Privacy Policy

How we handle your data and your visitors' data.

Last updated September 2026

Who we are

Loop Optimizations ("Loop", "we") provides software that creates, tests, and optimizes advertising creative, marketing emails, and website content for business customers. Customers are the controllers of the visitor data they collect through Loop; we act as their processor.

Data we collect

  • Account data — name, email, authentication records, and roles.
  • Customer content — website URLs, campaign configuration, ad and email copy, generated images and video, and test results.
  • Advertising platform data — account identifiers, campaign performance metrics, and OAuth tokens for the platforms you connect.
  • Visitor data — pseudonymous visitor identifiers, page URLs, referrers, test exposures, and conversion events sent by the Loop snippet on customer websites.
  • Operational data — audit log entries, IP addresses and user agents attached to security-relevant actions, and system job logs.

How we use it

To generate and test creative, decide test winners, report performance, send conversion signals back to platforms you connected, secure the service, and meet legal obligations. We do not sell personal data and we do not use customer content to train third-party foundation models.

Cross-account learning

Loop derives aggregate, non-identifying patterns (for example, which creative structures tend to win in a channel) and uses them to improve suggestions for all customers. These aggregates contain no customer names, URLs, visitor identifiers, or verbatim customer copy.

Retention

Raw visitor-level records (tracking events, test exposures, journeys) are deleted on a schedule you control in your settings. Defaults are 180 days for visitor events and exposures and 365 days for journeys. Aggregated daily metrics and test outcomes are retained for the life of the account so historical reporting remains accurate.

Your rights

You can export a complete machine-readable copy of your data and request account deletion at any time from Privacy & data in your settings. Deletion is executed after a 7-day grace period and erases all account-owned records; backups age out within 30 days. Visitors of customer websites should contact the website owner, who can trigger deletion through us.

Sub-processors and transfers

We use a small set of infrastructure and model providers listed on our sub-processors page. Data may be processed in the United States and the European Union.

Contact

Privacy questions and data requests: privacy@loopoptimizations.com. Security reports: see our security page.