Privacy policy
Last updated: October 23, 2026
Loopaweb ("the platform") helps people and companies manage their social media accounts from one place. This policy explains what data we collect, why, how we protect it, and your rights.
Data we collect
- Account data: your name, email, password (stored hashed), account type (person or company), and "About your activity" if you write it.
- Connected account data: when you connect an account by approving it on the social platform's official page, we store its ID, name, and the access token that platform grants.
- Content: the posts, images, videos and texts you create or upload.
- Performance and engagement data: reach, views and engagement, public comments on your posts, and messages you receive because of a comment, to show them to you and reply to them.
- Activity log: operations in your account, for security and support.
How we use data
- Providing the service: publishing at the times you set, activation, replying to comments according to your settings, and showing analytics.
- AI: when you use the assistant, your request and the needed context are sent to our AI provider for processing only, and are not used to train its models.
- Security and support: protecting accounts and solving problems you ask us to help with.
We do not sell your data, use it for advertising, or share it except with the service providers needed to run the platform.
Google and YouTube data
When you connect your YouTube channel by approving it on Google's page, we request only these permissions:
- Upload the videos you choose to your channel (youtube.upload).
- Read your channel name and public numbers (youtube.readonly).
- Comment on your videos, reply to their comments, and manage the playlist the platform creates in your channel (youtube.force-ssl).
By using the YouTube connection you agree to the YouTube Terms of Service: https://www.youtube.com/t/terms and the Google Privacy Policy applies: https://policies.google.com/privacy
Loopaweb's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke the platform's access at any time at https://myaccount.google.com/permissions
Meta data (Facebook and Instagram)
We use the permissions you grant to publish your content, comment on your posts, reply to comments, send a private message to someone who commented on your post, and read your posts' insights. You can revoke access from Facebook settings under Business Integrations.
Telegram
The connection works through a bot you add as an admin to your channel or group. It publishes content and replies to comments in the discussion group. You can remove it at any time.
Service providers
We rely on providers to run the platform: hosting and network, email, AI, and the social platforms you connect. They access only what they need to provide their service.
Storage and security
We protect data with hashed passwords, encrypted connections (HTTPS), limited access permissions and regular backups. We keep data while your account exists, or as required by law.
Your rights
You may ask to access, correct or delete your data. Disconnecting any connected account in "Connect accounts" deletes its access token immediately.
Data deletion
- To delete your account and all your data: email us from your account's address at [email protected] with the subject "Delete my data". We delete it within 30 days and confirm.
- To delete a specific platform's data: disconnect the account in "Connect accounts", or revoke access in that platform's own settings.
Children
The platform is not intended for anyone under 13, or under the legal age in their country.
Changes
We may update this policy. The date of the last update appears at the top, and we notify you of material changes.