This policy is effective as of 1 May 2025
Last updated: 1 May 2025
Your privacy is important to us. It is Loopin's policy to respect your privacy and comply with any applicable law and regulation regarding any personal information we may collect about you, including across our website, https://www.loopin.sh, our application at https://app.loopin.sh, and other sites we own and operate.
Personal information is any information about you which can be used to identify you. This includes information about you as a person (such as name, address, and date of birth), your devices, payment details, and even information about how you use a website or online service.
In the event our site contains links to third-party sites and services, please be aware that those sites and services have their own privacy policies. After following a link to any third-party content, you should read their posted privacy policy information about how they collect and use personal information. This Privacy Policy does not apply to any of your activities after you leave our site.
This policy is effective as of 1 May 2025
Last updated: 1 May 2025
Information we collect falls into one of two categories: "voluntarily provided" information and "automatically collected" information.
Voluntarily provided information refers to any information you knowingly and actively provide us when using or participating in any of our services and promotions.
Automatically collected information refers to any information automatically sent by your devices in the course of accessing our products and services.
We may collect the following types of personal information:
Our AI receptionist service operates through the following infrastructure:
We collect information by and through the following means:
We may use information collected about you for the following purposes:
We may disclose personal information to:
Third parties we currently use include:
The personal information we collect is stored and/or processed in Australia, Singapore, United States of America or where we or our partners, affiliates, and third-party providers maintain facilities. Our Supabase database infrastructure specifically operates across these three regions to ensure data availability and compliance with local data residency requirements.
The countries to which we store, process, or transfer your personal information may not have the same data protection laws as the country in which you initially provided the information. If we transfer your personal information to third parties in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this privacy policy.
Your choice: By providing personal information to us, you understand we will collect, hold, use, and disclose your personal information in accordance with this privacy policy. You do not have to provide personal information to us, however, if you do not, it may affect your use of our website or the products and/or services offered on or through it.
Information from third parties: If we receive personal information about you from a third party, we will protect it as set out in this privacy policy. If you are a third party providing personal information about somebody else, you represent and warrant that you have such person's consent to provide the personal information to us.
Marketing permission: If you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by contacting us using the details below.
Access: You may request details of the personal information that we hold about you.
Correction: If you believe that any information we hold about you is inaccurate, out of date, incomplete, irrelevant, or misleading, please contact us using the details provided in this privacy policy. We will take reasonable steps to correct any information found to be inaccurate, incomplete, misleading, or out of date.
Non-discrimination: We will not discriminate against you for exercising any of your rights over your personal information. Unless your personal information is required to provide you with a particular service or offer (for example, providing user support), we will not deny you goods or services and/or charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, or provide you with a different level or quality of goods or services.
Notification of data breaches: We will comply with laws applicable to us in respect of any data breach.
Complaints: If you believe that we have breached a relevant data protection law and wish to make a complaint, please contact us using the details below and provide us with full details of the alleged breach. We will promptly investigate your complaint and respond to you, in writing, setting out the outcome of our investigation and the steps we will take to deal with your complaint. You also have the right to contact a regulatory body or data protection authority in relation to your complaint.
Unsubscribe: To unsubscribe from our email database or opt-out of communications (including marketing communications), please contact us using the details provided in this privacy policy, or opt-out using the opt-out facilities provided in the communication. We may need to request specific information from you to help us confirm your identity.
Loopin integrates with Google and Microsoft services through OAuth authentication to provide enhanced functionality:
When you connect your Google account, we may access:
When you connect your Microsoft account, we may access:
You can revoke these permissions at any time through your Google or Microsoft account settings. Revoking access will disable related features in our service but will not affect your core AI receptionist functionality.
Our AI receptionist service processes voice data through several specialized providers:
Phone calls are routed through Twilio's telecommunications infrastructure. Call metadata, recordings, and transcripts may be processed and stored according to Twilio's data handling practices.
Voice samples are processed by ElevenLabs to create personalized AI voice responses. This includes:
Conversation content is processed by OpenAI's language models to generate appropriate responses. This includes:
All voice data processing is performed in real-time with minimal retention periods. Voice data is encrypted in transit and processed according to each provider's security standards and our contractual agreements.
We use HubSpot CRM to manage leads and customer relationships. When you provide contact information through our service, this data is stored in HubSpot and may include:
By providing your contact information, you consent to receive marketing communications from us. You can opt-out of marketing communications at any time by contacting us or using the unsubscribe links in our emails.
Subscription payments are processed through Stripe. We do not store complete payment card details on our servers. Stripe handles:
Billing information and transaction records are retained according to legal requirements and our business needs. You can update your payment information or cancel subscriptions through your account settings.
We retain personal information for different periods depending on the type of data:
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
To exercise these rights, please contact us using the details provided below. We will respond to your request within one month.
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
We do not sell personal information to third parties. To exercise your CCPA rights, please contact us using the details provided below.
As an Australian company, we comply with the Privacy Act 1988 and the Australian Privacy Principles (APPs). You have the right to:
If you wish to make a privacy complaint, you can contact the Office of the Australian Information Commissioner:
Phone: 1300 363 992
Email: enquiries@oaic.gov.au
Website: www.oaic.gov.au
For Canadian users, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:
If you have concerns about our privacy practices, you can contact the Privacy Commissioner of Canada:
Phone: 1-800-282-1376
Website: www.priv.gc.ca
For UK residents, we comply with the UK General Data Protection Regulation. You have the same rights as outlined in the GDPR section above.
If you wish to make a complaint, you can contact the Information Commissioner's Office (ICO):
Phone: 0303 123 1113
Website: www.ico.org.uk
Loopin uses Google's Application Programming Interface (API) Services to enable the user authorization feature for accessing the Loopin platform.
Loopin's use and transfer of data to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use Requirements.
Loopin does not use data obtained from Google Workspace APIs to develop, improve, or train generalized AI or machine-learning models.
The Google information you provide as a user is used to deliver or enhance user-facing features that are central to your user experience. Subject to your permission, this may include access to your calendar data. Loopin policies and procedures strictly prohibit the unauthorized use of data within the platform, ensuring compliance with security and privacy standards.
We place significant importance on protecting your data. For detailed information regarding our privacy practices, refer to our Privacy Policy.
Google Calendar™ is a trademark of Google LLC, and its use is subject to Google Permissions. Access to your calendar is requested only with your explicit permission during the authorization process. You have the ability to review and control which permissions you grant before proceeding.
Similarly, Loopin integrates with Microsoft services including Outlook Calendar and Microsoft 365 authentication. We adhere to Microsoft's data handling requirements and only access calendar information with your explicit consent. Microsoft Outlook™ and Microsoft 365™ are trademarks of Microsoft Corporation.
When you use our AI receptionist service, Loopin securely transmits certain data to our AI provider OpenAI LLC (United States) for real-time processing and response generation. This includes:
Data Protection Measures:
• Data is encrypted in transit using TLS 1.2+ encryption
• OpenAI acts as a data processor bound by contract to strict data protection requirements
• Content is retained only temporarily for request fulfillment and is never used to train or improve generalized AI models
• Processing occurs in real-time with minimal data retention
• All transmissions comply with applicable privacy laws and regulations
You can control AI processing by adjusting your service settings or by contacting us to modify data sharing preferences. Disabling AI features may limit the functionality of our receptionist service.
For any questions or concerns regarding your privacy, you may contact us using the following details:
Loopin Team
hello@loopin.sh
Brisbane, Australia