LoopyList Privacy Policy

Quick Summary

• We collect account, usage, and payment-related information to operate the Service.
• Payments are processed by Stripe; we don’t store full card numbers.
• We use cookies/analytics for core functionality and to improve the product. You can manage preferences.
• You control your content; we process it to provide the Service.
• You can request access, correction, deletion, or export of your data, subject to applicable law.

1) Scope

This Policy covers Personal Data processed by LoopyList when you visit our sites, create an account, use the Service, or interact with us (support, email, social). It does not cover third-party sites/services linked from the Service.

2) Data We Collect

A. Information You Provide

• Account & Profile: name, email, password, organization, role, settings.
• Content: checklists, portals, services, form fields, file names/metadata, emails you send via templates (content remains yours).
• Billing: plan, subscription status, and limited payment info (handled by Stripe).
• Support: messages, tickets, feedback.

B. Information Collected Automatically

• Usage/Device: IP address, device/browser type, pages viewed, actions, timestamps, crash logs.
• Cookies & Similar: session cookies, authentication tokens, analytics identifiers.

C. Information from Third Parties

• Payment Processor: Stripe provides us with limited transaction metadata.
• Authentication/Integrations (if enabled): basic profile/connection info.

3) How We Use Data

• Provide, secure, troubleshoot, and improve the Service.
• Set up and manage accounts, subscriptions, and billing.
• Send transactional emails (e.g., receipts, notices, service updates).
• Analyze aggregate usage to guide product decisions.
• Prevent abuse, fraud, and violations of our Terms.
• Comply with legal obligations and enforce agreements.

AI Assistance: The Service may help generate templates or text based on your prompts. You are responsible for reviewing outputs; we may use anonymized/aggregated data to improve features.

4) Legal Bases (EEA/UK users)

• Contract: to provide the Service you request.
• Legitimate interests: to improve/security, prevent abuse, and communicate essential updates.
• Consent: for optional cookies/marketing where required (you can withdraw consent).
• Legal obligation: to comply with applicable laws.

5) Cookies & Analytics

We use cookies and similar technologies for:

• Strictly Necessary: login/session security, load balancing.
• Functional: preferences, product settings.
• Analytics: understanding feature usage and performance.

You can control cookies via your browser settings. Where required, we present a cookie notice and allow you to adjust preferences.

6) How We Share Data

• Processors/Subprocessors: trusted vendors that help us run the Service (e.g., hosting, error monitoring, email delivery, analytics, payments). Example: Stripe (payments).
• Business Transfers: in a merger, acquisition, or asset sale, data may be transferred as permitted by law.
• Legal: to comply with law or respond to lawful requests; to protect the rights, property, or safety of users and the public.

We do not sell your personal information. We also do not share it for cross-context behavioral advertising without your choice where required by law.

7) Data Retention

We retain Personal Data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may be able to export or delete certain data via in-product tools. After account closure, we may delete or anonymize data pursuant to our retention practices unless we must keep it (e.g., for tax, security, or legal reasons).

8) Security

We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Data. No method of transmission or storage is 100% secure; use the Service at your own risk and implement best practices (e.g., strong passwords, 2FA where available).

9) International Transfers

Your information may be processed in the United States and other countries with different data protection laws than your country. Where required, we rely on appropriate safeguards (e.g., standard contractual clauses) for cross-border transfers.

10) Your Rights

Depending on your location, you may have rights to:

• Access, correct, or delete Personal Data;
• Port data in a portable format;
• Object to or restrict certain processing;
• Withdraw consent where processing relies on consent;
• Opt-out of certain targeted advertising or profiling, where applicable.

To exercise rights, contact us at privacy@workwillow.com. We may request information to verify your identity. You also have the right to lodge a complaint with your local supervisory authority.

11) Additional Notice for U.S. State Laws (e.g., CCPA/CPRA)

We collect identifiers (e.g., name, email), commercial information (subscription, transactions), internet activity (usage logs), and inferences (product preferences). We use and disclose these categories for business purposes described above. We do not sell personal information. To exercise state-specific rights (access, deletion, correction, opt-out of targeted advertising), contact privacy@workwillow.com.

12) Children’s Privacy

The Service is not directed to children under 13 (or older age as required by your jurisdiction). We do not knowingly collect Personal Data from children. If you believe a child has provided data, contact us to delete it.

13) Third-Party Links & Integrations

The Service may link to third-party sites or offer optional integrations. Their privacy practices are governed by their own policies. We encourage you to review them (e.g., Stripe Privacy Policy).

14) Changes to this Policy

We may update this Policy from time to time. For material changes, we’ll provide reasonable notice (e.g., email or in-app). Your continued use after the effective date constitutes acceptance.

15) Contact Us