Privacy Policy

Effective October 29, 2026

Loopline is a dashboard that small businesses use to plan and publish their content and keep track of the people who contact them. It is operated by Culman Brothers LLC (“we”). This policy explains what Loopline stores, why, who helps us run it, and the choices you have.

We don't sell personal information, show ads, or use your data or your followers' data to advertise.

What Loopline stores

• Your account: your name, email address and a hashed password (we can't read it). While you're signed in, we keep a session record with the IP address and browser it came from, to keep your account secure.
• Your workspace: the brands, posts, articles, captions, photos and videos you add, your schedule, and your brand settings. If you invite someone to your workspace, we keep their email address and role until they accept or the invite ends, and email them the invite with your name.
• Leads: if you connect your website's sign-up form, the fields people fill in (for example their email address). We don't keep their IP address, browser or the page they came from. If someone shares an email address or phone number in a direct message to your account, Loopline saves that as a lead too.
• Connected social accounts: when you connect Facebook and Instagram, we store your Facebook Page's ID and name, the linked Instagram account's ID and username, an access token that lets Loopline post for you (encrypted), and the IDs of the posts Loopline publishes. For a Telegram bot, we store its ID, username and token (encrypted). For Pinterest, we store your Pinterest user ID and username, the board you chose, the access tokens (encrypted), and the IDs of the Pins Loopline creates. For YouTube, we store your channel's ID, name and handle, the Google access tokens (encrypted), and the IDs of the videos Loopline uploads. For TikTok, we store your TikTok account ID and display name, the access tokens (encrypted), and the IDs of the drafts Loopline sends. For text messages, we store the business's Twilio phone number and its Twilio account ID and auth token (encrypted).
• Comments and messages: the comments and direct messages people send to your connected accounts (Instagram, Facebook, WhatsApp, Telegram and text messages), their name or username and account ID on that platform (and, for WhatsApp and text messages, their phone number), and your replies. Loopline keeps a contact list of these people for you, with any email address or phone number they shared, the tags you or your automations add, and whether they asked to stop automated messages.
• Payments: if you connect your Stripe account, a restricted Stripe key (encrypted), the products and prices you add, the payment links Loopline sends for you, and, once a link is paid, the amount and the customer's name and email from Stripe. Card details go only to Stripe; Loopline never sees them, and the money goes straight to your Stripe account.
• Shopify: if you connect your Shopify store, its app credentials (encrypted), your store's product names, prices, pictures and links, and for each new order only its number, total and time. A buyer who agreed to your marketing emails is saved as a lead with their name and email, and a buyer whose email matches someone who messaged you gets a “customer” tag.
• Mailchimp or Klaviyo: if you connect one, its API key (encrypted), the list you chose, and which email addresses Loopline sent there and when. Only people who signed up for your emails are sent (with their name and tags); emails shared in a message never are.
• Newsletters: the emails you send to your leads and contacts, who each went to, and the list of people who unsubscribed, so they're never emailed again.

How we use it

Only to run Loopline for you: to sign you in, show your workspace, check drafts against your brand rules, publish the posts you approve at the times you choose, show you your comments, messages and leads, and help you answer them. Data from Meta is used only for these things, and is not used for advertising or sold.

Writing with Claude. When you ask Claude to draft a post, article or caption, Loopline sends your brief, the item's current text and your brand settings to Anthropic. For health articles, Claude searches only the official source sites in your brand rules. Drafts appear in the editor and are only saved when you save them.

Setting up from your website. When you ask Loopline to set up from your website, it reads up to six public pages of that site and sends their text, with your brand's name, to Anthropic to draft your brand voice, facts and post ideas. Nothing is saved until you review it and press Save, and the pages themselves aren't stored.

Suggested replies. To suggest a reply, Loopline sends the recent messages in a conversation, with your brand's settings, to Anthropic's Claude. A person on your team reads every suggestion and decides whether to send it. Messages that may involve an emergency, someone's health or a hard time after birth are never sent to the AI: they go straight to a person, and you get an email alert that doesn't include the message.

Automated messages. A business can set up automations (for example, sending a link to people who comment a keyword) and can let suggested replies go out automatically. Anyone can reply STOP to a business's account to stop automated messages from it. Text messages only go to people who texted the business first, never as marketing broadcasts.

Who helps us run Loopline

These companies store or process data for us, in the United States, under their own security commitments:

• Vercel (hosting the app)
• Neon (the database)
• Cloudflare (storing photos and videos)
• Meta (delivers your comments and messages, and receives the posts and replies you send, under Meta's own policies)
• Mailchimp or Klaviyo, if a business connects one (receive the people who signed up for that business's emails, under the business's own account)
• Stripe (processes payments for Loopline plans; card details go only to Stripe, and we keep the plan, its status and Stripe's customer and subscription IDs)
• TikTok (receives the videos you send to your TikTok drafts, under TikTok's own policies)
• Google (YouTube: receives the videos you schedule, under Google's own policies)
• Pinterest (receives the Pins you schedule, under Pinterest's own policies)
• Shopify (sends your products and new orders, under Shopify's own policies)
• Twilio (delivers text messages to and from a business's phone number, under Twilio's own policies)
• Telegram (delivers messages to and from a business's Telegram bot, under Telegram's own policies)
• Anthropic (writes suggested replies from a conversation, drafts posts and articles from your brief, and drafts a brand profile from your website's pages when you ask)
• Resend (sends Loopline's alert emails, and the newsletters businesses send)

A business using Loopline can also connect its own tools (for example Zapier, Make, its own server or an AI assistant) with an API key or a webhook. Loopline then sends that business's leads and contacts to the tools it chose (and, to an AI assistant, its messages, except conversations with a red flag), which handle them under that business's own policies.

Otherwise, we share information with others only if the law requires it.

YouTube and Google

Loopline uses YouTube API Services to upload the videos you schedule to your YouTube channel. By connecting YouTube you agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy. Loopline only asks to upload videos and to read your channel's name; it never reads your other videos, comments or analytics. Loopline's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Loopline's access at any time on the Channels page, or in your Google account's security settings; the tokens are then deleted.

How long we keep it

• Your workspace data stays until you delete it or close your account.
• Access tokens are deleted when you disconnect an account. An unfinished Facebook sign-in is deleted after 30 minutes.
• Photos and videos are deleted from storage when you remove them from a post.
• Leads stay until you delete them.
• Comments and messages stay until you close your account or ask us to delete them.

Your choices

• Disconnect Facebook or Instagram at any time on the Channels page, or remove Loopline in your Facebook settings.
• Delete posts, photos, videos and leads in Loopline.
• Change your name and password, or delete your account, on the Your account page. Deleting it removes your login and every workspace only you are in, with everything in it, right away; you leave workspaces you share with others.
• Ask us for a copy of your data or a correction, or for help deleting your data, by emailing support@loopline.si. We reply within 30 days.

People who signed up through a business's form (leads) should contact that business; we'll help the business act on the request.

Security

Data travels over encrypted connections. Social account tokens are encrypted at rest (AES-256-GCM), passwords are hashed, photos and videos are kept private and shared only through links that expire, and each business can only see its own workspace.

Blogs Loopline hosts

A business can publish its articles on a blog Loopline hosts for it. Those pages set no cookies and run no analytics or advertising trackers; our hosting provider keeps standard server logs (such as IP addresses) for security, for a short time.

Do Not Track

Loopline doesn't track you across other websites or use advertising or analytics trackers, so there's nothing for a browser's Do Not Track signal to turn off. We treat every visit the same way whether or not the signal is on.

Children

Loopline is a tool for businesses and isn't meant for children under 13. We don't knowingly collect their personal information.

Changes

If we change this policy, we'll update the date above and tell account holders about significant changes.

Contact

Questions about privacy? Email support@loopline.si.