Privacy Policy
Last updated: May 24, 2026
LoopReel (“LoopReel,” “we,” “us,” or “our”) operates the websites loopreel.app and dashboard.loopreel.app and the related software-as-a-service product (collectively, the “Service”). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the rights you have over your data.
1. Information we collect
1.1 Information you provide directly
- Account information — your name, email address, password (hashed), and account preferences.
- Brand profile — the URL of your website or product, the niche, tone, audience, and goals you tell us about.
- Generated content — the scripts, slides, videos, carousels, and other assets created on your behalf.
- Billing details — handled by our payment processor; we do not store full card numbers on our servers.
1.2 Information from third-party platforms you connect
When you authorize LoopReel to connect to your TikTok, Instagram, or YouTube account, we receive an access token plus the minimum profile information required by each platform’s API. We use this access strictly to publish content you have approved and to read analytics about that content. We do not read direct messages, private content, or contacts. We never sell or share this data with third parties for advertising.
1.3 Information collected automatically
- Device and browser metadata, IP address, and approximate location.
- Usage events such as pages visited and features used.
- Cookies and similar technologies for authentication and analytics.
2. How we use your data
- To provide, maintain, and improve the Service.
- To generate, schedule, and publish content on connected social accounts you have authorized.
- To send transactional emails (account verification, billing receipts, and important service updates).
- To respond to support requests.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with legal obligations.
3. Sharing your data
We share data only as needed to operate the Service:
- Service providers — Supabase (database and auth), Railway (hosting), Replicate (AI generation), OpenAI / Anthropic (LLM inference), ElevenLabs (voice), Pexels / Pixabay (stock media), and our email provider.
- Connected social platforms — TikTok, Instagram / Meta, and YouTube / Google, only to publish content you have approved and to retrieve metrics about that content.
- Legal — when required by law, subpoena, or to protect rights and safety.
We do not sell your personal information.
4. Data retention
We retain your account data while your account is active. If you delete your account, we delete or anonymize your personal data within thirty (30) days, except where we are required to keep records for legal, tax, or audit purposes. Backups containing your data are purged within ninety (90) days of deletion.
5. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data; to restrict or object to processing; and to withdraw consent. To exercise any of these rights, email [email protected] or use the in-product controls in your account settings. We respond to verified requests within thirty (30) days.
6. Data deletion
You can delete your account at any time from your account settings, or request deletion by following the steps on our Data Deletion page. Deleting your account also revokes any connected social-platform tokens and removes the generated content stored on our servers.
7. Security
We use industry-standard safeguards including encryption in transit (TLS), encryption at rest, row-level access controls, and OAuth-token encryption with rotated keys. No system is perfectly secure; we encourage you to use a strong, unique password and to revoke access for devices you no longer use.
8. Children
The Service is not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
9. International transfers
We may transfer and process data in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers out of the EEA, UK, and Switzerland.
10. Changes
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the product before the change takes effect.
11. Contact
For privacy questions or requests, contact us at [email protected].