Business Integration

If you connect your company WhatsApp number to Loopsuite, the following applies to how we access and handle your WhatsApp data:

17.1 What We Access

CapabilityAccess LevelHow We Use It
Send messagesWriteSend appointment reminders, review requests, follow-up messages, and customer support replies from your business WhatsApp number on your instruction.
Receive messagesReadReceive and process incoming WhatsApp messages to your business number so your AI teammate can respond appropriately.
Contact historyReadSearch your WhatsApp message history to provide context for customer conversations and support enquiries.

17.2 Data Handling

  • All WhatsApp data is transmitted over encrypted connections and stored within your isolated Loopsuite container.
  • WhatsApp data is never shared with other customers or third parties (other than Meta/WhatsApp as the underlying platform).
  • WhatsApp data is not used to train AI models. Your AI teammate uses WhatsApp data solely to provide messaging features within your account.
  • WhatsApp authentication credentials are stored locally on your isolated container, not in our central database.

17.3 Disconnecting

You can disconnect your WhatsApp Business connection at any time by asking your AI teammate or contacting [email protected]. Upon disconnection, we stop accessing your WhatsApp account. Message records remain in your Loopsuite account until you delete them or close your account.

17.4 Your Responsibilities

When using WhatsApp Business through Loopsuite:

  • You are the data controller for messages sent via your WhatsApp number
  • You must ensure you have appropriate consent or legal basis to contact recipients
  • You must comply with WhatsApp's Business Terms of Service
  • You must respect opt-out requests from recipients
  • You must comply with applicable messaging regulations (UK PECR, EU ePrivacy Directive, CAN-SPAM for US recipients)

18. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email and/or in-app notification.

19. Contact Us

For any questions about this privacy policy or your personal data:

  • Email: [email protected]
  • Post: Trovelogic Ltd, 1 Hurley Lane, Norton Canes, Atherstone, Staffordshire, CV9 2JJ, United Kingdom
  • Website: https://loopsuite.ai
Loopsuite

Your first AI employee.

Legal

  • Privacy Policy
  • Terms of Service
  • Acceptable Use

Contact

  • [email protected]
© 2026 Loopsuite. All rights reserved.

Coming Soon

We're making some updates and will be available Feb 2026.