Legal
Privacy Policy
Last updated: April 2026
1. Who We Are
Loopful (“we”, “us”, “our”) operates the website loopful.ai and the Loopful Schema and Loopful Convert services. The data controller for personal data processed through this website is:
Nico Geisler
hi@loopful.ai
2. Data We Collect
We collect only the data you actively provide:
- Early access sign-ups: email address, name (optional), company (optional), website (optional), and selected product interest. This data is collected when you complete the early access form.
- Server logs: standard web server logs including IP address, browser type, and pages visited. These are retained for up to 30 days for security and diagnostic purposes.
We do not use third-party tracking cookies. We do not run Google Analytics or Meta Pixel. Our infrastructure is EU-hosted and cookieless by default.
3. Legal Basis for Processing
Under the GDPR, we process your data on the following legal bases:
- Consent (Art. 6(1)(a) GDPR): when you tick the consent checkbox on our early access form, you consent to us storing your email and sending you relevant updates about Loopful.
- Legitimate interest (Art. 6(1)(f) GDPR): server logs are processed on the basis of our legitimate interest in maintaining the security and performance of our website.
4. How We Use Your Data
- To send you updates about Loopful early access (if you signed up)
- To respond to any enquiries you send us
- To maintain the security and stability of our website
We do not sell, rent, or trade your personal data to third parties.
5. Data Processors and Sub-processors
We use the following sub-processors:
- Resend (Resend, Inc.): transactional email delivery. Your email address is transmitted to Resend solely for the purpose of sending you the confirmation email and related updates. Resend is SOC 2 Type II certified.
- Vercel (Vercel Inc.): website hosting and edge delivery. Our application runs on Vercel’s EU edge network.
6. Data Retention
We retain early access sign-up data until you request deletion or until the Loopful service launches and onboarding is complete, at which point data is either transferred to your account or deleted. Server logs are retained for up to 30 days.
7. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data (“right to be forgotten”)
- Withdraw consent at any time (this does not affect processing prior to withdrawal)
- Data portability
- Lodge a complaint with your local data protection authority
To exercise any of these rights, email hi@loopful.ai. We will respond within 30 days.
8. Cookies & Local Storage
We use a single first-party cookie (loopful-locale) solely to remember your language preference. This cookie does not track you across websites and does not contain personal data. No consent is required for this functional cookie under ePrivacy Directive guidelines.
We also store a single localStorage entry (loopful_launch_banner_dismissed_v1) to remember if you have dismissed the site notification banner. This entry contains no personal data and is never transmitted to our servers.
9. International Transfers
Your data is processed within the EU/EEA. Where sub-processors have infrastructure outside the EU, we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).
10. Changes to This Policy
We may update this policy from time to time. We will note the “Last updated” date at the top of this page when we do. For material changes, we will notify you by email if you have signed up for early access.
11. Contact
Data controller: Nico Geisler
Email: hi@loopful.ai