loophype
Sign inGet started

Privacy Policy

Last updated 4 October 2026

This policy explains how Loophype ("Loophype", "we") collects, uses and protects personal information when you use loophype.app. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply to you, other privacy laws such as the GDPR.

  1. 1. What we collect

    • Account information: your name, email address, profile picture and your role in each workspace.
    • Workspace content: brands and brand kits, posts and captions, pictures, videos, voice recordings and voice samples, music, your chats with the agent, and anything you add to a brand's knowledge.
    • Connected accounts: the social accounts you connect and what the platforms send back, such as posts, comments, messages, reviews and results. The access tokens for those accounts are held by our publishing provider, not by us.
    • Your customers' details: names and contact details that reach your inbox, forms, ads or WhatsApp. You control this information, and we process it on your behalf.
    • Billing: your plan, invoices and payment status. Card numbers go straight to Stripe; we never see or store them.
    • Usage and technical data: what the AI did and what it cost, an audit log of actions and approvals, your IP address, browser and device, and the cookies needed to keep you signed in.

  2. 2. How we use it

    • to provide the Service: planning, making, approving, publishing and measuring your content;
    • to bill you and keep records that tax and accounting law requires;
    • to keep the Service and our customers safe: preventing fraud and abuse, and answering payment disputes with evidence;
    • to support you and send you notices about your account;
    • to improve Loophype, using aggregated information that doesn't identify you;
    • to comply with the law.

    We don't sell personal information, we don't show ads, and we don't use your content to train AI models.

  3. 3. Who processes it for us

    We use these providers to run Loophype. They process information only to provide their service to us:

    • Clerk: sign-in, accounts and workspaces
    • Convex: our database and backend
    • Vercel: hosting the website
    • Railway: storing your files (pictures, videos, audio)
    • Stripe: payments, invoices and fraud checks
    • Zernio: connecting social accounts, publishing, the inbox, WhatsApp, ads and insights
    • OpenRouter and the AI model providers it routes to: text AI: planning, captions, chat and reports
    • fal.ai: pictures, video clips and avatars
    • ElevenLabs: voiceovers, voices, music, sound effects and transcription
    • Daytona: the isolated sandboxes where videos are edited and rendered
    • Browserbase: reading the websites you point us to
    • Resend: sending email notices

    Several of these providers are in the United States or elsewhere outside Canada, so your information may be stored and processed in other countries and be subject to their laws, including access by their authorities.

  4. 4. Cookies

    We use only the cookies needed for signing in and for security. We don't use advertising or tracking cookies.

  5. 5. How long we keep it

    We keep your information while your account is open. After a workspace closes we delete its content within 90 days, except what we must keep for legal, tax, accounting, fraud-prevention or dispute reasons (such as invoices and the audit log), which we keep for up to seven years. Backups expire on their own schedule.

  6. 6. Your choices and rights

    You can ask to see, correct or delete your personal information, or withdraw your consent (which may mean we can no longer provide the Service). Write to usmanokayani@gmail.com; we reply within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada, or to the data protection authority where you live.

  7. 7. Security

    Information is encrypted in transit, files are reached only through short-lived signed links, each video-editing sandbox gets its own limited keys, and access inside a workspace follows each person's role. No system is perfectly secure; if a breach puts you at real risk of significant harm, we will tell you and the authorities as the law requires.

  8. 8. Children

    Loophype is a business service and is not meant for anyone under 18.

  9. 9. Changes and contact

    We will post any change to this policy here and tell workspace owners about material changes. Questions or requests go to our privacy contact at Loophype: usmanokayani@gmail.com.