Effective: November 1, 2026
1. Who we are
GetLoopLoop (“we”, “us”, “our”) provides a software platform that helps marketing, SEO, and leadership teams measure brand visibility across AI systems, identify message gaps, and close operational loops.
This Privacy Policy explains what data we process, for which purposes, and the rights you have. For customers acting as controllers of end-user or employee data, our Data Processing Agreement (DPA) may also apply.
2. Data we collect
Account data: name, email, authentication identifiers, role preferences, and workspace membership.
Workspace & project data: brand names, domains, keywords, competitors, prompts, reports, loop content, knowledge-base materials you upload, and configuration you store in the product.
Usage data: feature usage, approximate location derived from IP, device/browser type, performance logs, and diagnostic events needed to operate and secure the service.
Communications: messages you send to support, feedback, and demo requests.
GLLmolfar feedback and bug reports, only when you press Send in the app: your text, your rating, the email for a reply (your GLLmolfar account's, or one you type), a screenshot if you attach one, and a description of your computer and the app that the app shows you before sending (system and its version, memory, screen, app version, interface language, the open tab and the state of the crawl). The address of the crawled site is included only if you tick that box. A bug report can also carry the app's diagnostic log, shown in full before sending and left out if you untick it: counts from the last crawl (pages, response classes, network error kinds, embedding totals) and the app's events from the window you choose, up to two hours, with addresses, domains, IP addresses, emails and paths in your user folder removed on your computer before the log is written. The log is otherwise kept only on your computer, for two hours. Screenshots are re-encoded into a new image on arrival. A review is published on the GLLmolfar page only if you agreed to it, under the name you gave, never with your email; we keep reports to answer and fix them and delete them on request.
Payment data: if you purchase a paid plan, billing details are processed by our payment provider; we do not store full card numbers on our servers.
3. How we use data
To provide, maintain, and improve the GetLoopLoop service (including AI-assisted analysis, visibility checks, strategist chat, and reporting).
To authenticate users, secure accounts, prevent abuse, and enforce terms.
To communicate product updates, security notices, and (where permitted) product marketing — you can opt out of non-essential marketing.
To comply with law and respond to lawful requests.
We do not sell personal data.
4. AI processing
Some features send prompts, brand context, and related workspace content to third-party AI model providers to generate visibility checks, recommendations, and chat responses.
We configure providers to process data for providing the service. Customer content is not used by us to train public foundation models. Provider-specific terms are described in our AI Products Terms.
Do not submit special-category data or secrets you are not authorized to process through AI features.
5. Google user data: GLLmolfar, Google Search Console and Google Sheets
GLLmolfar, our desktop app, uses Google Sign-In for its account and, only when you choose to connect it, read-only access to Google Search Console (the scope https://www.googleapis.com/auth/webmasters.readonly). It never requests write access and cannot change anything in your Search Console. Search Console can be connected only with the same Google account you signed in to GLLmolfar with.
GLLmolfar can also export its tables to Google Sheets, only when you choose that export format and connect it, with the narrowest Google Drive access there is (the scope https://www.googleapis.com/auth/drive.file): the app can create new spreadsheets in your Google Drive and open only the files it created itself. It cannot see, read or change any other file in your Drive. Google Sheets can be connected only with the same Google account you signed in to GLLmolfar with.
What GLLmolfar receives: from Google Sign-In, your name, email address and Google account identifier; from Search Console, the list of properties your Google account can access and, for the property you choose, Search Analytics data — search queries, pages, countries, devices, dates, clicks, impressions, click-through rate and average position; the sitemaps submitted for that property and how Google read them; and, for the pages you choose to inspect, Google's URL Inspection result — whether the page is indexed and why, when Google last crawled it, the canonical Google selected and the rich results it detected. This data goes from Google to your computer and is kept there, not on GetLoopLoop's servers. For Google Sheets, GLLmolfar receives only the identifier and address of each spreadsheet it creates; it does not read the content of your Drive.
How it is used: only to show you these search reports inside GLLmolfar and the features built on them. The app fetches Search Console data directly from Google onto your computer and keeps it there; it is not sent to our servers. A Sheets export goes from your computer to Google directly: the table you export is written into a new spreadsheet in your Drive, and it does not pass through our servers either.
Tokens: our server keeps only the authorization token, encrypted, so the app can renew access without asking you again. Disconnecting Search Console or Google Sheets in the app ends that access; signing out of GLLmolfar deletes the token, and the app has no access from that moment. To remove GetLoopLoop's access from your Google account itself, use https://myaccount.google.com/permissions.
The GetLoopLoop web product can also connect Search Console with the same read-only access, separately from GLLmolfar. There, Search Console data is stored on our servers for your workspace for up to 400 days, and search queries with their metrics may be sent to the AI model providers described in section 4 to produce recommendations for your own pages; you can disconnect it in the product's settings.
Limited Use: GetLoopLoop's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, do not use it to train AI models, and do not let people read it except with your consent, for security, to comply with law, or in aggregated and anonymized form for internal operations.
6. Legal bases (EEA/UK where applicable)
Contract: to deliver the service you request.
Legitimate interests: product improvement, security, and limited B2B communications — balanced against your rights.
Consent: where required (e.g., certain cookies or marketing).
Legal obligation: when we must retain or disclose information under law.
7. Sharing
Infrastructure and subprocessors (hosting, analytics, email, AI providers, payments) under contracts that restrict use of data.
Workspace admins and members you invite — according to roles you configure.
Professional advisors or authorities when required by law or to protect rights and safety.
A current list of core subprocessors is available on request and referenced in the DPA.
8. International transfers
We may process data in regions where we or our subprocessors operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EEA/UK.
9. Retention
Account and workspace data are retained while your account is active and for a reasonable period afterward for backups, disputes, and legal compliance.
You may request deletion of your account; residual copies in backups are purged on a rolling schedule.
10. Security
We apply technical and organizational measures appropriate to the risk, including access controls, encryption in transit, and monitoring. No method of transmission or storage is 100% secure.
11. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing.
Contact getlooploop@gmail.com (or your workspace admin for organization-managed accounts). You may also lodge a complaint with a supervisory authority.
12. Children
The service is not directed to children under 16, and we do not knowingly collect their personal data.
13. Changes
We may update this policy. Material changes will be posted with an updated effective date. Continued use after the effective date constitutes acceptance where permitted by law.
14. Contact
Privacy inquiries: getlooploop@gmail.com
General: getlooploop@gmail.com
This document is provided for transparency and does not replace advice from your counsel. Enterprise customers may execute a signed order form with supplemental terms.