Privacy Policy

Loop GPT (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at loopgpt.ai (the “Service”).

1. Information We Collect

Information you provide

• Account data — name, email address, and password when you register.
• Phone number — your mobile phone number if you opt in to receive SMS notifications, one-time passcodes (OTPs), or account alerts from us.
• OAuth data — public profile information (name, email, avatar) from Google or GitHub when you sign in with those providers.
• Conversation content — messages, uploaded images, and files you send through the Service.
• Payment data — billing details processed by our payment provider (Stripe). We never store raw card numbers.

Information collected automatically

• Usage data — pages visited, features used, session duration, and interaction events.
• Log data — IP address, browser type, device identifiers, and timestamps.
• Cookies — session tokens and preference cookies. See our Cookie Policy for details.

2. SMS / Text Messaging

This section discloses how we handle your phone number and SMS communications in compliance with carrier requirements and applicable law (including the TCPA).

Opt-in and consent

We send SMS messages only to users who have explicitly opted in. Opt-in occurs when you voluntarily provide your mobile phone number and check the SMS consent box during account registration, on the Account Settings page, or through another designated opt-in form. By opting in, you consent to receive text messages from Loop GPT at the number you provide.

Types of messages we send

• Transactional — one-time passcodes (OTPs) for two-factor authentication, password-reset codes, and account security alerts.
• Account notifications — billing receipts, subscription renewal reminders, and usage limit warnings.
• Support responses — replies to support requests you initiate via SMS.

We do not send unsolicited marketing or promotional SMS messages without your separate, explicit opt-in consent for that purpose.

Message frequency

Message frequency varies based on your account activity. Transactional messages (e.g. OTPs) are sent only when you trigger the relevant action. Account notification messages are sent no more than a few times per billing period. You will not receive more messages than necessary to deliver the service you requested.

Message and data rates

Message and data rates may apply. Charges depend on your mobile carrier plan. Loop GPT does not charge separately for SMS messages, but your carrier's standard messaging and data fees apply.

How to opt out (STOP)

You may opt out of SMS messages at any time by replying STOP to any message we send. After we receive your STOP request, we will send you one final confirmation message and then cease all SMS communications. You can also disable SMS in your Account Settings.

If you opt out of transactional messages (such as OTPs), note that some security features of your account may become unavailable.

Help

Reply HELP to any of our messages to receive assistance. You can also contact us directly at support@loopgpt.ai or visit our Help Center.

No sharing of phone numbers for marketing

Mobile phone numbers and SMS opt-in data will not be shared with, sold to, or rented to any third party or affiliate for marketing or promotional purposes. Phone numbers may be disclosed only where required by law, to our SMS delivery provider (solely to transmit messages on our behalf), or to prevent fraud or abuse. Our SMS delivery provider is contractually bound to use your number only for message delivery and to comply with all applicable privacy laws.

3. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service.
• Authenticate your identity and maintain your account.
• Process AI inference requests on your behalf.
• Send transactional emails (password resets, billing receipts).
• Send SMS messages you have consented to receive (see Section 2).
• Detect and prevent fraud, abuse, or policy violations.
• Comply with legal obligations.
• Aggregate anonymised analytics to understand how the Service is used.

We do not sell your personal data to third parties or use your conversation content to train our AI models without your explicit consent.

4. Data Sharing

We share your data only in the following circumstances:

• AI inference providers — your prompts are transmitted to third-party AI providers (e.g. Hugging Face, Together AI, fal.ai) solely to generate responses. These providers have their own privacy policies.
• Infrastructure providers — Railway (hosting), Supabase/PostgreSQL (database), and Vercel (frontend CDN).
• SMS delivery provider — your phone number is shared with our SMS delivery partner solely to transmit messages you have consented to receive. This partner may not use your number for any other purpose.
• Payment processors — Stripe for billing.
• Legal requirements — if required by law, court order, or to protect rights and safety.
• Business transfers — in the event of a merger or acquisition, your data may be transferred as a business asset.

5. Data Retention

We retain your account data and conversation history for as long as your account is active. You may delete your account at any time from Account Settings, which permanently removes your personal data within 30 days. Anonymised, aggregated analytics data may be retained indefinitely.

If you opt out of SMS, we retain a record of your opt-out to ensure we do not send further messages to that number. This record is kept for compliance purposes even after account deletion.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict processing of your data.
• Data portability (receive a copy of your data in a machine-readable format).
• Withdraw consent at any time where processing is based on consent (including SMS consent).

To exercise any of these rights, email us at privacy@loopgpt.ai.

7. Security

We implement industry-standard safeguards including TLS encryption in transit, encrypted storage at rest, hashed passwords (bcrypt), and regular security reviews. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

8. Children's Privacy

The Service is not directed to children under 13 (or 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

9. International Transfers

Your data may be processed in countries outside your own, including the United States. We rely on Standard Contractual Clauses and other lawful transfer mechanisms where required by applicable law.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice in the Service. Continued use after changes constitutes acceptance.

12. Contact Us

Questions about this Privacy Policy? Contact us at:
privacy@loopgpt.ai