Privacy Policy

Loopwell Intelligence OÜ (“Loopwell,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at loopwell.io (the “Service”).

We are based in Estonia and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Information We Collect

Information you provide

• Account information: Name, email address, password, and profile details when you create an account.
• Workspace data: Organization name, team structure, departments, roles, and capacity information you configure.
• Content: Projects, tasks, documents, wiki pages, goals, and other content you create within the Service.
• Communications: Messages you send through Loopbrain, feedback, and support requests.

Information collected automatically

• Usage data: How you interact with the Service, features used, and actions taken.
• Device information: Browser type, operating system, and device identifiers.
• Log data: IP address, access times, and pages viewed.

How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Power Loopbrain's AI features with your organizational context
• Process your requests and respond to inquiries
• Send service-related communications and updates
• Analyze usage patterns to improve the Service
• Detect and prevent fraud, abuse, and security issues
• Comply with legal obligations

Loopbrain and AI Processing

Loopbrain uses artificial intelligence to provide organizational intelligence features. When you interact with Loopbrain:

• Your workspace data (projects, tasks, org structure) is used to provide contextual responses
• Conversations with Loopbrain may be processed by third-party AI providers (currently OpenAI)
• We do not use your data to train AI models
• AI-generated outputs are based on your workspace context and are not shared with other users or workspaces

How We Share Your Information

We do not sell your personal information. We may share your information with:

Service providers

Third parties that help us operate the Service:

• OpenAI: AI processing for Loopbrain features
• Supabase: Database hosting and authentication
• Resend: Email delivery
• Vercel: Application hosting

These providers are contractually bound to protect your data and only use it to provide services to us.

Legal requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of Loopwell, our users, or others.

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Workspace data (projects, documents, etc.) is retained according to your workspace settings and can be exported or deleted upon request.

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest
• Secure authentication and access controls
• Regular security assessments
• Workspace-level data isolation

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

Your Rights

Under GDPR and applicable data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request limitation of processing
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at privacy@loopwell.io.

Cookies

We use essential cookies to operate the Service (authentication, preferences). We may use analytics cookies to understand how the Service is used. You can control cookies through your browser settings.

International Data Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (for AI processing). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data.

Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: