Privacy Policy

1) Scope

This Privacy Policy applies to information collected:

• On our marketing website(s) (the “Site”);
• Through our hosted application/dashboard used by customers and their authorized users (the “Platform”); and
• Through ConnectLoop-powered widgets/agents embedded on a customer’s website or app (the “Widget”).

If you interact with a Widget on a third-party website, that business (our “Customer”) may have its own privacy policy describing how it uses information. In many cases, the Customer decides what information is collected via the Widget and how it is used.

2) Definitions

• Customer: A person or organization that subscribes to the Platform and deploys Widgets.
• Authorized User: A person who accesses the Platform under a Customer account (e.g., admins, team members).
• End User / Visitor: A person who interacts with a Widget on a Customer’s website/app.
• Customer Content: Data submitted to the Platform by or on behalf of a Customer, including conversation messages, form responses, files, lead/contact details, and configuration settings.

3) Our role: Controller vs. Processor

• Processor / Service Provider when we process Customer Content on behalf of a Customer; and/or
• Controller / Business for information we process for our own purposes.

If you are an End User/Visitor, requests about information collected via a Widget should generally be directed to the Customer that deployed the Widget (see Section 11).

4) Information we collect

A) Information you provide to us (Platform and Site)

• Account information: name, email, organization name, role/permissions, and authentication info.
• Billing/admin: billing contact, invoicing details, subscription status, and transaction records.
• Support/communications: messages you send us and logs shared for troubleshooting.
• Security: authentication, verification, and risk signals where relevant.

B) Information processed through Widgets (Customer Content)

• Identifiers and contact details (e.g., name, email, phone number);
• Professional or business details (e.g., company name, job title, inquiry type);
• Conversation content and metadata;
• Scheduling data (if enabled);
• Files/attachments (if enabled).

C) Information collected automatically

• Device and usage data (IP address, browser type, device identifiers, pages viewed, timestamps, referrers).
• Approximate location inferred from IP (not precise GPS unless separately permitted).

5) Cookies and similar technologies

• Essential functionality (auth, sessions, security);
• Preferences (saving settings);
• Analytics; and
• Marketing (where applicable and permitted by law).

Disabling cookies may affect certain features.

6) How we use information

• Provide, operate, maintain, and improve the Services;
• Process Customer Content at the Customer’s direction and enable Widget interactions;
• Provide support and service communications;
• Secure the Services, prevent fraud/abuse, debug issues, and enforce agreements;
• Manage subscriptions, invoicing, and payment administration;
• Conduct analytics; and
• Comply with legal obligations and protect rights and safety.

7) Payments, invoicing, and accounting (Stripe + QuickBooks)

Your payment information is also subject to the privacy policies and terms of these providers.

8) AI features and automated processing

ConnectLoop may offer AI-assisted features (e.g., generating replies, summarizing conversations, categorizing inquiries, routing leads).

9) How we disclose information

10) Connected Apps and third-party services

Customers may connect third-party tools (CRMs, scheduling, communications). When enabled, relevant Customer Content may be transmitted at the Customer’s direction and governed by those third parties’ policies.

11) Data retention

We retain information only as long as necessary to provide the Services, comply with legal/accounting requirements, and resolve disputes/enforce agreements. We may delete or de-identify data when it’s no longer needed.

12) Your rights and choices

13) Security

We use administrative, technical, and organizational measures designed to protect information, but no method is 100% secure.

14) International data transfers

If you access the Services from outside the U.S., information may be processed in the U.S. and other jurisdictions. Where required, we use appropriate safeguards.

15) Children’s privacy

The Services are not directed to children, and we do not knowingly collect personal information from children under 13 (or under the age required by local law).

16) Changes to this Privacy Policy

We may update this Privacy Policy. The Effective Date indicates when it was last revised. If changes are material, we’ll provide notice as required by law.