Privacy Policy

Last Updated: August 14th, 2025

1. Introduction and Purpose

1.1 Purpose of Policy.
This Privacy Policy (“Policy”) sets forth the principles and procedures governing the collection, use, disclosure, storage, and protection of personal and non-personal information by Loopp.com, its parent entities, subsidiaries, affiliates, and related entities (collectively, “Loopp,” “we,” “our,” or “us”).

1.2 Commitment to Privacy.
Loopp is committed to safeguarding the privacy of individuals who interact with our website located at www.loopp.com (“Website”), mobile applications, and any associated services, features, or functionalities (together, the “Services”). We comply with applicable privacy laws, including without limitation the European Union General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”), and other applicable data protection frameworks.

1.3 Acceptance of Policy.
By accessing or using the Services, you (“User” or “you”) acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. If you do not agree, you must immediately discontinue use of the Services.

2. Definitions

For purposes of this Policy:

“Personal Data” means any information relating to an identified or identifiable natural person, including but not limited to name, email address, account identifiers, location data, and online identifiers.
“Processing” means any operation performed on Personal Data, whether or not by automated means, including collection, recording, organization, storage, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, restriction, erasure, or destruction.
“Data Controller” means Loopp in relation to Users’ Personal Data, except where Loopp acts on behalf of a client or partner as a data processor.
“Applicable Law” means any and all applicable statutes, regulations, and rules governing privacy, data protection, and data security.

3. Categories of Information Collected

3.1 Information You Provide Directly.
We may collect Personal Data you voluntarily provide, including:

Account Registration Data: Full name, username, password, email address, phone number, and profile information.
Payment and Billing Information: Credit or debit card details, billing address, and purchase history, collected through PCI DSS-compliant payment processors.
Communications: Records of correspondence, including inquiries to customer support, survey responses, feedback, and participation in promotions.
User-Generated Content: Any files, images, videos, or textual content you upload, share, or transmit via the Services.

3.2 Information Collected Automatically.
When you interact with the Services, we automatically collect:

Technical Identifiers: IP address, browser type, operating system, device identifiers, and system configuration.
Usage Data: Pages visited, features used, time spent on the Services, links clicked, and navigation paths.
Cookies and Similar Technologies: Session cookies, persistent cookies, pixels, tags, and scripts used to authenticate users, maintain preferences, analyze performance, and deliver targeted advertisements.
Location Data: Approximate or precise location derived from IP address or device GPS settings, subject to your consent where required.

3.3 Information from Third-Party Sources.
We may obtain Personal Data from:

Integrated Services: Social media logins or third-party authentication services (e.g., Google, Facebook, Apple).
Business Partners: Partners who refer you to Loopp or co-sponsor joint initiatives.
Data Enrichment Services: Public databases or commercially available data sources to supplement or verify the information we maintain.

4. Lawful Basis for Processing

4.1 Under GDPR and Equivalent Laws, Loopp processes Personal Data only where at least one lawful basis applies:

Consent (Article 6(1)(a) GDPR) — Where you have expressly consented.
Contractual Necessity (Article 6(1)(b) GDPR) — Where processing is required to perform our obligations under a contract with you.
Legal Obligation (Article 6(1)(c) GDPR) — Where processing is necessary to comply with applicable law.
Legitimate Interests (Article 6(1)(f) GDPR) — Where processing is necessary for Loopp’s legitimate business purposes, provided these do not override your fundamental rights.

5. Purposes of Processing

We process Personal Data for the following purposes:

5.1 Service Provision — To deliver, maintain, and improve the Services.
5.2 User Account Management — To authenticate, administer, and personalize your account.
5.3 Transaction Fulfillment — To process payments, subscriptions, and refunds securely.
5.4 Communications — To send administrative messages, service updates, and promotional offers (subject to opt-out rights).
5.5 Security and Fraud Prevention — To detect, investigate, and mitigate security breaches, unauthorized access, and fraudulent activity.
5.6 Analytics and Development — To monitor trends, measure performance, and enhance features.
5.7 Legal Compliance — To satisfy legal and regulatory requirements, respond to lawful requests, and enforce contractual terms.

6. Data Sharing and Disclosure

6.1 No Sale of Personal Data.
Loopp does not sell Personal Data as defined under the CCPA and equivalent laws.

6.2 Disclosure to Service Providers.
We may share Personal Data with third-party service providers, contractors, or agents (“Service Providers”) who perform functions on our behalf, including but not limited to:

Hosting and infrastructure providers.
Payment processors.
Data analytics and business intelligence services.
Marketing and communications platforms.
Customer support software providers.

Service Providers are contractually bound to: (i) process Personal Data only as instructed by Loopp, (ii) maintain strict confidentiality, and (iii) implement robust data security safeguards.

6.3 Business Transfers.
In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, Personal Data may be transferred to a successor entity, subject to the terms of this Policy and applicable law.

6.4 Legal Disclosures.
We may disclose Personal Data to governmental authorities, regulators, or law enforcement agencies when required to:

Comply with a legal obligation.
Protect and defend our rights, property, or safety.
Prevent or investigate possible wrongdoing in connection with the Services.

6.5 With Your Consent.
We may share your information with other parties if you explicitly authorize such sharing in writing or through affirmative opt-in mechanisms.

7. Cookies and Tracking Technologies

7.1 Use of Cookies.
We employ both first-party and third-party cookies for the purposes of:

Session management and authentication.
Remembering user preferences.
Enhancing user experience.
Measuring performance and traffic analytics.
Delivering interest-based advertising.

7.2 Third-Party Tracking.
Our partners may use tracking technologies in conjunction with our Services to collect anonymized usage patterns and serve targeted advertisements.

7.3 Managing Cookies.
Users can control cookie preferences through browser settings and may opt out of certain third-party tracking technologies via industry-standard tools such as the Network Advertising Initiative opt-out page. However, disabling cookies may impair the functionality of the Services.

8. International Data Transfers

8.1 Cross-Border Processing.
Loopp operates globally and may transfer Personal Data to jurisdictions outside the country in which it was originally collected.

8.2 Safeguards for EU/EEA Residents.
Where Personal Data is transferred from the European Economic Area (“EEA”) to a third country lacking an adequacy decision by the European Commission, we implement safeguards such as:

Standard Contractual Clauses (SCCs) approved by the European Commission.
Binding Corporate Rules (BCRs) where applicable.
Technical measures such as encryption in transit and at rest.

8.3 Other Jurisdictions.
We comply with applicable cross-border data transfer laws in all jurisdictions in which we operate, including restrictions under the UK GDPR, Swiss Federal Act on Data Protection, and equivalent laws.

9. Data Retention

9.1 Retention Periods.
We retain Personal Data only for as long as necessary to fulfill the purposes set forth in this Policy, unless a longer retention period is required by law or needed to defend legal claims.

9.2 Criteria for Retention.
Retention decisions are based on:

The nature of the data and the purpose for collection.
Legal and contractual requirements.
The potential need to resolve disputes or enforce agreements.

9.3 Secure Disposal.
Upon expiry of retention periods, Personal Data is irreversibly anonymized or securely destroyed using industry-standard deletion methods.

10. Data Security

10.1 Technical and Organizational Measures.
We implement a combination of administrative, technical, and physical safeguards to protect Personal Data, including:

Encryption of data in transit (TLS/SSL) and at rest (AES-256).
Access controls and authentication mechanisms.
Regular security audits and penetration testing.
Employee training in cybersecurity awareness.

10.2 Incident Response.
In the event of a data breach, Loopp will:

Investigate promptly.
Contain and mitigate the impact.
Notify affected individuals and regulators where required by law, within legally mandated timelines.

11. Your Privacy Rights

11.1 Rights under GDPR (EEA/UK Residents):

Access — Obtain confirmation as to whether we process your Personal Data and receive a copy.
Rectification — Correct inaccurate or incomplete data.
Erasure — Request deletion of Personal Data in certain circumstances.
Restriction — Limit processing under specified conditions.
Portability — Receive data in a structured, commonly used format and transmit it to another controller.
Objection — Object to processing based on legitimate interests, including profiling.
Withdraw Consent — Withdraw consent without affecting prior lawful processing.

11.2 Rights under CCPA (California Residents):

Right to Know — Request disclosure of categories and specific pieces of Personal Data collected.
Right to Delete — Request deletion of Personal Data, subject to statutory exceptions.
Right to Opt-Out — Opt out of any “sale” or “sharing” of Personal Data (as defined by law).
Right to Non-Discrimination — Receive equal service and pricing regardless of exercising CCPA rights.

11.3 Exercising Your Rights.
Requests may be submitted via email to [email protected]. We will verify your identity prior to processing requests.

12. Children’s Privacy

12.1 Age Restrictions.
The Services are not directed to, and Loopp does not knowingly collect data from, individuals under the age of 13 (or under 16 in jurisdictions requiring heightened consent).

12.2 Parental Consent.
If a parent or guardian becomes aware that their child has provided Personal Data without consent, they should contact us immediately, and we will take steps to delete such data.

13. Third-Party Links and Services

13.1 External Websites.
Our Services may contain links to third-party websites and applications. We are not responsible for the privacy practices or content of such third parties.

13.2 Integration with Third Parties.
When you choose to integrate Loopp with third-party platforms, those platforms’ privacy policies govern their handling of your data.

14. Changes to this Policy

14.1 Amendments.
Loopp reserves the right to modify this Policy at any time. Changes will be posted to this page with a revised “Last Updated” date.

14.2 Material Changes.
If changes materially affect how we process your Personal Data, we will provide advance notice via email or prominent notice on the Services.

15. Contact Information

Email: [email protected]

Schedule A – Cookies and Tracking Technologies

A.1 Categories of Cookies Used

Strictly Necessary Cookies
- Purpose: Enable core functions such as authentication, secure login, and load balancing.
- Example: Session identifiers.
- Storage Duration: Session-based, deleted when browser closes.
- Lawful Basis: Contractual necessity.
Performance Cookies
- Purpose: Collect aggregated analytics on website performance, page load times, and error reports.
- Example: Google Analytics (_ga cookie).
- Storage Duration: 13 months unless user opts out.
- Lawful Basis: Legitimate interests.
Functional Cookies
- Purpose: Store user preferences (e.g., language settings, theme selection).
- Example: “remember_me” cookies.
- Storage Duration: Up to 12 months.
- Lawful Basis: Consent (where required).
Targeting/Advertising Cookies
- Purpose: Deliver relevant advertisements based on browsing behavior.
- Example: Facebook Pixel, Google Ads Remarketing Tag.
- Storage Duration: Varies, up to 18 months.
- Lawful Basis: Consent.

A.2 Managing Cookies
Users can manage or delete cookies via browser settings and may withdraw consent for tracking cookies via Loopp’s cookie banner at any time.

Annex A – Jurisdiction-Specific Disclosures

A.1 European Union (GDPR)

Data Controller: Loopp AI, Inc. — Foundersmax Inc, 3280 Peachtree Rd NE, Suite 700, Atlanta, GA 30305.
Legal Bases: As outlined in Section 4 of this Policy.
Complaints: You have the right to lodge a complaint with a supervisory authority in your Member State of residence or work.

A.2 United Kingdom (UK GDPR)

Loopp complies with the UK GDPR and the Data Protection Act 2018.
UK residents may contact the UK Information Commissioner’s Office (ICO) at www.ico.org.uk for complaints.

A.3 California (CCPA/CPRA)

Categories of Personal Data Collected: See Sections 3.1–3.3.
Categories of Personal Data Disclosed for a Business Purpose: Identifiers, commercial information, internet activity data, and geolocation data to Service Providers as defined by CCPA.
Do Not Sell or Share: Loopp does not “sell” or “share” personal information as defined by CCPA, but offers a “Do Not Sell or Share My Personal Information” link for user preference.

A.4 Canada (PIPEDA)

Loopp processes Personal Data in accordance with PIPEDA’s fair information principles.
Canadian residents may request access to and correction of their personal data by contacting Loopp at the address in Section 15.

A.5 Australia (Privacy Act 1988)

Loopp complies with the Australian Privacy Principles (APPs).
Complaints can be lodged with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.