Privacy policy

The email list. If you join our product-news list, we store your email address, the time you joined and the consent wording you accepted. Joining does not create an account. We use the list for Loopcraft product news and ad-test ideas. You can ask us to remove your address through the contact below.

Your account. A name, an email address, and your chosen sign-in method. If you use email and a password, our authentication provider handles the password and stores it hashed — nobody at Loopcraft can read it.

Your brand. A website address you choose, and any documents you upload. Loopcraft fetches those public pages, reads them, screenshots them, and stores what it extracts — what the brand does, its voice, colours, fonts, and products — as your brand kit. You can edit or delete any of it afterwards.

Your creative work. Briefs you write, references you select, concepts you generate, and the images and video produced from them.

With your permission, Google shares your account identifier, name, email address and verification status, and profile picture when available. Loopcraft uses this information to create or identify your account, sign you in, display your account details, and control access to your workspace. We do not receive your Google password.

Neon Auth processes and stores this account information and the credentials needed to authenticate you. Loopcraft uses session cookies to keep you signed in, and Vercel hosts the application that handles your requests. Sign-in requests use HTTPS.

Google sign-in requests only basic identity information. It does not grant Loopcraft access to your Gmail messages, Google Drive files, contacts, or advertising accounts. Connecting other services is a separate action with its own permissions.

We do not sell Google sign-in data, use it for advertising targeting, or send it to AI models to generate ads or train general-purpose models. Loopcraft's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Loopcraft gathers advertising that is already public — ads brands run on Meta's platforms, retrieved through a third-party ad-research provider — so it can show you what is working in your category. This is public material about companies, not personal information about you.

Payments. When you purchase a plan or credits, Stripe handles the payment form and card details. Loopcraft stores payment references, subscription status, credit grants, usage reservations and transaction history. Full card numbers are not sent to Loopcraft's application.

An AI model provider. To read your site, build your brand kit, and draft and generate creative, Loopcraft sends the relevant content to a large-language and image model provider. That content includes your brand kit and your briefs.

Hosting and storage.Your data is held in Neon's managed Postgres database, and uploaded and generated files are held in Cloudflare R2 object storage. Vercel hosts the application.

Meta, if you connect it. Connecting an ad account is entirely your choice. If you do, Loopcraft stores an encrypted access token for it and uses that token only to create campaigns you have approved, read back their performance, and pause them — including automatically, if you delete a brand while one of its ads is still running. You can disconnect at any time. Connecting an Instagram account works the same way.

Your brand kits, references, concepts, and results are protected by account and workspace access controls. Workspace members you authorize can access shared work according to their permissions. Your work is not public and is not sold.

We keep your account information, including Google sign-in information, and saved work to operate your account and make your work available when you return. Signing out or removing Google access does not automatically delete your Loopcraft account or its saved data. You can request deletion using the contact address below.

You can edit any field in your brand kit, archive a brand, or delete one permanently — permanent deletion asks you to type the brand name first, because it cannot be undone. To delete your account and everything in it, email us and we will do it.

You can also remove Loopcraft's access from your Google Account connections. This removes the Google connection; contact us separately if you also want your stored Loopcraft data deleted.

Questions, corrections, or a deletion request: support@loopcraft.app.