Loop Marketing

Privacy Policy

Last updated: 26 October 2026

1. What we collect

  1. Account information: email address and name, used for authentication and notifications.
  2. Connected data: ad spend, results and other operational data reported by the ad platforms you connect. Used to provide the Service. We do not collect your revenue or sales data.
  3. Connection credentials: API keys and tokens for each service. Stored encrypted and not used for any purpose other than providing the Service.
  4. Usage logs: audit logs of actions and error logs, used to keep the Service secure and to improve it.

2. Why we use it

  1. To provide the Service — analysis, proposals, execution of approved actions, and notifications.
  2. To calculate fees, from measured ad spend.
  3. To prevent unauthorised access and to respond to failures.
  4. To comply with the law.

3. Disclosure to third parties

We do not disclose personal information to third parties except where required by law. Data is sent to the ad platforms you have connected only to the extent needed to execute actions you approved — for example, the ad text when a campaign is created.

When a public authority requests personal information, we review whether the request is lawful and challenge it where we consider it unlawful, disclose only the minimum information required, and keep a record of the request, our response, its legal basis and the people involved.

4. Subprocessors

To provide the Service we may entrust data processing to providers in these categories: cloud infrastructure (Google Cloud, Tokyo region), generative AI (Google Cloud Vertex AI, used to draft ad copy and creative), email delivery, and payment processing (Stripe).

5. Security measures

  1. Connection credentials are stored encrypted with AES-256-GCM and are never shown on screen, in logs, or in exports.
  2. API keys you create for agents are stored only as a one-way hash and are shown once, when created.
  3. Data is isolated per workspace.
  4. Every action is written to an audit log.

6. Retention and deletion

When you disconnect a service or ask us to delete your account, we delete the connection credentials without undue delay, and we delete operational data within a reasonable period except where the law requires us to retain it.

7. Access, correction and suspension of use

You may request disclosure, correction, or suspension of the use of your personal information through the contact point below.

8. Contact

Y7 Technology, Loop Marketing (email: support@y7technology.com)