The plain-language version: Loop only sees the emails you choose to send it, keeps what it needs to remind you, and never sells anything to anyone.
Last updated September 24, 2026
Your account. Your name, email address, a hashed password (or your Google sign-in), your timezone, digest preferences, and any alias addresses you add. We send a confirmation link to your email before the account works, and we send a reset link if you ask for one.
Emails you send to your Loop address. When you BCC, CC, or forward an email to Loop, we store the subject, the sender and recipient addresses, a short excerpt of the message (up to about 240 characters), message IDs used to match replies, and timestamps. We don’t keep attachments.
Things you add. Follow-ups you create by hand, notes, due dates, and changes you make.
Usage. Cookieless page analytics and page-speed measurements from our host, and server logs used to keep the service running and secure. We keep a log of every email that reaches a Loop address (sender, recipient, subject, and what Loop did with it) so we can find problems.
Each processes data only to provide its service to us.
Your follow-ups are visible to you. If you belong to a team workspace, that workspace’s owners and admins can also see them in the team view.
We use a sign-in session cookie and a cookie that remembers which workspace you last opened. That’s all.
We keep less on purpose. Open follow-ups stay while your account is active. Closed follow-ups and the inbound email log are deleted automatically 90 days after they close or arrive. Delete any follow-up from the dashboard and it’s removed right away.
To delete your whole account, open Settings and choose Delete account. Your follow-ups, address, and personal data are removed at once. Teams you own pass to the next admin. Copies may remain in our host’s backups for a short period before they roll off. You can also email privacy@loopediq.com and we’ll do it for you within 30 days.
Data is encrypted in transit. Passwords are hashed and never stored in plain text. Links in emails are signed and expire. Sign-in, sign-up, and invites are rate limited. Email addresses must be confirmed before an account works, and incoming email must pass sender checks before it can act on your list. Changing your password signs out every other session.
No system is completely secure. If we learn of a breach that affects your data, we’ll notify you as the law requires. Please don’t send Loop anything you couldn’t stand to lose or have exposed, such as health records, card numbers, or government IDs.
You can see and change your account details in Settings and delete everything yourself. If you live somewhere with data-protection rights such as the EU, UK, or California, you can also ask us to access, correct, or delete your data, or object to how we use it, by emailing privacy@loopediq.com. We don’t sell personal data and never have.
If we change this policy in a way that matters, we’ll email account owners before it takes effect. Questions go to privacy@loopediq.com.